Privacy Policy

Last Updated: October 2026

Depending on your app version, some of the features described below (such as accounts, in-app purchases, push notifications and analytics) may not apply to you.

Welcome to Prompty. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

1. Information We Collect

1.1 Information You Provide

When you use Prompty, you may provide certain information, including:

• Account Information: When you sign in (via Google or Apple), we collect your email address, name, and profile picture to create and manage your user account.
• In-App Purchases: We process purchases of Prompty Credits through secure third-party providers (Apple App Store or Google Play). We collect transaction records (such as product, price, currency and transaction ID) to maintain your credit balance, but we do not collect or store your raw credit card information.
• Saved Posts: Posts that you save for later viewing are stored locally on your device.
• Push Notification Data: If you allow notifications, Firebase Cloud Messaging (and, on iOS, the Apple Push Notification service) assigns your device a push token that we use to deliver notifications. You can turn notifications off at any time in the App's Settings or in your device's system settings.
• Generation Records: When you generate an image, we keep a record linked to your user ID (such as the prompt ID, model, quality, prompt length, time taken, cost and credits charged). This record does not include your uploaded photo.

1.2 Automatically Collected Information

When you use the App, we may automatically collect certain information, including:

• Device Information: Device type, operating system version, and device identifiers
• Usage Data: Information about how you interact with the App, including features used, posts viewed, and search queries
• Analytics Data: Unless you turn analytics off, we use Firebase Analytics (Google) and PostHog to collect usage events (for example screens and prompts viewed, copied, saved or shared, generation attempts and outcomes, paywall views, purchase outcomes and sign-in method). Once you sign in, these events are linked to your user ID; before that they are linked to a random identifier created for your installation. PostHog may also derive your approximate location (country or city) from your IP address.
• Device Details: Device model and manufacturer, operating system version, app version, language, time zone and screen size are attached to analytics events.
• Log Data: Technical information such as app crashes, errors, and performance data (collected through Firebase Crashlytics), and server-side error logs containing the error, the endpoint and your user ID, used to diagnose and fix problems

1.3 Third-Party Services

The App uses several third-party services that may collect additional information:

• Firebase (Google): Used for user authentication, database (Firestore), push notifications (Cloud Messaging), crash reporting and Analytics. Please refer to Google's Privacy Policy.
• RevenueCat: Used to manage and track in-app purchases and subscriptions. Please refer to RevenueCat's Privacy Policy.
• PostHog: Used for product analytics. Please refer to PostHog's Privacy Policy.
• Apple App Store / Google Play: Used to securely process payments for in-app purchases on iOS and Android devices respectively.

1.4 Photos and Face Data

When you use Prompty's AI image generation features, you may upload photos that could contain faces. Here is exactly how this data is handled:

• What we collect: Photos you choose to upload for the purpose of generating AI image variations. These photos may contain faces or other biometric-adjacent visual information.
• How it is used: Uploaded photos are used solely to generate the AI image variation you requested. We do not perform facial recognition, do not extract or store facial geometry or biometric templates, and do not use uploaded photos or any face data contained in them to train AI models.
• Sharing with third parties: To fulfill your generation request, uploaded photos are securely transmitted to our third-party AI service providers (such as OpenRouter). These providers process the image strictly to complete the generation request and do not use the data to train their own models. We do not share uploaded photos or face data with any other third party, and we do not sell this data.
• Storage and retention: Uploaded photos are processed in memory on our servers and are promptly deleted immediately after the AI generation is complete. We do not retain uploaded photos or face data on our servers beyond the time needed to complete your request. Any resulting AI-generated image is saved only locally on your device (see Section 3.1).
• Deletion: Because uploaded photos are deleted automatically after generation, there is no server-side copy for you to request deletion of. Locally saved generated images can be deleted at any time directly within the App.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and its features
• Analyze usage patterns to understand how users interact with the App
• Debug technical issues and improve App performance
• Ensure the security and integrity of the App
• Comply with legal obligations

3. Data Storage and Security

3.1 Local Storage

Saved posts and AI-generated images are stored locally on your device using AsyncStorage. This data is private to your device and is not synchronized with our servers or other devices. The generated images remain on your phone until you delete them or uninstall the app.

3.2 Cloud Storage

App content (posts, images, prompts) is stored in Firebase Firestore, a cloud database service provided by Google. This content is publicly accessible through the App but does not include personal user information.

3.3 Security Measures

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We use Firebase (Google) to provide backend services. These service providers have access to necessary information to perform their functions but are prohibited from using it for other purposes.
• Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request access to personal information we hold about you
• Deletion: You can delete saved posts directly from the App at any time
Opt-Out: You can turn off analytics in the App under Settings > Privacy, and turn off push notifications in the App's Settings or your device's system settings
• Data Portability: You may request a copy of your data in a portable format

To exercise these rights, please contact us using the contact information provided below.

6. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries.

8. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

By using Prompty, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein.