Privacy Policy

This policy explains what FrameNine AI collects when you restyle a photo, why, who it is shared with, and how long it is kept.

Who we are

FrameNine AI is operated by Nima Sanjabi Malayeri, Doctor Bove, 160, puerta 3, Barcelona, Spain, who is the controller of your personal data. For any question about this policy, or to exercise any of your rights, write to framenineai.support@gmail.com.

There is no account

You do not sign up, and we never ask for your name, email address or phone number. When you first open the app it creates an anonymous session token on your device. Our servers know you only by an identifier derived from that token - the User ID shown in the You screen.

Because there is no account, we cannot recognise you on a second device. Uninstalling the app deletes your session and your designs. If you have a subscription, Restore purchases on a new installation signed in to the same Apple or Google account brings the subscription and its credits back; free credits cannot be restored.

What we collect

Only what is needed to make your designs and run your credits:

• The photo you choose, and, for tools that take them, the instruction you type and the area you mark on the photo.
• The choices you make in a tool: the room or space type, styles, palettes, colours, wallpapers or floors.
• Technical details of each job: when it ran, whether it succeeded, the size of the image and which tool produced it.
• Your answers to the welcome questions (what brought you here and how you heard about us) and the styles you pick in the welcome demo.
• Your credit balance and a record of every credit granted, spent, expired or refunded.
• If you subscribe: the subscription identifier the app store gives us, the plan, its renewal dates, and whether it was cancelled or refunded.

What we do not collect

We do not collect your name, email address, phone number, contacts, location or advertising identifiers. We do not use third-party analytics or advertising software, and we do not track you across other companies' apps or websites.

We never see your card details. Payment is handled entirely by Apple or Google.

If you email us, we receive your email address and your message, and use them only to answer you.

Why we use it, and on what legal basis

We use your data for four purposes, each on its own legal basis:

• To produce your designs and to run your credits and your subscription - because it is necessary to provide the service you asked for (performance of a contract, GDPR Art. 6(1)(b)).
• To screen photos for prohibited content, keep the service secure and answer support questions - our legitimate interest in running a safe, working service (Art. 6(1)(f)).
• To learn which tools and styles people want, from your welcome answers and job history - our legitimate interest in improving the app (Art. 6(1)(f)). You may object at any time by writing to us.
• To keep purchase and refund records - a legal obligation under tax and accounting law (Art. 6(1)(c)).

Your photos are sent to OpenAI

This is the most important part of this policy. Every photo you submit is sent to OpenAI twice: once to check it with their content-moderation service, and once to generate your design. Any instruction you typed is sent with it.

Your photo is reduced in size before it leaves our servers, and it is sent without your User ID - OpenAI receives the image and the instruction, not who you are.

OpenAI acts as our service provider. Under its business terms, data sent through its API is not used to train its models, and it may be kept for up to 30 days to detect abuse before it is deleted.

Content moderation

Before a photo reaches the design model it is screened automatically for sexual content. If it is flagged, the job stops, no design is produced, and the credit is returned. We keep the score and the verdict, never a copy of the photo, so we can tell whether the screening is too strict and answer support questions.

This screening only decides whether a photo is processed; we take no other decision about you by automated means. If you believe your photo was refused wrongly, write to us and a person will look at it.

How long we keep things

These periods are enforced automatically by our systems rather than by anyone remembering to delete anything:

• The photo you upload - 1 day. It is needed for a few minutes.
• The designs we generate - 7 days on our servers. They are copied to your phone as soon as they are ready; the week is only for a phone that is offline.
• The record of a job, including any instruction you typed - 7 days.
• Job history and design settings, with no photo and no typed text - 90 days.
• Moderation verdicts, as a score and a result - 90 days.
• Your credit balance, its history and your welcome answers - for as long as the User ID they belong to exists, because your balance is calculated from that history. Ask us and we will erase them (see Your rights).
• Records of purchases and refunds - up to 7 years, as tax and accounting rules require.
• Emails you send us - as long as needed to deal with your request, then up to 1 year.
• Your saved designs - on your phone, for as long as you keep them.

Your designs are stored on your phone

Finished designs are saved in this app's own storage on your device, not on our servers. We cannot see them and cannot recover them. They are removed when you delete a design, use Delete my data, or uninstall the app.

Who else is involved

We use a small number of providers, each doing one job, under contracts that allow them to use your data only on our behalf:

• OpenAI (United States) - content moderation and image generation.
• Amazon Web Services (servers in Ireland, EU) - hosting, storage and image delivery.
• RevenueCat (United States) - managing subscriptions. It receives your User ID and the purchase details the store reports, never your photos.
• Apple and Google - selling the subscription and taking payment, under their own privacy policies.

Transfers outside the EU

Our servers are in the European Union. OpenAI and RevenueCat process data in the United States. Those transfers are protected by the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its use (including the product analytics described above), and to receive it in a portable format. Write to us to use any of them; we answer within one month.

Because there is no account, we can find your data only through your User ID. Open the You screen, tap User ID, copy it and include it in your email. Without it we cannot tell your records from anyone else's.

Delete my data in the You screen removes, on your device, your designs, your session and your free credits, and it cannot be undone. It does not reach our servers: to have the records there erased too, email us your User ID first, because Delete my data gives you a new one. Purchase records we must keep by law are kept for the period stated above.

You also have the right to complain to a data-protection authority - in Spain, the Agencia Española de Protección de Datos (AEPD, www.aepd.es) - or to the authority where you live.

Children

FrameNine AI is not intended for anyone under 14, and we do not knowingly collect data from them. If you believe a child has used the app, write to us and we will erase what we hold.

Changes to this policy

If we change this policy materially we will update the date at the top and tell you in the app. Because there is no account, we have no way to email you.