Privacy Policy

Copy Shot AI

Last updated: June 5, 2026

1. Introduction

This Privacy Policy explains how Copy Shot AI (“the App”, “we”, “us”) collects, uses, and protects your information. The App is operated by Eugene Luchinin (individual developer), reachable at genue.luben@gmail.com.

By using the App, you agree to this Policy. We comply with applicable privacy laws, including GDPR and CCPA.

2. Information We Collect

a) Photos & Images

When you upload photos, they are processed to generate AI images. Photos may be sent to third-party AI providers such as Fal.ai to perform generation. We do not sell or share your photos for advertising.

b) Face Data & Photos Containing Faces

When you upload photos containing faces (e.g., selfies or reference images), the App processes these images solely to generate AI-powered images based on your likeness.

Collection: The App collects photos you voluntarily upload that may contain facial imagery. The App does not perform facial recognition, create facial maps, or extract biometric identifiers.
Use: Face-containing photos are sent to Fal.ai exclusively for AI image generation. They are not used for identification, authentication, or tracking.
Third-party sharing: Photos are transmitted to Fal.ai for processing and temporarily stored in our secure cloud storage (Supabase). No face data is sold or shared for advertising or any other purpose.
Retention: Uploaded reference images are automatically deleted from our servers after generation completes. Generated outputs are retained in your account until you delete them.
No biometric extraction: We do not extract, store, or process biometric identifiers (e.g., faceprints, facial geometry) from your photos.

c) Prompts & Input Text

We store your prompts and generation parameters to generate output, improve service quality, and provide history features.

d) Account Information (via Supabase)

email (hidden from Apple ID if you use Sign in with Apple)
profile data
login tokens

e) Device Information

We may collect device model, OS version, app version, crash logs, and performance analytics.

f) Purchase Data (via Adapty)

Copy Shot AI uses Adapty to manage subscriptions and entitlements. Adapty receives:

purchase status
subscription status
anonymous Adapty profile ID

We do not receive your credit card information. All payments are processed by Apple.

g) Analytics

We use the following analytics and crash-reporting services:

PostHog — anonymous product usage analytics
Sentry — crash and performance diagnostics
AppsFlyer — install attribution and subscription event measurement (subject to your ATT choice)

3. How We Use Your Information

We use your data to:

generate AI images
manage your account
process purchases
deliver subscriptions and entitlements
detect misuse or harmful activity
provide customer support

We do not:

sell personal data
use images for advertising
use uploaded images to train general-purpose models

4. Third-Party Services

Fal.ai (AI generation)

Data transmitted:

Photos and selfies you upload for generation (which may contain face data)
Text prompts and generation parameters you provide
Style and model preferences selected for each generation

Purpose: Solely for generating AI images and videos based on your inputs. Face data in uploaded photos is not used for facial recognition, biometric analysis, or any purpose other than image generation.

Retention: Uploaded images and prompts are processed in real-time and are not retained by Fal.ai after generation is complete.

Consent: Before any personal data is transmitted, the App requests your permission. You may decline, in which case no data is sent and AI generation features are unavailable.

Supabase

For account authentication, edge function execution, and securely storing metadata and temporary input images.

Adapty

For managing subscriptions and entitlements. See Adapty’s privacy policy at https://adapty.io/privacy.

Apple

All payment processing is performed by Apple. We do not see your payment details.

Analytics (PostHog, Sentry, AppsFlyer)

Used to understand usage patterns, diagnose crashes, and attribute installs. AppsFlyer attribution only runs if you grant App Tracking Transparency permission on iOS.

4a. Tracking (App Tracking Transparency)

On iOS, the App prompts you with Apple’s App Tracking Transparency (ATT) dialog before any tracking begins. If you allow tracking:

AppsFlyer may use your device’s advertising identifier (IDFA) and limited install/event data to attribute installs and subscription events to marketing campaigns.
Subscription events (start, trial conversion, renewal, refund) are forwarded server-to-server from Adapty to AppsFlyer and to Meta (Facebook Ads) to measure ad performance.
Your stable user identifier is used to reconcile these server-to-server postbacks to your install.

If you decline ATT, no IDFA is collected and no identifiers are shared with AppsFlyer or Meta for cross-app/website tracking purposes. The App still works normally.

The data linked to you for tracking purposes is limited to: Purchases (subscription/IAP events) and Identifiers (user ID, device advertising identifier when permitted). We do not track your photos, prompts, or generation content across apps or websites.

5. Storage & Deletion of Data

Your photos may be stored locally on your device, processed on Fal.ai servers for generation, and temporarily cached in Supabase cloud storage to enable generation.

Face data retention: Uploaded photos containing faces are automatically deleted from our servers after AI generation completes via an automated cleanup process. Generated output images are stored in your account until you choose to delete them. We do not maintain a separate database of face data or biometric information.

You may request deletion of account data, stored metadata, and user content by emailing genue.luben@gmail.com. We will process deletion requests within 30–72 hours.

6. Children’s Privacy

The App is rated 4+ and not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will remove it.

7. Data Security

We use industry-standard security practices to protect your data, including encrypted connections (TLS) for all data transfers. However, no system is 100% secure and we cannot guarantee absolute protection.

8. International Users

Your data may be processed in regions outside your country. By using the App, you consent to such processing.

9. Changes to Privacy Policy

We may update this Policy occasionally. Material changes will be posted at the App’s privacy URL and dated above.

10. Contact

For privacy or data-related questions:

📧 genue.luben@gmail.com