This privacy policy explains what data the app collects, how it is used, and the controls you have. The app focuses on image generation features and token-based usage.
To provide and improve our services, we collect the following types of information:
Information You Provide Directly:
- Account Information: When you sign in with Google, we receive your name, email address, and profile picture. We use this to create and manage your account, and we store this information securely using Supabase Authentication. Your unique user ID (Supabase Auth UID) is used to associate your data with your account.
- Prompt History: The text prompts you enter for image generation are saved to your account to provide you with a history of your creations. This data is stored in our Supabase database and is only accessible by you.
Information We Collect Automatically:
- Usage and Transaction Data: We track your token balance and transaction history to manage your use of the image generation service. This is stored in our Supabase database, linked to your user ID.
- Local Data: For a faster and smoother experience, we store some data on your device, including your token balance, history sync flags (in secure storage), and a cached version of your prompt history (history_cache.json).
- Diagnostics and Analytics (Optional): If you opt-in, we collect anonymous crash reports and usage analytics to help us identify and fix bugs, and to understand how our app is used. This data is aggregated and does not personally identify you.
We use the information we collect for the following purposes:
- To Provide and Maintain the Service: We use your account information, prompts, and token data to operate the core functionalities of the app, such as generating images and managing your account.
- To Personalize Your Experience: Your prompt history allows you to revisit and reuse your past creations.
- To Improve Our App: By analyzing optional, anonymous usage data and crash reports, we can identify areas for improvement and enhance the stability and performance of the app.
- For Security and Transparency: Token transaction logs provide a clear and transparent history of your usage. We implement security measures like Row Level Security in our database to protect your data.
We do not sell your personal data. We only share your information with the following third-party services to provide and improve our app. We encourage you to review their privacy policies.
Supabase:
We use Supabase for our backend, including database storage and authentication. All your account data, prompt history, and token information are stored here. Supabase Privacy Policy.
Google Sign-In:
We use Google Sign-In for account authentication. Google handles your login credentials. Google Privacy Policy.
Image Generation API:
We use a third-party API to generate images from your prompts. Your prompts are sent to this service for processing.
In-App Purchases:
All in-app purchases are processed securely by the Google Play Store. We do not handle or store your payment information. Google Play Terms of Service.
You have control over your personal data. The app provides the following options in the Settings screen:
Access and Export Your Data:
You can view your prompt history within the app and export it, along with your token transaction logs, as a JSON file.
Correct Your Data:
You can update your basic profile information through your Google account.
Delete Your Data:
- Clear Prompt History: You can delete your entire prompt history from our servers at any time.
- Delete Account: You can permanently delete your account. This action will erase all your data from our servers, including your account information, prompt history, and token balance. This action is irreversible and we cannot recover your data once it is deleted.
We retain your data only for as long as necessary to provide you with the service and for legitimate and essential business purposes, such as maintaining the performance of the app, making data-driven business decisions, and complying with our legal obligations.
When you delete your account, we initiate a process to permanently delete your personal information. The deletion process will be completed within 30 days from the request, after which your data will not be recoverable. Anonymized diagnostic data, which is not tied to your account, may be retained.
We are committed to protecting your data. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure. These measures include:
- Row Level Security (RLS): Our database is configured with RLS policies to ensure that you can only access your own data.
- Secure Transport: All communication between your device and our servers is encrypted using TLS.
- Secure Storage: Sensitive data stored locally on your device is kept in encrypted secure storage.
While we take reasonable measures to protect your information, please be aware that no security measures are perfect or impenetrable.
Our service is not directed to children under the age of 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information from our files as soon as possible.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Email: laphedusapp@gmail.com
Website: https://laphedus.com