Privacy Policy

Your photo

Your photo is used as the reference for the generated picture. It goes to a third-party AI service, such as OpenAI, that generates the picture. We never use it to train anything.

• The moment a generated picture or video reaches your phone, we delete it and the photo you sent. If the app does not fetch it within 24 hours, we delete it then.
• With the photo, we send the AI service a code for your account, never your name or email, so the AI service can tell us which account sent a photo that breaks its rules.
• The AI service may keep a copy of your photo and of the result for up to 30 days for its safety checks, or longer if the law requires it.
• We don't use your photo to recognise or identify anyone, and we keep no face data from it.
• If other people are in your photo, all of this applies to them too.

A generated video is made with one of your generated pictures as the reference. The app sends that generated picture to our servers and on to a third-party AI video service, such as Replicate. We delete the generated picture as soon as it has gone on to the video service, and the video the moment it reaches your phone, or after 24 hours if the app does not fetch it. The video service says it deletes the generated picture and the video an hour after the video is made.

You pick photos with Apple's photo picker, and the app sees only the ones you choose. It asks to use your camera if you take a new photo, and for permission to add pictures to Photos.

What we keep

We keep the following while your account exists:

• Your account: the identifier Sign in with Apple gives us. The app never sends us your name or email address. When you agreed to the Terms of Use and this policy, and which version of each. If your account is paused because photos were flagged, when that began and when it was lifted.
• Each picture or video you make: the year and settings you picked, the short code printed on it, whether it worked or was flagged by the AI service's moderation, when it was made, what it cost, technical details of how it was made, and anything you told us about it, such as a thumbs up or down.
• Actions you take in the app: basic actions you take in the app (such as creating pictures, viewing results, opening credit packs, saving or sharing, etc.) and how each ended. Before you sign in, the app keeps these under a random code that the app makes up and stores only inside itself, so deleting the app deletes the code. When you sign in, the app sends us that code; we move those actions to your account and delete the code. If you never sign in, the actions stay under the code, which says nothing about you or your phone. Never a picture, never where a share went, and nothing that identifies your device. This stays in our own database; we use no outside analytics service.
• Your credits and purchases: your balance, and for each purchase the pack, Apple's transaction ID, the price Apple reports, and any refund. Apple handles the payment; we never see your card.
• Words you write to us in the app: feedback, a report, a message to support — so that a person can read them, and so we can see which parts of the app people need help with. The words only, never the picture they are about. If you email us, we keep your email.
• A hash of each photo you send: a short code worked out from the file itself, so we can tell one upload from another and look into abuse reports. It says nothing about what is in the picture and cannot be turned back into one.

We keep these until you delete your account; what happens then is under Deleting your account.

When the app connects, our servers see your IP address. We use it for about a minute to stop abuse, and we don't store it. The companies that run our servers and carry their traffic may log it.

Our servers also keep logs of which account did what and when — never your photo or your words — which our hosting company keeps for a limited time, to fix problems.

We use no analytics, advertising or tracking tools, and we don't sell your data or share it for advertising.

Why we use it

To give you the service you asked for: your account, your pictures and your credits. To keep the service safe from abuse: the file hash, the account code sent to the AI service, and IP addresses. To understand how Erafy is used and make it better: which features people use and buy, and what people write to us about, studied in our own database. And because the law requires us to keep records of purchases.

Who else receives it

• The third-party AI services that generate pictures and videos, as described above. They are in the United States, so your photo is processed there. It goes there only because that is how your result is made.
• Apple, for signing in and for payments.
• The company that hosts our servers and database. The servers and the database are in the Netherlands.
• The companies that carry the app's traffic to our servers and host our email.

The AI services and the companies that host and carry our data protect it at least as well as this policy says. We share it with no one else unless the law requires it.

Deleting your account

You can delete your account in the app, under Settings → Delete account, once nothing is being made. The app offers to save your pictures and videos to Photos first, then clears them from the app.

We delete the account you signed in with, anything you wrote to us in the app, and the hashes of the photos you sent. What stays, with nothing that names you, is the bare account record under a random account number (with when you agreed to the terms, and which version), a line for each picture and video — the year, the settings you picked, your thumbs up or down, when it was made and what it cost — the actions you took in the app, and the record of what you bought, including Apple's transaction ID, kept for the books. Never the picture or the result. Emails you sent us stay in our mailbox unless you ask us to delete them.

One thing more: a one-way hash of the account you signed in with. It cannot be turned back into your account, and it is there so that signing up again does not count as a first time.

Your rights

You can ask for a copy of the data we hold about you, or ask us to correct or delete it, by writing to our Privacy Officer at [email protected]. You can withdraw your consent at any time: stop sending photos, or delete your account in the app. You can also complain to the data protection authority where you live.

Children

Erafy is for people 18 and over. We don't knowingly collect data from anyone younger.

Changes

If this policy changes, the version number at the top goes up and the date changes with it, and the app asks you to agree to the new version before you make another picture or video.