privacy policy

This Privacy Policy describes how Photogenik Inc. (“Photogenik,” “we,” “us,” or “our”) collects, uses, and discloses information through the Photogenik mobile application and related services. Features and processing vary by app version and the features you choose. This notice does not replace any separate permission required for a feature.

1. Who we are

The App is published by Photogenik Inc. This policy applies to information processed through the App, our website at photogenik.app (the “Site”), and our related services. It does not apply to third-party services that have their own privacy policies, which are referenced below.

2. Information we collect

2.1 Information you provide

• Account details. When you create an account, you sign in with Sign in with Apple, Google, or an email address and password. We collect your email address and, only if you choose to share it through Sign in with Apple, your name. Authentication is handled by Google Firebase Authentication.
• Optional reference photos. You may choose photos you like during onboarding or in Profile. These references are stored on your device, are not uploaded by this feature, and are optional. You can replace or remove them in Profile; pose access does not depend on them.
• Best Shots inputs. If you expressly allow AI analysis and use Best Shots, we receive smaller copies of the photos you select, limited technical ranking metadata, and a pseudonymous authenticated request identifier. Photos may show faces, expressions, and other visible details. We use these details only to assess the photographic moment and do not use them to identify a person or create a biometric profile.
• Coaching inputs. Cloud coaching processes camera or screen frames and session context needed to respond to your request, as described in Section 4.
• Best Shots preferences. We may save derived photo-selection preferences to your account to personalize recommendations; these preferences are separate from the selected image files.
• Feedback. If you respond to an in-app feedback prompt, we collect your rating and any message you choose to provide.

2.2 Information collected automatically

• Usage analytics. We use PostHog to measure onboarding, paywall and purchase outcomes, coaching connections and guidance, photo saves, Best Shots, editor, pose-library, and lesson use. Events can include pseudonymous account, installation and session identifiers, feature and experiment identifiers, durations, counts, and success or failure categories. RevenueCat sends subscription lifecycle events to PostHog and Google Analytics on our behalf.
• Device and diagnostic data. Analytics, error reporting, and feedback can include technical context — app version and build, device model, operating system version, and your device locale — to help us reproduce and resolve issues.
• Subscription and purchase information. RevenueCat processes your pseudonymous App User ID, Firebase app-instance and PostHog identifiers, product and offering identifiers, purchase and transaction information, price and currency, subscription status, and related lifecycle events so we can provide premium access, test subscription offers, measure paywall performance, and understand subscription changes.
• Advertising measurement. App versions with Singular collect app and device context, including operating system, device model, vendor and installation identifiers, IP address, user agent, event timestamps, tracking choices, and selected app-use events. With tracking permission, this can include IDFA and a pseudonymous account identifier. Attribution records can include the advertising campaign that led to an install or conversion. RevenueCat supplies subscription lifecycle information, including trials, purchases, conversions, renewals, cancellations, refunds, amounts and currency, together with attribution identifiers and sharing choices, to Singular.

2.3 Information we do not collect

We do not request GPS location, contacts, or health data. Our service providers receive network information such as IP addresses when your device connects; this can indicate an approximate location. In app versions with advertising measurement, we request permission before accessing a usable advertising identifier (IDFA), as explained in Section 6.

2.4 Information you submit on our website

• Early access sign-up. If you join the early access list on the Site, we collect your email address, the time you signed up, and a record of the consent you gave, so we can invite you to try new features before they are released and ask for your feedback.
• Creator club applications. If you apply to the creator club at photogenik.app/creators, we collect your full name, email address, country of residence, the social media accounts or links you list, an optional portfolio or website link, your confirmation that you are 18 or older, your consent to be contacted by email about the creator club, and the time you applied. To evaluate your application, we may view the public profiles and content at the links you provide.
• Abuse prevention. To protect these forms from spam and automated abuse, the Site uses Firebase App Check with Google reCAPTCHA Enterprise, which collects device, browser, and interaction signals under Google’s terms.

The Site does not use advertising cookies or third-party advertising trackers.

3. Information that stays on your device

A substantial part of the App runs on your device. Local processing does not itself upload your photos. Cloud sharing, when enabled, is described in Section 4:

• Local face analysis. Current camera, beauty, Best Shots, and lesson features can use Apple’s Vision framework to detect faces and facial landmarks, such as the positions of the eyes, mouth, and face outline. These measurements support framing, local retouching, photo comparisons, and photography lessons. They are not used to recognize your identity, authenticate you, or build an identity-matching face template. Live face-analysis buffers are used during processing. Saved photos and derived photo-assessment results, such as face counts, eye-openness estimates, and photo-quality scores, can remain on your device with your capture or Best Shots history until you remove that history or the App. If you enable a cloud feature, selected images and relevant ranking or coaching context may be transmitted as explained in Section 4; the local-analysis description is not a promise that every image containing a face always stays on your device.
• Depth-based framing guidance. The App’s live coaching features (“GuideMe” and “PoseMe”) use on-device depth from your device’s camera to measure distances in the scene, such as how far you are from a wall behind you or where the floor sits in the frame, so the App can suggest framing and place a posing guide. This depth reflects the surrounding scene rather than identifying you, is processed live in device memory, and is not recorded, stored, or transmitted.
• Captured photos. Photos and thumbnails you capture in the App are stored within the App on your device. Copies or previews can be transmitted when you use the cloud features described below; local capture alone does not upload your saved photo library.
• Capture history, pose favorites, and preferences are stored locally on your device.

Find Your Angles has been retired. Earlier versions stored a local scan profile and could sync derived scores and recommendations to your account. The new experience does not use these legacy profiles. They are temporarily retained for compatibility with earlier app versions; launching or signing in to the updated app does not delete them.

4. Camera and photos

The App requests access to your camera and photo library solely to provide its features:

• Camera — to provide live posing and framing guidance. Local framing processes the feed on your device; cloud coaching also transmits image frames as described below.
• Photo library (read) — so you can review and improve existing shots, if you choose to use an existing photo.
• Saving to your library (add-only) — the App requests add-only access in order to save a captured photo to your library only when you choose to save it. This permission does not allow the App to read or browse your existing photos.

4.1 Best Shots AI analysis

Best Shots uses Google, provided through Google Vertex AI on Photogenik’s Google Cloud service, to compare and rank a group of photos you select. Before the first analysis, the App identifies Google, explains what will be sent, and asks for your express permission. Declining does not upload photos or charge a Best Shots credit. You can revoke permission later in Profile → privacy → AI permissions (Privacy & Data in earlier versions); revocation prevents future Best Shots uploads unless you give permission again.

If you consent, Photogenik sends smaller copies of only the photos you selected, together with limited technical ranking metadata and a pseudonymous authenticated request identifier. Your original files and the rest of your photo library are not sent. Photogenik erases its uploaded-image buffers when the request finishes. We retain photo-free ranking results with associated request and credit records in our backend so completed results can be recovered and retries do not charge you twice. These records can remain after a short-lived response cache expires; they are not automatically deleted after 15 minutes. See Section 8 for retention and deletion information.

Google processes the selected photo copies under its Vertex AI data-governance practices. Google does not use customer data to train or fine-tune AI models without prior permission or instruction. Google states that its AI services may, by default, cache inputs, outputs, and derived data in project-isolated memory for up to 24 hours to improve service performance; Google may also log prompts for abuse monitoring. These practices may change and depend on our Google Cloud configuration. For current details, see Vertex AI and zero data retention.

You can change these permissions at any time in your device’s Settings under Privacy & Security.

4.2 Camera coaching and iPhone camera connection

Cloud coaching sends image frames and relevant session context to Google to generate posing and photography guidance. Comparison frames may be held in device memory during a session. Depth maps used for local framing are not the same as these transmitted image frames.

When you start iPhone camera coaching through iOS screen broadcasting, visible screen content can be captured for coaching, including content outside Photogenik. Avoid displaying private messages or other sensitive information during a broadcast, and stop the broadcast using the iOS controls when finished.

Optional voice controls use microphone permission. Depending on the coaching mode, your spoken direction is transcribed on your iPhone and sent as text, or microphone audio is sent to Google for processing. Camera images and coaching context may accompany the request. Coaching analytics record interaction counts and outcomes rather than your speech or frame contents.

Camera coaching uses a Google AI service with different data-handling terms from the Google Cloud service used for Best Shots. Google’s handling depends on the service and billing configuration; see the Google AI service terms. We do not promise that all cloud inputs are immediately deleted by Google.

In the updated app, iPhone camera coach, Photogenik live coach, and Best Shots each have a separate AI-sharing choice that starts off. You can enable or withdraw these permissions in Profile → privacy → AI permissions. Turning a feature off stops its active cloud session and prevents future sharing for that feature. It cannot recall information already sent to a provider, which remains subject to the retention practices described above.

4.3 Photo editor

The photo editor processes your photos on your device.
Editor usage events, such as applying adjustments and saving photos, are described in Section 6.

5. How we use information

We use the limited information we collect to:

• create and secure your account and authenticate sign-in;
• provide cloud coaching, selected-photo ranking, and personalization;
• provide, maintain, and improve the App and its features;
• understand which features are used so we can prioritize improvements;
• measure how people discover Photogenik and improve our advertising for app installs, trials, and paid subscriptions, subject to applicable permission and sharing choices;
• respond to your feedback and provide support;
• manage your subscription and entitlements; and
• review creator club applications and contact applicants about creator collaborations;
• send early access invitations and updates you signed up for;
• detect, prevent, and address technical issues, fraud, or abuse, and comply with legal obligations.

Where the EU or UK General Data Protection Regulation applies, our legal bases for processing are performance of a contract (providing the App and your account), your consent (camera, photos, optional feedback, early access sign-ups, and creator club applications), consent where required for advertising tracking and measurement, and our legitimate interests (securing and improving the App and the Site, and protecting our forms from abuse).

6. Analytics and tracking

PostHog is our primary product analytics service. We link pseudonymous app activity with RevenueCat subscription events to understand which experiences lead to useful results, trial conversion, renewal, and retention. Firebase Analytics also receives subscription lifecycle events and platform analytics. When you sign in, activity may be associated with your account identifier; pseudonymous does not mean anonymous. We do not intentionally include photos, screen frames, recognized speech, or pose-search text in product analytics events. PostHog session replay and automatic screen-view and element-interaction capture are disabled in the current app configuration; error capture is enabled.

In app versions that include advertising measurement, we use Singular to measure installs and selected actions, such as completing onboarding, viewing a paywall, realizing value from a feature, starting a trial, and beginning a paid subscription. RevenueCat sends subscription lifecycle events to Singular, including when the App is closed. Singular sends selected install and conversion information to Meta to measure and optimize Photogenik advertising. Depending on your choices and the measurement method, advertising partners may link permitted identifiers and events with information from their own services for advertising measurement. Product analytics and advertising measurement are separate uses; we do not send photos, camera or screen frames, speech, pose-search text, or onboarding answers through our Singular event integration.

On supported iOS versions, we ask for Apple’s App Tracking Transparency permission before enabling tracking-related identifiers. If you allow tracking, we may use IDFA and pseudonymous identifiers for advertising attribution. If you decline or tracking is restricted, the App remains usable, we do not collect a usable IDFA, and we enable limited-data-sharing settings. Limited measurement, subscription reporting, and Apple’s privacy-preserving attribution may continue; declining tracking does not turn off all product analytics or delete previously collected information. Older app versions without this integration do not begin collecting these identifiers merely because this policy was updated.

You can change your tracking choice in iOS Settings > Privacy & Security > Tracking. For other privacy requests, including objections to advertising-related sharing or deletion requests, contact hello@photogenik.app. Apple’s tracking permission is separate from camera, photo, microphone, and AI-feature permissions and does not replace other consent required by applicable law. You can learn more about how Google processes app data at Google’s Business Data Responsibility page.

7. Third-party services and disclosure

We do not sell personal information for money. We share limited information with advertising measurement partners as described in Section 6. We use the following providers and partners to operate and measure the App and the Site:

Provider	Purpose	Data involved
Google Firebase	Authentication, account database (Firestore), analytics	Account details, legacy angle profiles, Best Shots preferences, credit and request records, feedback, usage and diagnostic data
PostHog	Product analytics, experiment measurement, and error reporting	Pseudonymous identifiers, feature events, device and app context, subscription events, and diagnostics; no session replay in the current configuration
Google AI services	Cloud camera coaching	Camera or broadcast image frames, session instructions and context, including recognized spoken directions
Google Cloud	Best Shots comparison and ranking, only after express in-app permission	Smaller copies of the photos selected for a Best Shots request and limited ranking metadata; Google may temporarily retain inputs under its Vertex AI security, caching, and abuse-monitoring practices
RevenueCat	Subscriptions, entitlements, subscription-offer experiments, lifecycle analytics, and forwarding subscription events to Singular	Pseudonymous App User ID, Firebase app-instance and PostHog identifiers, attribution identifiers including IDFV and consent-dependent IDFA, sharing choices, product and offering identifiers, purchase and transaction information, price and currency, subscription status and lifecycle events
Singular	Install attribution, campaign measurement, subscription measurement, and forwarding selected events to advertising partners	App, device, network and pseudonymous identifiers; consent-dependent IDFA; tracking and sharing choices; selected usage and subscription events; amounts, currency, timestamps and campaign attribution
Meta	Measuring and optimizing Photogenik advertising	Selected install and conversion events supplied through Singular, associated device and attribution information as permitted, subscription amounts and currency where applicable, and tracking and limited-data-sharing signals
Apple	Sign in with Apple, App Store purchases and subscriptions, app ratings, and responding to subscription or App-usage inquiries	Authentication token, purchase records, and limited subscription, app-version, diagnostic, or usage details when reasonably necessary to address an inquiry
Google Firebase (Cloud Firestore, App Check) and Google reCAPTCHA Enterprise	Storing early access sign-ups and creator club applications from the Site, and protecting those forms from abuse	Email address; for creator club applications, name, country, social accounts and links, optional portfolio link, and age and consent confirmations; device, browser, and interaction signals for abuse prevention
Google Sign-In	Optional sign-in	OAuth authentication token

These providers and partners process information under applicable agreements and their privacy policies, including the PostHog Privacy Policy, the Google Privacy Policy, the Firebase Privacy and Security information, the RevenueCat Privacy Policy, the Singular Privacy Policy, the Meta Privacy Policy, and the Apple Privacy Policy.

7.1 Apple subscription and App-usage inquiries

If Apple contacts us about a subscription, purchase, refund, suspected fraud, App Review matter, or technical or App-usage inquiry — or if you ask us to work with Apple on such an inquiry — we may provide Apple with only the limited information reasonably necessary to investigate and respond. This may include subscription status, product and transaction identifiers, App version, and relevant diagnostic or usage events.

We do not provide Apple with your photos, camera feed, face or depth data, angle profile, email address, or unrelated App activity for this purpose, unless you specifically ask us to, consent to it, or disclosure is required by law. We do not share this information with Apple for advertising.

We may also disclose information where required by law, to enforce our Terms of Use, or to protect the rights, safety, and property of our users or the public.

8. Retention and account deletion

We retain your account information for as long as your account is active. Information stored locally remains on your device until you delete it or remove the App. Photogenik erases its Best Shots uploaded-image buffers when the analysis request finishes. Photo-free ranking results, request identifiers, processing status, and associated credit records are retained separately to recover completed results, prevent duplicate charges, reconcile credits and refunds, and investigate service issues. Their retention is not limited to the response cache or a 15-minute period. The current service does not apply a fixed automatic deletion deadline to these records. We retain them for the operational, security, dispute-resolution, or legal purposes described here, subject to applicable deletion rights. You can request deletion across these systems at hello@photogenik.app, as described below. Google may temporarily retain Best Shots inputs as described in Section 4.1 and its linked Vertex AI data-governance documentation.

You may delete your account from within the App. This removes your authentication record, account profile, and private Best Shots preference document. It does not automatically cancel your Apple subscription or delete photos saved to your Apple photo library. Subscription, analytics, advertising attribution, feedback, security, and credit records may remain in separate systems. Advertising measurement records include subscription milestones and delivery records used to attribute conversions and avoid duplicate reporting; they are not automatically erased by in-app account deletion. Provider retention periods and applicable legal requirements may differ. Contact hello@photogenik.app to request access or deletion across those systems. We retain records only for the operational, security, dispute-resolution, or legal purposes for which they are needed, subject to applicable deletion rights; we do not promise immediate deletion from every provider or backup.

We keep early access sign-ups until you ask us to remove you or we end the early access program. We keep creator club applications for up to 24 months after you apply, so we can consider you for future collaborations, and then delete them. If we work with you, we keep the records needed for that collaboration. You can ask us to delete your sign-up or application at any time by emailing hello@photogenik.app.

9. Your privacy rights

Depending on where you reside, you may have the right to access, correct, export, restrict, or delete your personal information, and to object to or withdraw consent for certain processing.

9.1 EEA and UK (GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority.

9.2 California (CCPA/CPRA)

You have the right to know what personal information we collect, to request its deletion, and to correct it. We do not sell personal information for money or offer financial incentives in exchange for it. The advertising-related disclosures described in Sections 6 and 7 may constitute sharing for cross-context behavioral advertising under California law. Where applicable, you have the right to opt out of sale or sharing; contact hello@photogenik.app to exercise this right. You can also manage the App’s tracking permission in iOS Settings as described above.

To exercise any of these rights, contact us at hello@photogenik.app. We will not discriminate against you for exercising your rights.

10. Children’s privacy

Photogenik is intended only for adults aged 18 or older, regardless of the App Store content rating.
We do not knowingly collect personal information from anyone under 18.
If you believe someone under 18 has provided personal information, contact hello@photogenik.app so we can investigate and delete that information as required.

11. Security

We use industry-standard safeguards, including the security infrastructure provided by Google Firebase, to protect information in transit and at rest, and access controls intended to limit account data to authorized users and service operations. Information stored on your device is protected by iOS application sandboxing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

Our providers, including Google, PostHog, RevenueCat, Singular, and Meta, may process information in the United States and other countries. Best Shots uses Vertex AI’s global endpoint, so selected copies may be processed across Google’s global infrastructure. Applicable data-transfer safeguards depend on the provider and service; where required, we use appropriate safeguards for international transfers.

13. Changes to this policy

We may update this Privacy Policy as the App changes. We will revise the last-updated date and provide a more prominent notice of material changes where required. If a change requires new consent, we will seek that consent rather than treating this notice alone as permission.

14. Contact us

If you have questions or requests regarding this policy or your information, contact us at:

Photogenik Inc.
hello@photogenik.app