Privacy Policy

1. Introduction

Welcome to UnrealSelf. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and services (collectively, the "Services").

By using UnrealSelf, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password (encrypted).
• OAuth Information: If you sign up using Google or Apple, we collect your name, email address, and profile picture from those providers.
• Photos: Images you upload to generate luxury lifestyle photos. These are stored securely in our AWS S3 infrastructure.
• Payment Information: When you purchase a subscription or one-time features, payment details are processed through Stripe. We do not store your credit card information.
• Social Media Connections: If you connect Instagram, TikTok, Twitter, or Facebook accounts, we store OAuth tokens (encrypted), usernames, and profile URLs.

2.2 Information Automatically Collected

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: How you interact with our Services, including features accessed, time spent, and actions taken.
• Log Data: IP address, browser type, pages visited, timestamps, and referring URLs.
• Analytics: We use analytics tools to understand user behavior and improve our Services.

2.3 Camera and Photo Library Access

Our mobile app requires access to your camera and photo library to allow you to take photos or select existing ones for transformation. We only access photos you explicitly choose to upload.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services
• Process your photos and generate luxury lifestyle transformations using AI
• Create and manage your account
• Process payments and subscriptions through Stripe
• Enable social media sharing features when you connect your accounts
• Send you notifications about your creations, account activity, and service updates
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve our Services
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Send promotional communications (you can opt-out at any time)

4. AI Processing and Image Generation

When you upload a photo for transformation, we use artificial intelligence and machine learning models to generate luxury lifestyle versions of your images. This process involves:

• Analyzing your uploaded photo to understand facial features and composition
• Applying AI models (powered by OpenAI and other providers) to generate transformations
• Creating watermarked versions (free tier) and high-resolution versions (paid)
• Storing original, processed, and watermarked versions in secure cloud storage

Important: Your original photos are never used to train our AI models or shared with third-party AI providers for model training purposes.

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service Providers

• AWS (Amazon Web Services): Cloud storage for images and data
• OpenAI: AI processing for image generation (without training on your data)
• Stripe: Payment processing (we do not receive or store payment card details)
• Google/Apple: Authentication services when you use OAuth login

5.2 Social Media Platforms

When you connect your social media accounts and choose to share your creations, we share your generated images with Instagram, TikTok, Twitter, and/or Facebook according to your instructions. We only share what you explicitly choose to share.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

6. Data Storage and Security

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using TLS/SSL
• Passwords are hashed using bcrypt
• OAuth tokens are encrypted at rest in our database
• Images are stored in private AWS S3 buckets with access controls
• Access to production systems is restricted and logged
• Regular security audits and updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Services and comply with legal obligations:

• Account Data: Retained while your account is active and for 90 days after deletion
• Images: Original and generated images are retained while your account is active. You can delete individual images at any time.
• Payment Records: Retained for 7 years for tax and accounting purposes
• Analytics Data: Aggregated and anonymized after 2 years
• Social Media Tokens: Deleted immediately when you disconnect an account

8. Your Rights and Choices

8.1 Account Management

• Access and update your account information in Settings
• Change your password or email address
• Delete your account (all data will be permanently removed within 90 days)

8.2 Content Management

• View all your generated images in "My Creations"
• Delete individual images at any time
• Download your images before deletion

8.3 Communication Preferences

• Opt-out of promotional emails via unsubscribe link
• Manage push notification preferences in your device settings
• Transactional emails (receipts, security alerts) cannot be disabled

8.4 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

8.5 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell your data)
• Non-discrimination for exercising your rights

To exercise any of these rights, email us at [email protected]

9. Children's Privacy

UnrealSelf is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at [email protected] and we will delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and the European Union. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Compliance with the EU-U.S. Data Privacy Framework
• Adequate protection measures as required by applicable law

11. Third-Party Links and Services

Our Services may contain links to third-party websites, apps, or services (such as social media platforms). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to your registered email address
• Displaying an in-app notification

Your continued use of our Services after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Cookie Policy

We use cookies and similar technologies to enhance your experience. Cookies are small files stored on your device that help us:

• Keep you logged in
• Remember your preferences
• Analyze how you use our Services
• Provide personalized content

You can control cookies through your browser settings. Disabling cookies may affect functionality.

15. Platform-Specific Information

15.1 Mobile App Permissions

Our mobile app requests the following permissions:

• Camera: To take photos for transformation
• Photo Library: To select existing photos
• Notifications: To notify you when your creations are ready
• Internet: To upload photos and download generated images

15.2 Apple App Store

For iOS users, we comply with Apple's App Tracking Transparency framework. We will request your permission before tracking your activity across other apps and websites.

15.3 Google Play Store

For Android users, we comply with Google Play's Data Safety requirements and display our data collection practices in the Play Store listing.