FotoShot Privacy Policy

This privacy policy explains how FotoShot (the "App") handles your information. It covers the iOS app and the Android app. The App is published by Neuralful AI Ltd, 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom ("we", "us"). Contact: support@neuralfulai.com.

1. Information we collect

No sign-up. You do not create an account, and we never ask for your name or email address. The first time you use an AI tool, the App creates an anonymous account with a random ID on our own sign-in server. We use that ID to apply usage limits and to recognise a subscription. The ID is shown in Settings as your Support ID.

Photos you choose to edit. When you run an AI tool, the photo you picked (and, for Face Swap, the second photo) is sent over an encrypted connection to our server for processing. The App only reads photos you pick with the photo picker or take with the camera. It does not scan your library. Photos can show faces. We use a photo only to make the result you asked for, and we do not use it to identify you or anyone else.

What you type. If you describe an edit (for example "make it snowy"), that text is sent with the photo.

Subscriptions. Payments are handled by the App Store or Google Play; we never see your card details. We use RevenueCat, linked to your anonymous account ID, to know whether you have an active subscription.

Device and usage limits. App version, platform, a random install ID (kept in the iOS Keychain on your phone, so it also survives deleting and reinstalling the App; it is not shared with other apps and is not used for advertising), and counters of how many edits you have made recently. If your iPhone supports Apple's App Attest, the App also asks Apple to confirm that it is the genuine App on a real device. We receive Apple's cryptographic proof and a key identifier, which we keep with your account, and nothing else about your phone. We use these to run the service, apply the free allowance and prevent abuse. Your IP address is used for the same purpose and is also in our server logs (see section 5).

Usage statistics (optional). Unless you turn it off, the App records simple events, such as which tool you used, whether it worked and how long it took, which screen led to the upgrade page, and whether you subscribed, using PostHog. Events carry your anonymous account ID and basic device details such as the device model, system version and language. They never include your photos, what you typed or file names. You can turn this off at any time in Settings → Share anonymous usage data.

Ad and upgrade decisions, to build our own models (optional). Unless you turn it off, each time the App could show an ad or the upgrade page, we record that moment with a few plain counters (how many times you opened the App, how long since you installed it and how long you have used it, how many results you have made and of which kind (fixing a photo, creating a picture, changing a background), how many you saved or shared, how many ads you saw or closed early, how many times you looked at the upgrade page and how long ago, whether you left the App while it was open, how many purchases you made, the time of day, how long into the session it was, and your country group and currency), a few facts about your phone (the phone model and brand, system version, where the App was installed from, whether it is charging or in low power mode, its battery level and heat, wifi or mobile data and whether that connection is metered, screen brightness, media volume, whether audio is playing or headphones are connected, language, region and currency, dark mode, text size and accessibility settings, screen size, whether the store lets you buy, whether photo access was given, and on Android the phone's memory and storage sizes) and what happened next (you left the App within a minute, or you subscribed). These records carry your anonymous account ID, never your name, email, photos, what you typed or your advertising ID. We use them only to train our own models that decide when it is best to show an ad or the upgrade page. No such model is used in the App today. In the EU, the UK, Iceland, Liechtenstein, Norway and Switzerland this is off until you turn it on in Settings (consent); elsewhere it is on until you turn it off. We do not use it to track you across other companies' apps or websites, and we do not sell or share it with advertisers.

Crash reports (optional). If the App crashes or hits an error, a diagnostic report (device type, system version, app version, error details and your anonymous account ID) is sent to Sentry. We configure it not to send screenshots or personal information such as your IP address. The same Settings switch turns this off.

Advertising. Free users see ads from Google AdMob. AdMob may use your device's advertising ID and collect information as described in Google's policies. On iOS we ask your permission before tracking. In the EU and the UK we show Google's consent message first, and Settings → Ad privacy choices lets you change your answer.

Reports. If you report a result, we store the reason you chose, which tool made it and the app version. The report does not include the photo.

On your device. The edits you save are kept in your photo library and in the App's local history on your phone, not on our servers.

We do not collect your precise location, contacts, name or email.

2. How we use your information

To edit your photos and return the results to you.
To apply the free allowance, recognise subscriptions and keep the service secure.
To review reports about AI results and improve our safeguards.
To find and fix crashes and improve the App (if you allow usage statistics and crash reports).
To show ads to free users.

We do not sell your personal information.

Legal bases (UK and EU). Editing your photo and recognising your subscription: performing our contract with you. Security, abuse prevention and fixing crashes: our legitimate interests. Personalised ads and usage statistics: your consent, which you can withdraw as described above.

3. How your photos are handled

Your photo goes to our server and then to an AI service provider (Replicate) only to make your result.
On our server the photo is held in memory (not saved to disk or a database) while the job runs. It is deleted as soon as the job ends, and in any case within 15 minutes. The finished picture is kept for 5 minutes so the App can download it, and 2 minutes after you download it, then deleted.
Our AI provider processes photos on our behalf and keeps them only briefly under its own policy: Replicate states that inputs, outputs and logs of API requests are automatically removed after an hour by default.
We do not use your photos to train AI models.
Results you save are stored on your device, not on our servers.

We share information only with service providers that help us run the App, and only as needed:

RevenueCat: subscription management (account ID, purchase records).
Apple App Store and Google Play: payments.
Replicate: AI photo processing (the photo and text you send).
Google AdMob: ads for free users (advertising ID, device and usage data).
PostHog: the software that records usage statistics, if you allow them. We run it ourselves on a server in Frankfurt, Germany (Oracle Cloud), so this data does not go to PostHog the company. Encrypted backups of it are kept for up to 14 days on Google Drive; Google cannot read them.
Sentry: crash reports, if you allow them. Stored in the United States.
Contabo: hosting for our servers.

We may also disclose information if the law requires it or to protect our rights and our users' safety. Some providers are outside the UK and EU; where that happens we rely on the safeguards the law provides.

5. Data retention

Account, install and device records are kept until you delete them (see section 6).
Usage counters for the free allowance, which include your IP address, expire within about 25 hours.
Server access logs, which include IP addresses, are kept for up to 30 days.
Photos are not kept by us (see section 3).
Ad and upgrade decision records (above) are deleted after 400 days, and straight away when you delete your data.
Crash reports and usage statistics are kept only as long as needed to find and fix problems and to understand how the App is used, and are not linked to your name or email.
Reports about AI results are kept so we can keep improving our safeguards.

6. Deleting your data

In the App: open Settings and tap Delete my data, then confirm. The App tells our server to delete your anonymous account straight away. That removes the sign-in, the account and install records, your device record and your usage counters. Pictures you saved stay in your photo library and in the App's local history on your phone. After deleting, the next time you use an AI tool the App creates a new anonymous account.

Without the App, or if it does not work: email support@neuralfulai.com with the subject "Delete my FotoShot data" and the Support ID shown in Settings (tap it to copy). We will delete the account and records linked to it within 30 days and confirm by email. Without the Support ID we cannot tell which anonymous account is yours, so please include it.

What deleting does not do. It does not cancel a subscription: cancel it in your Apple ID settings or in Google Play, and tap Restore Purchases later if you want to keep it. Reports about AI results are kept with the link to your account removed. RevenueCat keeps the purchase record for a deleted account as the law and its policy require. Usage statistics and crash reports already sent to PostHog and Sentry are kept until their retention ends, and are no longer linked to a live account.

7. Children

FotoShot is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

8. Security

Data is sent over encrypted connections (HTTPS). Access to our systems is limited to staff who need it. No system is completely secure, but we work to protect your information.

9. Your rights

Depending on where you live (for example the UK or the EU), you may have the right to access, correct, delete or export your data, and to object to or restrict certain processing. To use these rights, contact support@neuralfulai.com. You can also complain to your local data protection authority (in the UK, the ICO).

10. Changes

We may update this policy. We will post the new version on this page with a new effective date.

11. Contact

Neuralful AI Ltd, 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom. Email: support@neuralfulai.com.