Privacy Policy
Last updated: August 16, 2026
AdventurePic makes AI photos of you, which means we handle something unusually personal: pictures of your face. This policy explains exactly what we collect, what we do with it, and what we will never do with it.
The short version
- Your selfies are used for one purpose: training a private model that only your account can use.
- We never sell your data, never share your photos for advertising, and never use your face to train models for anyone else.
- Deleting your account deletes your photos, your models, and your generated images.
1. Who is responsible
The data controller is Young Folks Consulting. Contact: contact us.
2. What we collect
- Account data — name, email, password (hashed), plan and credit balance.
- Photos you upload — the selfies you provide for model training. These are images of your face and are treated as sensitive data; in some jurisdictions the features derived from them may qualify as biometric information. We collect them only with your explicit action and consent.
- Trained models and generated content — the private model created from your photos, and the images and videos you generate.
- Payment data — handled by Stripe (web) or Apple (iOS). We never see or store full card numbers; we keep transaction records and subscription status.
- Usage and device data — logs, IP address, app version, and basic analytics needed to run and secure the Service. [Confirm analytics tooling, if any.]
3. What we use it for
- Training your private model and generating the content you request.
- Automated content moderation — uploads and outputs are screened (including face detection and NSFW detection) to keep the Service safe and enforce our Terms.
- Billing, support, and service communications.
- Security, debugging, and abuse prevention.
We do not use your photos, models, or generated images for advertising, and we do not use them to train shared or third-party AI models.
4. Who processes it for us
We use a small set of service providers, each only for the purpose listed:
| Provider | Purpose |
|---|---|
| DigitalOcean | Hosting and encrypted photo/image storage |
| Replicate | Model training and image generation (processes your training photos) |
| Google (Gemini) | Image generation for landmark scenes (processes reference photos you select) |
| Anthropic (Claude) | Generating scene descriptions (text only) |
| Amazon Web Services (Rekognition) | Automated face validation and content moderation |
| Stripe | Web payments |
| Apple / RevenueCat | iOS in-app purchases and receipt validation |
| Twilio SendGrid | Transactional email |
These providers act under agreements that limit their use of your data to providing their service to us. We may also disclose data if the law requires it, or as part of a merger or acquisition (in which case this policy continues to apply to your data).
5. How long we keep it
- Photos, models, and generated content: for as long as your account exists.
- When you delete your account (or a training photo), the associated files are deleted from our systems; residual copies in backups are purged within [30] days.
- Transaction records: as long as tax and accounting law requires.
6. Your rights
You can access, download, correct, or delete your data. Account deletion is available directly in the app; for everything else, contact us. Depending on where you live (including the EU/EEA, UK, and California), you may have additional statutory rights — to portability, to object to processing, to non-discrimination for exercising your rights, and to complain to your local supervisory authority. We honor these regardless of jurisdiction where practical.
We do not sell or "share" personal information as defined by the California Consumer Privacy Act.
7. Children
The Service is for adults. We do not knowingly collect data from anyone under 18, and our Terms prohibit uploading photos of minors. If you believe a child's photos were uploaded, contact us and we will delete them.
8. International transfers
Our infrastructure and providers are primarily in the United States. If you use the Service from elsewhere, your data will be transferred to and processed in the US.
9. Security
Data is encrypted in transit; stored photos and generated images live in access- controlled object storage with short-lived, signed access links. No system is perfectly secure — if a breach affects your data, we will notify you as the law requires.
10. Changes
If we materially change this policy, we will notify you by email or in the app before the change takes effect. We will never retroactively expand what we may do with previously collected photos without your fresh consent.
11. Contact
Questions about this policy, or to exercise any of the rights above: contact us.