Pixfide — Privacy Policy

1. About This Policy

This policy applies to the Pixfide mobile application for iOS and Android, published by Appfide Private Limited ("Appfide," "we," "us," or "our"), a company incorporated under the laws of India with its registered office at XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India. Appfide is the controller (and, under India's Digital Personal Data Protection Act, the data fiduciary) for the personal data described here.

It sits alongside our company-wide Privacy Policy, which continues to govern our website and our other apps. Where the two differ, this app-specific policy prevails for Pixfide. Sections of the company policy that describe user accounts, sign-in, profile data, advertising and web payment processing do not apply to Pixfide.

2. In Short

• No sign-up, no password, no name, no email, no phone number. Your account is an anonymous, random identifier tied to your device.
• Your photo is processed by third-party AI image-processing providers only after you agree, only to create the image you asked for. The upload is deleted as soon as processing ends, and the result as soon as your device has it.
• No advertising, no advertising identifier, no tracking across other companies' apps or websites, and we never sell your data.
• Analytics and crash reports are yours to switch on or off. Where the law requires consent, they stay off until you say yes.
• You can delete your account and everything linked to it from the app, at any time.

Pixfide collects no personal data beyond what this policy lists.

3. No Name, No Email, No Sign-In

Pixfide has no sign-up and no login. We never ask for, and never receive, your name, email address, phone number, contacts or social profile, and we do not collect your precise location.

To stop abuse and to keep your purchased credits safe, the app identifies your installation instead of you:

• A hardware-attested device credential. On iPhone and iPad this uses Apple's App Attest service; on Android it uses Google Play Integrity together with a key held in the Android Keystore. These let our server confirm that a request comes from a genuine copy of Pixfide on a real device. We store the credential's identifier and public key; the private key never leaves your device's secure hardware.
• A random user identifier (a UUID) that our server creates for your installation, together with your device's platform (iOS or Android). It is not derived from your name, email, phone number or device serial number. The app shows it as your Support ID in the Account tab.
• Session tokens that keep the app signed in to our server. They are short-lived and rotated, and we store only a hash of them.
• Your store account, via RevenueCat. When you buy credits or a subscription, the purchase is recorded against your Apple or Google store account through RevenueCat, our purchase-management provider, which receives your random user identifier. This is what lets "Restore purchases" bring your credits back after you reinstall or change device. We receive transaction identifiers and product details — never your card number, store login or the name on your store account.

4. Your Photos

Pixfide exists to transform photos you choose, so this is the part of the app that handles the most sensitive data. Here is exactly what happens to an image:

1. You agree first. On first launch the app explains how photos are handled and asks your permission ("Agree & start") before any photo can be sent for processing. You can withdraw this consent at any time by deleting your account or simply not creating anything further; without it the app cannot make images.
2. You pick it. The app only reads the photos you select or take with the camera. It does not scan or upload your photo library.
3. It is uploaded over an encrypted connection to our private cloud storage (Cloudflare R2). Uploads use short-lived, single-use links; the storage is not publicly accessible.
4. It is processed by a third-party AI image-processing provider, together with the instructions for the style, look and engine you picked, only to create your image. Pixfide's render engines (Ember, Slate, Flint, Aurora, Lumen, Atlas, Prism, Zenith and Onyx) each run on such a provider. In economy mode the same photo is processed through the provider's slower batch service. Nothing you type is sent to the provider; style options are chosen from fixed lists.
5. Your uploaded photo is deleted as soon as processing ends — whether the render succeeds or fails. If you asked for several takes of the same photo, it is deleted when the last take finishes.
6. The processed image is deleted as soon as it is downloaded to your device (when your device confirms it has saved a complete copy). We keep it only until then, so that a dropped connection or a closed app never costs you an image you paid for.
7. Anything not yet deleted is removed automatically 30 days after the creation was made — an image you never downloaded, or an upload whose deletion hit a storage error — so please download your images before then.

We do not use your photos to train AI models, we do not sell them, we do not use them to identify you or anyone in them (no facial recognition, no biometric templates), and we do not look at them except where you ask us to investigate a specific problem with a specific creation. The AI providers process images on our behalf under their business terms, which may allow them to keep inputs and outputs briefly for abuse monitoring and legal compliance, and they may apply their own safety filters.

Saved creations live on your device. Copying a creation to your photo library is optional and needs your permission; if you decline, the creation stays inside the app.

5. Records We Keep About Your Creations and Credits

So that we can answer a question about a purchase or a render that went wrong, we keep a record of each creation. It contains the style (template), engine and options you chose, whether you used economy mode, the number of credits charged or refunded, the job's status and any failure reason, any thumbs-up or thumbs-down rating you give it, and when each step happened (requested, rendered, downloaded, deleted). It does not contain the images.

We also keep a credit ledger — purchases, subscription grants and roll-overs, credits used, failed-render refunds, expired subscription credits and store refunds — which you can see in the app's credit history.

Reports. If you report an image with "Report image" (the flag icon), we store the creation it concerns, your user identifier, the reason you picked (sexual, violent, hateful, a real person, illegal, or other), any note you add (up to 500 characters) and when you sent it. We use reports only to review and act on inappropriate AI output. A report does not include the image, which may already have been deleted. It is kept as long as the creation record, and is deleted when you delete your account.

6. Notifications

If you allow notifications, we use Firebase Cloud Messaging to tell you when a creation is ready or has failed. This requires a push token for your device, which we store against your user identifier together with your device's language, so the notification is written in your language. You can turn notifications off at any time in your device settings; deleting your account deletes the token.

7. Analytics and Crash Reports

Pixfide uses Google Analytics for Firebase to understand which features are used, and Firebase Crashlytics to find and fix crashes. We have set them up to collect as little as possible:

• Off until decided. Analytics and crash reporting start switched off on every new installation. If you are in a region where the law requires your consent first — the European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Turkey or China, or anywhere we cannot tell — they stay off unless you agree in the app's consent prompt. Elsewhere they are switched on by default.
• Your choice, at any time. You can turn analytics and crash reports on or off, separately, under Account › Privacy in the app.
• No identity. We do not send your user identifier, Support ID or any purchase details to Analytics or Crashlytics. Your photos and creations are never sent to either.
• No advertising. Pixfide shows no ads and does not collect the advertising identifier (IDFA on iOS, the Advertising ID on Android). Google Consent Mode is set so that ad storage, ad user data and ad personalisation are always denied. We do not track you across other companies' apps or websites, so the app never asks for tracking permission.

When switched on, Analytics records app events and screens viewed together with device and app information such as device model, operating-system version, app version, language and an approximate country or region derived from your IP address, linked to a random app-instance identifier. Crashlytics records the crash or error, the app state at the time and the same kind of device information, linked to a random installation identifier. Google keeps Analytics event data for no longer than 14 months and Crashlytics crash reports for 90 days.

Server error monitoring. Our server can report errors to Sentry, an error-monitoring service. Such a report contains technical details of the failure and may include your random user identifier; it never contains your photos, and we remove authentication headers before it is sent.

Server logs and IP addresses. Like any internet service, our servers and Cloudflare see your device's IP address when the app connects. We use it only to deliver the service and to limit abusive request rates; we do not store it in our database or our request logs. Our server logs record request identifiers, your random user identifier and errors, and are kept for about two weeks.

8. Purchases and Subscriptions

Credit packs and Pixfide Pro subscriptions are sold through the Apple App Store and Google Play. The store processes the payment; we never receive your card details. Subscriptions renew automatically until cancelled, and you manage or cancel them in your store account settings. Deleting the app or your Pixfide account does not cancel a subscription.

For each purchase we keep the store and the store's transaction identifier, the product, the date, the number of credits it granted and how many of them have been used. If a store refunds a purchase, we record the refund and the credits taken back (see the Terms of Use).

If you ask Apple for a refund, Apple may ask us about the purchase. We tell Apple that it was delivered, what share of a credit pack's credits has been used, that the app shows sample results before purchase, and, where credits have been used, that we recommend declining the refund. Apple makes the decision. We never share your photos or creations for this. We do not send Google Play any information about refund requests today; if Google asks us about a refund or chargeback, we would share only the same limited information.

9. Why We Use Your Data (Legal Bases)

• To provide the app you asked for (performance of our contract with you): processing your photos into the images you request, running your credit balance, subscriptions and purchase restores, delivering results to your device, and answering support requests.
• Your consent: sending your photos to third-party AI image-processing providers (asked for on first launch), push notifications (asked for by your device), and — in regions that require it — analytics and crash reports. You can withdraw consent at any time; this does not affect processing that happened before.
• Our legitimate interests, balanced against yours: keeping the service secure (device attestation, rate limiting, preventing credit and refund fraud), monitoring server errors, reviewing reports of inappropriate AI output, and — in regions where consent is not required — analytics and crash reports to keep the app working well. You can object at any time, and you can switch analytics and crash reports off in the app.
• Legal obligations: keeping financial records of purchases and refunds as tax and accounting laws require.

We make no decisions about you based solely on automated processing that have legal or similarly significant effects. AI is used only to create the image you asked for.

10. Who Receives Your Data

We share data only with the service providers needed to run the app, each acting on our behalf and only for the purposes above. By category:

• Cloud hosting and storage — DigitalOcean (our servers and database) and Cloudflare (image storage in R2, and network delivery).
• AI image-processing providers — third-party services that render your photo in the style you chose. They receive the photo and the style instructions only, never your identity or purchase details.
• Payment and subscription processing — Apple (App Store), Google (Google Play) and RevenueCat.
• Device attestation — Apple (App Attest) and Google (Play Integrity).
• Crash and analytics tooling — Google Firebase (Google Analytics for Firebase and Crashlytics) and Sentry (server errors).
• Push messaging — Google Firebase Cloud Messaging, which delivers notifications through Apple's push service on iPhone.
• Fonts — the app downloads its typefaces from Google Fonts, whose servers see your device's IP address.

We may also disclose data where the law requires it, or to protect the rights and safety of our users and others. If Appfide or Pixfide is ever sold or reorganised, this policy would continue to protect your data.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

11. International Transfers

Appfide is based in India, and our servers and database run in the United States. Our service providers may process data in the United States, the European Union and other countries where they operate. Where the law of your country requires it, we protect these transfers with appropriate safeguards — such as the European Commission's standard contractual clauses (with the UK Addendum for UK data), the standard contractual clauses approved by Brazil's ANPD, and our providers' data processing agreements. Contact us for more information about these safeguards.

12. Data Retention

• Uploaded photos: deleted as soon as processing ends, whether it succeeds or fails.
• Processed images: deleted as soon as your device confirms it has downloaded them; anything not yet deleted is removed 30 days after the creation was made.
• Creation records, credit ledger and reports: kept while your account exists, so purchases and refunds can be verified, and deleted when you delete your account.
• Purchase and refund records: kept after account deletion without any link to an account, for as long as needed to answer refund requests and to meet tax and accounting laws.
• Push tokens and device credentials: kept while your account exists; deleted with it.
• Analytics and crash data: kept by Google for no longer than 14 months (Analytics) and 90 days (Crashlytics).
• Server logs: about two weeks.
• Backups: our database is backed up in encrypted form and backups are normally kept for 30 days, so deleted records leave our backups within about that time.

13. Deleting Your Account

You can delete your Pixfide account at any time from the app (Account tab → Delete account). This permanently removes your user identifier, device credentials, session tokens, push tokens, credit balance, credit history, creation records and reports from our servers, deletes every image of yours still in our storage, and clears the creations saved inside the app on that device.

Deletion is irreversible: unused credits are lost and cannot be restored afterwards. Purchase records held by Apple, Google and RevenueCat are kept by them under their own policies and as required for tax and accounting. We also keep our own record of each purchase (the store's transaction identifier, the product, the credits it granted and how many were used). It is not linked to any account and is used only to answer refund requests, prevent refund fraud and meet accounting laws. Remember to cancel any active subscription in your store account.

To delete analytics or crash data held by Google, switch them off under Account › Privacy and delete the app; or contact us and we will help.

14. Security

Data is encrypted in transit. Our servers accept requests only from attested copies of the app, session tokens are short-lived and rotated, images are stored in private storage reachable only through short-lived signed links, backups are encrypted, and access to our systems is restricted to the people who need it. No system is perfectly secure, but we design Pixfide to hold as little about you as possible, for as short a time as possible. If a breach affecting your data occurs, we will notify the authorities and, where we can reach them, the people affected, as the law requires.

15. Your Rights

Wherever you live, you can delete everything yourself in the app, switch analytics and crash reports on or off under Account › Privacy, and turn notifications off in your device settings. For anything else, email [email protected]. Because we hold no name or email to look you up by, please include the Support ID from the app's Account tab, or the order or transaction ID from your App Store or Google Play receipt, so we can find your records. We will not ask for more information than we need to verify your request. We respond within 30 days, or sooner where the law requires it, and we will not treat you differently for exercising your rights.

European Economic Area, United Kingdom and Switzerland

Under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection you have the right to access your personal data, to correct it, to have it erased, to restrict its processing, to data portability, to object to processing based on our legitimate interests, and to withdraw consent at any time. You may also complain to your local data protection authority — in the UK, the Information Commissioner's Office.

California (CCPA/CPRA) and other US states

In the last 12 months we have collected these categories of personal information, for the business purposes described above: identifiers (random user identifier, device credential identifier, push token, IP address); commercial information (purchase and refund records); internet or other electronic network activity (app usage analytics and crash reports, where switched on); and visual information (the photos you choose to transform, deleted as described in section 4). We disclose them only to the service providers in section 10. We do not sell or share personal information, and we do not use or disclose sensitive personal information for any purpose that would give you a right to limit it. You have the right to know what we collect, to access, correct and delete it, and not to be discriminated against for using these rights. You may use an authorised agent; we may ask the agent for proof of authority.

India (Digital Personal Data Protection Act, 2023)

You have the right to a summary of your personal data and of how it is processed and with whom it is shared, to correct, complete, update and erase it, to withdraw consent as easily as you gave it, to nominate someone to exercise your rights in the event of your death or incapacity, and to grievance redressal. Please raise any grievance with us first at [email protected]; if you are not satisfied with our response, you may complain to the Data Protection Board of India.

Brazil (LGPD)

You have the right to confirmation that we process your data, to access it, to correct incomplete, inaccurate or outdated data, to anonymisation, blocking or deletion of unnecessary or excessive data, to portability, to deletion of data processed with your consent, to information about the entities we share it with and about the possibility of refusing consent and its consequences, and to revoke consent. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

16. Children

Pixfide is not directed to children. It is not meant for anyone under 13, and we do not knowingly collect personal data from children under 13. If you are under 18, or under the age at which you can consent to data processing where you live, please use Pixfide only with the consent of a parent or guardian. If you believe a child has used the app without that consent, contact [email protected] and we will delete their data promptly.

17. Changes

We may update this policy from time to time. Material changes will be posted here with a revised "last updated" date and, where appropriate, noted in the app. If a change affects how your photos are processed, the app will ask for your agreement again.

18. Contact

Privacy enquiries and grievances: [email protected]
App support: [email protected]
Appfide Private Limited, XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India.

See also the Pixfide Terms of Use and Pixfide Support.