Privacy Policy
PortreStudio Last Updated: April 24, 2026
Table of Contents
- Overview
- Data We Collect
- How We Use Your Data
- Data Retention and Deletion
- Security
- Third-Party Services
- In-App Purchases and Payments
- Children's Privacy
- Your Rights
- Changes to This Policy
- Contact
1. Overview
PortreStudio ("app", "we", "our") is an iOS application that allows users to create AI-powered portrait photos. This Privacy Policy explains what data is collected when you use the app, how it is processed, what third parties process it on our behalf, and what rights you have.
By using the app, you agree to this policy.
2. Data We Collect
2.1 Account Information
The following information is collected when you register:
| Data | Purpose |
|---|---|
| Email address | Account creation and authentication |
| User ID (UUID) | Unique system identifier |
| Session token (JWT) | Secure API access |
When signing in with Apple ID or Google, only the minimum information required for authentication is obtained; passwords are never stored in our systems.
2.2 Photos and Images
Source images you upload for photo generation are processed. This category of data includes:
- The source photo you select or capture in the app
- The style you choose for generation
- Technical request identifiers needed to process and return your job
- Generated output images and related job records
Before the app uploads a photo for AI portrait generation, the app presents an in-app disclosure that explains what data is sent, identifies the third-party services involved, and asks for your permission.
These images and related generation data:
- Are stored and processed in secure cloud infrastructure as part of the generation workflow
- Are shared solely for the purpose of portrait generation with our cloud storage provider (Cloudflare R2) and our AI model provider (Fal.ai)
- Are never used by PortreStudio to train AI models. Images are transmitted to Fal.ai only to generate your portrait; Fal.ai's handling of this content is governed by Fal.ai's own privacy policy and terms of service.
2.3 Face Data
PortreStudio generates AI portraits from photos that contain a face. Because face data is a sensitive category, this section explains exactly how the app handles it.
2.3.1 On-device ephemeral technical signals
Before any photo is uploaded, Apple's Vision framework (VNDetectFaceLandmarksRequest) evaluates the photo only on your device. During this evaluation, the following ephemeral technical signals are produced:
- Whether a face is present
- Number of faces in the photo
- Detection confidence score
- Head orientation (yaw / roll / pitch)
- Whether the face is aligned with the camera
- Bounding box coordinates of the face
These signals exist only in device memory; they are used solely to decide whether the photo is suitable for generation (single face, clearly visible, facing the camera) and are discarded as soon as the check completes. They are never transmitted to our servers or any third party and are never stored anywhere.
2.3.2 Source photo containing a face
The photo you upload for AI portrait generation — which falls under face data because it contains a face — is stored on Cloudflare R2 and sent to Fal.ai solely for portrait generation. Details about storage, sharing, and deletion of this photo are given in §2.2, §4, and §6.
2.3.3 What we do NOT do
- We do not create biometric templates or face embeddings for face recognition.
- We do not perform identity matching, face login, or age / gender / emotion inference.
- We do not use face data for advertising, profiling, or marketing.
- We do not use face data to train any AI model.
2.4 Usage and Transaction Data
| Data | Description |
|---|---|
| Credit balance | Amount of credits purchased and consumed |
| Transaction history | Status and timestamps of generation jobs |
| Error logs | Anonymous error records for diagnosing technical issues |
2.5 Payment Information
Payment details (card numbers, etc.) are processed directly by Apple App Store and RevenueCat. This information is never transmitted to or stored on PortreStudio's servers.
3. How We Use Your Data
Collected data is used solely for the following purposes:
- Providing the app's core features (authentication, photo generation, credit management)
- Presenting and recording your consent before sending photos to third-party AI processing services
- Validating on your device that the selected photo contains a single clearly visible face suitable for generation, in order to prevent failed generations and unnecessary data transfers
- Crediting purchased packages to your account
- Detecting technical errors and improving service quality
- Fulfilling legal obligations
4. Data Retention and Deletion
PortreStudio operates on a privacy-first principle and retains no user data beyond what is necessary.
| Data Type | Retention Period |
|---|---|
| On-device face analysis signals (see §2.3.1) | Not retained — exist only in device memory and are discarded after the check; never transmitted to our servers |
| Uploaded source photos | At most 90 days; automatically deleted by a Cloudflare R2 object lifecycle rule 90 days after upload |
| AI-generated portrait images | As long as the account is active (no automatic lifecycle rule; user may delete, or request removal together with account deletion) |
| Account information (email, user ID) | As long as the account is active |
| Credit and transaction history | As long as the account is active |
| Session tokens | Until session is closed or expires |
If you delete your account through the app, we remove your authentication record, your application database records (including profile and transaction history tied to your account), and related app data from our systems.
Uploaded source photos are automatically deleted from Cloudflare R2 within 90 days of upload via the bucket's object lifecycle rule. No automatic deletion rule is applied to generated portrait images; they remain accessible in your gallery for as long as your account is active. You may request that generated images also be removed when you delete your account.
For residual objects that may remain for technical or legal reasons, you can contact us via the Contact section to request additional deletion.
5. Security
The following security measures are in place to protect your data:
- AES-256-GCM Encryption: All file paths and download links in cloud storage are encrypted with a key known only to our server. Images are streamed through our server rather than being accessed directly from cloud storage.
- JWT Authentication: All API requests are verified with short-lived tokens signed by Supabase.
- Keychain Storage: Session tokens are securely stored in Apple Keychain on your device.
- Rate Limiting: Redis-based request throttling on the server side prevents malicious or abusive access.
- Zero Trust Architecture: No data from the client is trusted directly; all validation is performed server-side.
No system is 100% secure. If you discover a security vulnerability, please contact us.
6. Third-Party Services
Our app uses the following third-party services to provide its functionality. Each service is subject to its own privacy policy.
Supabase
Authentication and database service. Account information and transaction data are stored in Supabase's secure infrastructure. Privacy policy: supabase.com/privacy
Cloudflare R2
Object storage service where uploaded and generated image files are stored. File paths are encrypted on our server with AES-256-GCM, and Fal.ai access is limited to 1-hour presigned URLs. Uploaded source photos are subject to a 90-day automatic deletion (object lifecycle) rule in the bucket; once this period expires, the objects are automatically removed by Cloudflare. No automatic deletion is applied to generated portrait images. Privacy policy: cloudflare.com/privacypolicy
Fal.ai
AI model provider used for photo generation. The source image you upload, the style you choose, and technical request data needed to complete the job are transmitted to Fal.ai only to perform AI inference and return results. Fal.ai processes this content under its own privacy policy and terms of service. PortreStudio does not use your uploaded photos or face data to train any of its AI models. Privacy policy: fal.ai/legal/privacy-policy
Note: The on-device face validation described in §2.3.1 (Apple Vision) is never shared with any third party and never leaves your device.
RevenueCat
In-app purchase and subscription management. Payment transactions are handled through RevenueCat and Apple infrastructure. Privacy policy: revenuecat.com/privacy
We require our service providers to process personal data only to provide services to us and under appropriate privacy and security obligations.
7. In-App Purchases and Payments
Credit packages are purchased through the Apple App Store. The payment process is managed entirely by Apple and RevenueCat; financial data such as card information is never shared with us.
Once a purchase is completed, RevenueCat sends a secure notification (webhook) to our server to credit the appropriate amount to your account. Only your user ID and the purchased package information are processed during this transaction.
For refunds and subscription cancellations, please visit Apple's support page: support.apple.com
8. Children's Privacy
PortreStudio is not directed at children under the age of 13 and does not knowingly collect data from this age group. If we become aware that a child under 13 has created an account, we will immediately delete the account and associated data.
9. Your Rights
You have the following rights regarding your data:
- Right of Access: You may request information about the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete information.
- Right to Erasure: You may request deletion of your account and related application data; you may also request additional deletion of residual data retained in storage after account deletion.
- Right to Data Portability: You may request that your data be delivered to you in a machine-readable format.
- Right to Object: You may object to the processing of your data for specific purposes.
To exercise these rights, please contact us using the details below.
10. Changes to This Policy
This Privacy Policy may be updated from time to time. Users will be notified of significant changes via in-app notification or email. We recommend reviewing this policy periodically. Continued use of the app after the date of a change constitutes acceptance of the updated policy.
11. Contact
For any questions, requests, or complaints regarding our privacy policy or your data, please contact us:
PortreStudio Email: [email protected]
This document was last updated on April 24, 2026.