Privacy Policy

What we collect

• Device identifier: a random ID generated on your device at first launch, used to remember your credit balance and orders. It is not tied to your real identity and is regenerated if you reinstall.
• Camera frames: when you tap "Analyze", the current frame is sent to our server for AI analysis. It is deleted immediately after analysis. It is stored temporarily only if you turn on "generate with my own subject", and is deleted automatically within 2 hours.
• The photo you just took (for the post-shot review): when the confirmation screen appears, the app sends a downscaled copy to our server so the AI can score it and suggest improvements. It is deleted right after the review and is never stored or added to any library. This happens automatically — if you would rather your photos never leave the phone, turn the post-shot review off in Settings.
• AI Photos: after you confirm permission from the people pictured and agree to upload, the photo is sent through our server to Volcengine Ark to create a finished AI image keeping the person and scene, with your selected style, retouching, pose and lighting settings. The input is processed only during generation. Results are returned through an owner-protected endpoint, retained for up to 2 hours and automatically cleaned up; they never enter public uploads, COS or the shared library. The app may keep a local copy. Photo-library write permission is requested only when you save. Images are labelled as AI-generated, not real photographs; faces and details may vary.
• Direct messages: text messages between you and a photographer inside the app are stored on our server so both sides can read them later. They are deleted when you delete your account.
• Live session audio and video: during a video coaching session your microphone and camera are streamed to the other person (relayed by Tencent Cloud TRTC). We do not record or retain any of it — it ends when the call ends.
• Generated templates: reference images the AI creates are stored in your own reference library so you can reuse them. Only if you tick "Share to library" before generating is the image added to the system library and matched to other users with similar scenes; otherwise nobody else sees it. Each time another user uses an image you shared you earn 1 coin, up to 20 coins per day. Templates generated from your own photo are never added to that library under any circumstances.
• Purchase records: the product and transaction ID or purchase token from App Store or Google Play purchases, used to verify purchases and record credits or coaching balance. We do not receive your card details or store account password.
• Content you submit: the name, bio and portfolio you enter when applying to be a photographer; written reviews of photographers; reports and blocks.
• Account details (optional): the nickname you choose and a cryptographic hash of your password. We never store the password itself — nobody, including us, can recover it from the server. Core shooting, reference generation, pose alignment and photo review work without an account. Identity-related services such as live coaching require login and depend on service availability.
• Coins and wallet records: coins earned when templates you shared are used, plus exchange and payout records for photographers.
• On-device settings: language, subject preference, retouch strength. These stay on your phone and are never uploaded.

Usage data (analytics)

• What is recorded: when the app starts and stops, which screen you opened and for how long, how far you got in the main flow (analyse scene → pick template → align → shutter → review), which step failed or got stuck, recoverable error codes, crash information, and the fact that a purchase succeeded.
• What it is for: finding the step people get stuck on and fixing it. No advertising, no selling data, no cross-app tracking of any kind.
• What is never recorded: phone number, email, ID numbers, advertising identifiers (IDFA), precise location, your photos, anything you typed, or template prompts.
• Identifier and protection: a random install ID, not a system advertising ID or your login account. Offline records wait in the app’s private folder (ops/events.jsonl) and retry automatically; retries are deduplicated. Only administrators can access the statistics. The analytics database contains no IP addresses, request credentials or photos.

What we do not collect

• Phone number, government ID, contacts, the SMS messages on your device, or location
• Photos in your library that you did not explicitly choose
• Advertising identifiers — the app contains no advertising SDK and does no tracking

Where your photos live

Photos you shoot with the app are kept on your phone, in your camera roll and inside the app. They are not automatically published or shown to other users. Relevant images are sent to our server for scene analysis, references using your own subject, or post-shot AI review. Analysis and review frames are not retained after processing; temporary own-subject frames are cleared under the rule described above. Photos you actively share or upload, and live video sessions, are handled under their respective feature descriptions rather than as on-device-only photography.

Face data

The app offers retouching and "burst & pick the best shot". Both need to know where the face and its features are in the frame, so the app performs face detection. Here is exactly what that means:

• What is detected: only the face bounding box and facial landmark points (coordinates of eyes, nose, mouth and jawline), used to keep skin smoothing on skin only and to detect closed eyes.
• Where it happens: entirely on your device, using Apple Vision on iOS and Google ML Kit on Android. Results live in memory only and are released immediately after use.
• Never uploaded, never stored: these coordinates never leave your device. They are not sent to our servers and not shared with any third party.
• No identification: we do not create or store any faceprint or facial template. We do not perform face matching, identity verification or recognition, and we never use face data for advertising or profiling.
• Retention: none. Once the app closes, this data no longer exists.

This is distinct from the photo itself: when you actively tap "Analyze", "Generate templates", or use the post-shot AI review, that photo (which may contain your face) is uploaded and passed to the AI provider under the rules described in "What we collect", then deleted after use. That is a photo, not face-recognition data. Post-shot review runs automatically when enabled and can be switched off entirely in Settings → AI review after shooting.

Who we share data with

• DeepSeek: when DeepSeek vision is enabled, it receives the relevant photos and instructions to analyze scenes, explain poses and review shots.
• Volcano Ark (ByteDance): generates reference images and receives your selected reference photo when you use image-to-image generation. It also provides AI analysis when the Ark vision configuration is selected.
• Tencent Cloud: server hosting; live video coaching sessions are carried over Tencent Cloud TRTC.
• Microsoft: the cloud voice used for spoken guidance is synthesized by Microsoft's speech service — the sentence to be spoken is sent there and comes back as audio. No photos are sent. You can switch to the on-device voice in Settings, in which case nothing leaves the phone.
• Apple: in-app purchases are handled by the App Store.
• Google: Android Play purchases are handled by Google Play; our server receives the purchase token to verify and credit the purchase.

We do not sell or otherwise share your data with anyone else.

Deleting your data / closing your account

Both entry points are inside the app and always available. Deletion is permanent:

• No account: Settings → Content & Safety → Delete my data
• With an account: Me → Delete account, confirm with your password

This removes credits, coins, orders, direct messages, reviews you wrote, templates you shared, photographer profile and portfolio, and the account itself. Two things are kept on purpose: in-app purchase transaction IDs (required for accounting, they contain no personal information, and they prevent the same purchase being credited twice), and reviews you left for photographers, which are anonymized rather than removed — they are part of someone else's public reputation. If you have an order in progress or an unwithdrawn balance, settle it first so neither side loses money.

One thing stated plainly: deletion makes this content disappear from the app immediately and it can no longer be found by anyone, but image files you previously uploaded or shared may remain in server storage for a while (their addresses are random strings and are not indexed publicly). If you want the files themselves purged as well, email us at the address below and we will do it by hand.

You can also email zhaodadao123456@gmail.com and we will handle it for you.

Children

This app is not directed to children under 13, and we do not knowingly collect information from them.

Contact

Any privacy question: zhaodadao123456@gmail.com. We reply within 7 days.