Privacy Policy

1. Overview

Selfie Spark is a mobile application available on iOS and Android that uses artificial intelligence to apply creative effects and filters to your photos. Our service is designed with privacy in mind, collecting only the minimum information necessary to provide our services.

2. Information We Collect

2.1 Mobile Application

When you use the Selfie Spark mobile app, we collect:

• Device Tokens: A unique identifier for your device that allows us to provide our services and manage your account.
• Photos: Images you upload for processing. These are temporarily stored on our servers only during the AI processing operation and are immediately deleted after the processed image is returned to your device.
• Subscription Information: Managed through our payment partner RevenueCat to process in-app purchases and manage subscriptions.

We do not collect: Email addresses, names, phone numbers, or any other personally identifiable information beyond device tokens.

2.2 Website

Our website (selfiespark.app) is informational only and does not collect any personal data or use cookies. No information is stored when you visit our website.

3. Face Data and Biometric Information

Selfie Spark applies creative filters and effects to photos, which may include images containing faces. We do not retain face or biometric data. Your images and data are not stored on our servers at any point.

When you upload a photo that contains a face, our system applies the chosen filter or effect and transfers the resulting image directly to your device. We do not use face or biometric data for facial recognition, identity verification, tracking, profiling, or any other purpose.

4. How We Use Your Information

We use the information we collect to:

• Process your photos using AI technology and deliver filtered images to you
• Maintain your account and manage app functionality
• Process and manage your subscription
• Prevent abuse and ensure security of our services
• Improve and optimize our app performance and features

5. Data Retention

• Photos: Deleted immediately after processing is complete and the result is delivered to your device. We do not retain your images.
• Device Tokens: Retained as long as you use our service.
• Server Logs: IP addresses and access logs are retained for 14 days for security and abuse prevention purposes, then automatically deleted.

6. Third-Party Services

We work with trusted third-party service providers to deliver our services:

• Payment Processing: RevenueCat manages in-app subscriptions and handles payment information. We do not have access to your payment details.
• AI Processing: Your photos are processed using third-party AI services - Google Cloud and Fal.AI. Images are transmitted securely and deleted immediately after processing.
• Infrastructure: We use cloud hosting by Akamai and security services by Cloudflare to protect your data.

These third parties are contractually obligated to protect your information and use it only for the purposes we specify.

7. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted, and we use firewalls and encryption at rest to protect against malicious activity.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request information about the data we hold about you.
• Deletion: Request deletion of your account and associated data. Note that you must first cancel any active subscriptions through your iOS or Android device settings before we can delete your account data.
• Data Portability: Request a copy of your data in a portable format.
• Opt-Out: You can stop using our services at any time by deleting the app from your device.

To exercise any of these rights, please contact us from our contact page.

9. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

11. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). We process your data based on the following legal grounds:

• Contract Performance: Processing is necessary to provide our services to you.
• Legitimate Interests: We process data to prevent abuse and improve our services.
• Consent: Where required by law, we obtain your explicit consent.

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

12. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell your personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by updating the "Effective Date" below. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please write to us through our contact form.

Effective Date: 18 Nov, 2025