Pictura Terms of Use and Privacy Policy

Effective Date: 31.10.2026

Pictura Privacy Policy

Pictura provides AI photo features such as upscaling, restoration, colorization, filters, and headshots. This Privacy Policy explains what data we process, how we use it, and when we share it with third parties to provide the service.

1) Data We Collect and Process

We do not sell personal data and we do not use your photos, prompts, or outputs for advertising.

A) Content you provide for AI processing

• Photos and images: The photo(s) or image(s) you select from your library or capture with your camera (which may include faces).
• Optional text inputs: Any text you enter such as prompts, style choices, or descriptions.
• Generated outputs: The resulting AI-processed images returned to you in the app.

B) Technical and operational data

• Request metadata: Limited technical information needed to operate and troubleshoot processing requests, including app version, selected feature/tool, processing settings, status, error details, timestamps, network information and service identifiers. AIProxy uses a device-associated client identifier to attribute and protect processing requests.
• Service and security information: Firebase Authentication, App Check and Remote Config process account or installation identifiers, authentication and attestation information, and technical connection information to authenticate access, prevent abuse and deliver the app's configuration.
• Crash diagnostics (Firebase Crashlytics): Crash logs and diagnostic information to improve app reliability. This may include device and OS information, app version, crash traces, and performance diagnostics. We do not use Crashlytics data for advertising.

C) Face data clarification

Pictura does not collect or create biometric face data, faceprints, facial-geometry templates, identity profiles, or face-recognition identifiers. Pictura does not use faces to identify, authenticate, track, or profile a person.

A photo selected or captured by a user may visibly contain a face. In that case, the pixels depicting the face are processed only as part of the complete image to perform the editing feature the user requests or, if you choose to report a result, to review that report. Some enhancement and restoration tools analyze facial regions to preserve or improve their visual appearance, but they do not determine identity or create a reusable face record. Pictura does not retain face information separately from the image.

D) Account, purchase and support information

• Account: Pictura creates a Firebase guest account with a generated user identifier to access its online services. If you choose Sign in with Apple, Firebase Authentication processes the Apple sign-in credential, the name and email address Apple shares with us (including a private relay address if you choose Hide My Email), and your linked account identifier.
• Purchases: Apple processes payment. RevenueCat receives purchase and receipt/transaction information, product identifiers, subscription or lifetime entitlement status, and its customer identifier to validate purchases, restore access, prevent fraud and analyze purchases and paywalls. We also enable Apple AdServices attribution-token collection through RevenueCat to measure our advertising. When Apple attributes an install to an ad, RevenueCat can store the associated campaign, ad group, keyword, ad and country/region information on its customer record. Pictura does not receive your payment-card number or bank-account details from Apple's purchase sheet.
• Support: If you contact us, we receive the message and contact details you send. The app's support email includes device/app information, account, AIProxy client and RevenueCat identifiers, used free tries and subscription identifiers so we can investigate your issue. You can review the email before sending it. If your device has no mail account, the app copies the same details for you to paste into our web contact form.
• Content reports: If you report an AI result, the app prepares an email to Pictura support. It contains the reason you select and any comment you add; how the image was made (the feature, the model and, for AI Edit, the prompt); your account identifier and AIProxy client identifier, app version, OS version and locale; and a reduced-size copy of the reported image without its metadata, unless you turn off Attach this image. You send the email from your own mail app and can review it before sending. If you use our web contact form instead, the report contains text only. We use reports only to review the reported content and enforce our content rules, which can include blocking access for the account and device involved, and delete them after review.

E) Usage and advertising measurement

Google Analytics for Firebase receives usage events and technical context, including app launches and screens, onboarding steps, tool and filter selections, processing outcomes and duration, free-trial use, paywall and purchase/restore events, save/share actions, app/OS/device information, and generated installation or session identifiers. Google Analytics also receives the age range, gender, discovery source, creative goals, editing experience and preferred tools you select during onboarding, and associates events with your Firebase account identifier when available.

PostHog receives automatic app-lifecycle and screen-view events, generated user/session identifiers and app, device, locale and connection context. The app sends these events to PostHog's EU endpoint. Analytics services may derive approximate region from network information.

TikTok's App Events SDK receives app-event and device information for measuring and improving Pictura's advertising. Starting with version 4.4.1, Pictura initializes this SDK and sends its events only after you allow Apple's tracking permission. This includes install, launch, return-visit and completed-tutorial events, purchase and transaction information, app/session identifiers, device and OS details, IP/network information, locale, and advertising or vendor identifiers. We do not submit your photos, editing prompts or generated images as advertising event content.

2) How We Collect Data

We process data when you:

• Select or upload a photo from your device.
• Capture a photo with your camera.
• Enter optional prompts, style choices, or descriptions.
• Affirmatively submit an AI processing request after allowing Cloud AI Processing.
• Open and use the app, choose onboarding preferences, sign in, make or restore a purchase, or send us a support message. The relevant service SDKs collect the technical and usage information described above.

3) Why We Use Data

We use your data to:

• Provide the AI feature you request and return the result.
• Operate and maintain the service (including processing workflows and delivery of results).
• Troubleshoot and support (for example, investigating failures and responding to support requests).
• Detect, prevent, and investigate abuse, fraud, or misuse (for example, repeated automated requests or attempts to exploit the service).
• Review reported content and enforce our content rules.
• Improve reliability and performance (for example, reducing crashes and improving processing stability).
• Authenticate accounts, validate purchases, restore paid access and respond to support requests.
• Understand feature use and onboarding, evaluate paywalls and improve the product.
• Measure and improve Pictura's advertising using attribution data and permitted app events.

4) Third-Party AI Processing (Data Sharing)

On-device features do not send the selected image to an AI provider. To provide a cloud AI feature requested by the user, Pictura sends the minimum content needed through AIProxy, our API gateway, and then only to the provider used by the selected feature:

• AIProxy (Privacy Policy)
• fal.ai (Privacy Policy; retention documentation)
• Replicate (Privacy Policy; retention documentation)
• OpenAI API (Privacy Policy; data-controls documentation)
• Google Gemini API (Privacy Policy; retention documentation)

Some models offered through fal.ai, including ByteDance Seedream, run within fal.ai's service.

What we share

• The image(s) you submit, which may visibly contain faces, and
• Optional text you provide (prompts, style choices, descriptions), and
• The selected tool, model, and limited processing parameters required to execute the feature.

Why we share it

We share this data only to process your request (for example: upscale, restore, colorize, filters, headshots) and return the output to you.

Important notes about third parties

Cloud content is processed on systems operated by AIProxy and the selected provider. These systems may be located in the United States or other countries where the provider or its subprocessors operate. Pictura does not maintain a separate server-side database of user images.

Third-party providers process data according to their own terms, privacy policies, and the retention periods described below.

We do not authorize third parties to use your content for advertising on our behalf.

We do not use your submitted images or prompts to train our own models.

5) Permission and Consent

Before any photo/image or optional text is uploaded for third-party AI processing, Pictura requests your consent in-app.

• Your selected images and prompts are not uploaded to cloud AI providers until you agree.
• If you choose Not Now, your content is not sent to cloud AI providers and features that run entirely on your device remain available.
• If you later select a cloud feature, Pictura presents the disclosure again before processing.
• You can withdraw permission for future uploads under Settings > Privacy > Cloud AI Data Sharing.

Cloud AI permission controls image and prompt sharing for processing. It is separate from account, purchase, diagnostic and usage-analytics processing described in this policy. Choosing Not Now for cloud AI does not disable those other services. Apple's tracking permission can be changed in iOS Settings. Version 4.4.1 adds an app-level control that initializes TikTok only after tracking is authorized and pauses event uploads when authorization is withdrawn. Older versions may initialize the SDK before that choice; update to version 4.4.1 or later for this control. Declining tracking does not change the editing features available to you.

Where required by applicable law, we rely on your consent and service performance necessity to process content needed to deliver requested AI features.

6) Data Retention and Deletion

On-device retention controlled by the user

• Selected images and outputs: Pictura keeps local copies in the app's sandbox so the user can view their in-app editing history. These copies remain under the user's control until the user deletes an item or clears the history, or until the app is uninstalled.
• Temporary working files: Temporary processing files are removed during app cleanup and may also be purged by the operating system.
• Optional text: Pictura keeps the prompt used for an AI Edit result only on your device, with that item in your editing history, so a report can say how the image was made. It is deleted when you delete the item or clear the history. Apart from the cloud request you make, a prompt leaves your device only in a content report you choose to send.
• Face information: Pictura does not extract or retain face data separately. Any visible face remains only within the image and follows the image-retention rules in this section.

Third-party retention

Pictura downloads the result to the user's device when processing finishes and does not intentionally keep a server copy. The providers' standard retention periods apply to cloud requests, including any face visible in an image:

• AIProxy: The gateway transmits the request to the selected provider. Its request history stores limited usage data such as originating IP address, response status, error response bodies, and request-size metadata; its published policy does not list successful request bodies as stored data.
• fal.ai: Request inputs and outputs, including an input image embedded in the request, are retained for 30 days by default. Returned media files are hosted on fal.ai's CDN for at least 7 days by default. Pictura does not use fal.ai persistent storage.
• Replicate: For API predictions, input parameters, output values, files, and logs are automatically removed after one hour by default.
• OpenAI API: Inputs and outputs may be retained for abuse monitoring for up to 30 days by default, unless legal obligations require longer retention. API data is not used for model training by default.
• Google Gemini API: Prompts and responses, including inline images, are retained for 55 days for abuse monitoring and required legal or regulatory disclosures. Pictura does not use the Gemini File API, Grounding, datasets, or stored Interactions for these image requests.

Provider retention periods may change when a provider updates its service. Pictura will update this policy when it becomes aware of a material change. A provider may retain information longer only when legally required.

Accounts, analytics and purchase records

• Account deletion: Starting with version 4.4.1, you can delete a guest or Apple-linked account under Settings > Account > Delete Account. This deletes the Firebase account identity. For an Apple-linked account, the app requests authorization to revoke its Sign in with Apple connection. Continuing as a guest creates a new guest identifier. If you use an older version, contact us at the email address below to request account deletion, or update to version 4.4.1 or later to use this control.
• Local history and Apple purchases: Deleting your account does not delete your on-device editing history, cancel an Apple subscription or remove purchase records needed to restore an entitlement. Delete history separately in the app, and manage or cancel subscriptions in your Apple Account's subscription settings. Billing continues until you cancel through Apple.
• Firebase Authentication: Google retains authentication information until account deletion is initiated; its published schedule allows up to 180 days to remove it from live and backup systems. Authentication IP logs are retained for a few weeks. This provider cleanup schedule is separate from losing access to the deleted account.
• Crash diagnostics: Firebase's published schedule retains crash traces and associated installation identifiers for 90 days before starting removal from live and backup systems.
• Analytics and attribution: These records follow each service's applicable retention and deletion settings and can outlive the Firebase account. Google Analytics and PostHog event history is not automatically erased by deleting Firebase Authentication. Retention depends on the analytics project or plan and the purpose of the record; we do not represent the short AI-request retention periods above as applying to all analytics data.
• Purchases and support: Purchase and entitlement records may be needed while paid access or restoration remains available and for fraud prevention, refunds and legal obligations. Support correspondence is retained as needed to investigate and resolve your request and associated issues.

For account, analytics, attribution or support-data access/deletion requests, contact jonathan.benavides@suyai.ch. We may need limited account or device information to find the relevant records. Provider-side deletion can take time and some records may need to be retained for legal obligations or to protect against fraud. Local SDK resets and app deletion do not by themselves guarantee deletion of historical provider records.

Provider information: Firebase privacy and retention, PostHog storage and deletion, RevenueCat privacy.

Requests about AI processing

To delete on-device images immediately, delete the item or clear the in-app history. To request deletion of identifiable provider-side request data before its automatic expiry where supported, contact jonathan.benavides@suyai.ch and include the approximate date/time, feature used, and country/storefront.

7) Security

We use reasonable safeguards designed to protect information, including:

• Encryption in transit (where supported by the relevant connection and provider).
• Access controls and least-privilege practices.
• Monitoring and operational measures to reduce risk.

No method of transmission or storage is 100% secure.

8) International Transfers

Your data may be processed in countries where Pictura or its service providers operate. Data protection laws may differ from those in your jurisdiction.

9) Children and Minors

• Do not upload images of minors without permission from a parent or legal guardian.
• We do not knowingly collect personal data from children where prohibited by law.
• If you believe a minor's data was submitted without appropriate permission, contact us so we can review and take appropriate action.

10) Your Rights and Choices

Depending on your location, you may have rights to request information about how data is handled and to request deletion.

There may be limited provider-side data available to access or delete after an automatic retention period has expired.

You may withdraw consent for future AI uploads under Settings > Privacy > Cloud AI Data Sharing or by uninstalling the app. Withdrawing consent disables cloud AI features but does not affect on-device editing.

11) Analytics and Advertising

Our analytics and advertising recipients are Google Analytics for Firebase, PostHog, RevenueCat for purchase/paywall analytics and Apple attribution, and TikTok for advertising measurement. Firebase Crashlytics receives crash diagnostics. Section 1 explains the data each function uses; section 6 explains retention and deletion.

These services receive technical identifiers and event information. We do not use your photos, editing prompts or generated outputs for advertising. Error diagnostics may include information returned in a service's error response. The version 4.4.1 TikTok tracking control described in section 5 is distinct from the permission for cloud image processing.

12) Consent to Share Consumption Data with Apple

By using our app and making in-app purchases, you consent to our sharing of data regarding your usage and consumption of purchased content with Apple, as part of our efforts to resolve refund requests. This information may include details about how you have accessed and interacted with the purchased content. The purpose of sharing this data is to help Apple make an informed decision regarding refund requests. We ensure that such data sharing is done in compliance with Apple's policies and only as necessary to process your requests.

13) App Store Privacy Disclosure

Pictura's App Store privacy disclosures describe the data collected by the app and its service providers, including account information, cloud-processing content, service/device identifiers, purchase history, usage analytics, diagnostics and advertising measurement where applicable. Some collection occurs only when you choose a feature or grant the relevant permission.

14) Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted in-app or on our website with a revised Effective Date. Continued use of Pictura after an update means the updated policy applies.

15) Contact

For privacy questions or requests, contact: jonathan.benavides@suyai.ch

Pictura Terms of Use

Pictura is an image enhancement app that allows users to transform photos and other images using AI-powered features such as upscaling, restoration, colorization, filters, and headshots.

1) Outputs and Limitations

AI-generated results can vary based on input quality and model behavior. Pictura does not guarantee specific results for every image or use case.

2) Content Rules

We have zero tolerance for objectionable content. You may not use Pictura to create:

• Sexual or nude images.
• Images that harass or demean someone.
• Images of real people without their consent.

Violations lead to removal of the content and blocked access to Pictura. You can report a result that breaks these rules from within the app.

3) Pro Version and Purchases

Some features require a paid plan or in-app purchase. Features, pricing, and availability may change over time due to product updates, technical changes, or business decisions.

4) Questions

For questions, suggestions, or bug reports, contact: jonathan.benavides@suyai.ch