Skip to content
AI Photo LabSearch prompts

Privacy policy

Last updated 28 October 2026

This policy covers the AI Photo Lab apps for iPhone and Android and the AI Photo Lab website. AI Photo Lab gives you prompts to use in other AI tools, and the app can also create the image for you from a photo you choose. We only receive a photo when you use that in-app generation.

In the app

  • An anonymous account. When you first open the app it creates an account identified only by a random ID, with no name or email. It keeps the styles you save and lets us count likes and views without knowing who you are.
  • Your saved styles. The list of styles you save (heart) is stored with your account so it stays the same across app updates. Each style’s total like and view counts are public.
  • Optional sign-in. You can sign in with Google, or with Apple on iPhone, to back up your saved styles and use them on other devices. We then receive your name, email address and profile photo (Google) or your name and email (Apple, which may give us a private relay address instead of your real one), plus an ID for your Google or Apple account. We use these to sign you in, show who you’re signed in as, and tell our team about new sign-ups and purchases (see “Alerts to our team” below). We never post anything or read anything else from those accounts. Signing in is only required to create images, hold credits or buy Pro.
  • Notifications. If you allow notifications, Firebase Cloud Messaging gives your device a token so we can send style ideas. To send them at a sensible local time, the app puts your device into groups by time zone, by broad region (worked out from your country) and into a random test group (A or B). We count how often each notification is opened, in total, not per person.
  • Usage analytics. Google Analytics for Firebase records events such as screens viewed and styles opened, saved or copied, with your device and system type, app version, approximate location (country or city) and an app-instance ID.
  • Session recordings. PostHog records the screens you see and the buttons you tap in the app, so we can find confusing parts of the app. Recordings are linked to your account ID, not to your name or email, and may show text you type into search. We don’t record sessions in the European Economic Area, the United Kingdom or Switzerland.
  • Ads. Google AdMob shows ads in the app. On iPhone, ads use your advertising identifier only if you allow tracking when the app asks. On Android, AdMob uses your device’s advertising ID, which you can reset or delete in your phone’s settings.
  • Your country. Our server works out your country from your IP address to show styles popular where you are and to choose your notification region. The country isn’t saved with your account, but is included in our team’s sign-up and purchase alerts. Like most servers, ours keep request logs, which include IP addresses, for a short time for security and fixing problems.
  • On your device. The app stores small settings on your phone, such as whether you’ve seen the walkthrough and which prompts you’ve unlocked. When you copy a prompt the app writes it to your clipboard; it never reads your clipboard.
  • Contact us. If you send us a message from the app, we receive what you write, the topic, the email address you give us to reply to, your account ID, your app version, your phone’s model and system version, and your country (from your IP address). We use it only to answer you and fix the problem. Messages appear in our admin panel and in our team’s Slack.

Creating images in the app

  • Your photo. When you tap Generate, the app shrinks the photo you pick and sends it, with the style’s prompt, to our server, which passes it to Microsoft Azure OpenAI or OpenAI to create the image. The app removes the photo’s location data before sending it. When the image is made, we keep the photo privately beside it for 30 days, then delete both automatically (or sooner, if you delete the image or your account). Our team can see the photo and the image together, to check the quality of the results and that the service isn’t misused. Photos sent from older versions of the app, which said the photo isn’t kept, are not kept. Microsoft and OpenAI may keep requests for up to 30 days to detect abuse, under their own policies, and don’t use them to train their models. Before that, Amazon Rekognition checks the photo automatically (whether it shows one adult’s face, and no nudity or violence) so we can tell you straight away if it can’t be used; it estimates an age range but doesn’t identify you.
  • Photos that can’t be used. If our check or the image service turns a photo down, we keep that photo privately for up to 14 days, with the check’s results (estimated age range, number of faces and content labels) and the reason, so our team can review it and improve the checks. Only our team can see it; it’s then deleted automatically, or sooner if you delete your account.
  • Your generated images. Each image is stored privately for 30 days so you can find it again in the app, then deleted automatically. You can delete one sooner. Besides you, only our team can see it, as described above. Every image carries metadata saying it was made by AI.
  • Who can use it. Generating needs a Google or Apple sign-in and is only for adults (18 or older). Only use photos of yourself, or of people who have agreed.
  • Credits and purchases. Your credit balance and its history (free credits, credits from ads, purchases and generations) are kept with your account. Purchases are made through Apple or Google; we never see your payment details. RevenueCat receives each purchase’s product, transaction ID and your account ID to confirm it to us.
  • AI Photo Lab Pro. If you subscribe, we keep whether Pro is active, when the current month ends, and your monthly Pro credits with your account. Apple or Google bill the subscription, and RevenueCat tells our server when it starts, renews, ends or is refunded.
  • Rewarded ads. If you watch an ad to earn credits, Google AdMob tells our server that your account watched it. If you watch an ad to unlock a style’s prompt, the unlock is saved only on your phone.
  • Your device. So the free credit for new accounts is given once per phone, the app sends an identifier for your device (Android ID, or Apple’s identifier for vendor). Our server keeps only a one-way hash of it.
  • Reports. If you report an image, we keep your report and may look at that image to review it.

Alerts to our team

When someone signs in with Google or Apple for the first time, or buys credits or Pro (including renewals and refunds), our server posts a short message to our team’s private Slack workspace. It contains your name, email address, account ID and country, and for purchases the product, price and whether it was a test purchase. We use these alerts only to follow how the app is doing and to help you if something goes wrong with a purchase. Messages you send us from “Contact us” are posted there too, so the team can answer them. Your photos and images are never sent there.

On the website

The website has no accounts and never asks for your photos, name, email or phone number.

  • Usage analytics. We use Google Analytics to count visits and see which prompts are copied. It records pages viewed, approximate location (country or city, from your IP address), device and browser type, and events such as “prompt copied”.
  • Advertising data. Ads are served by Google AdSense. Google and its partners use cookies and similar technologies to show ads and measure them, as described below.
  • Visitor counter. The footer shows a public visitor counter from eXTReMe Tracking. When a page loads it receives the page you came from, your IP address and your screen size, and publishes aggregate visitor statistics.
  • Clipboard. When you press a copy button, the site writes the prompt to your clipboard. It never reads your clipboard.

Advertising and cookies on the website

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites on the internet.

You can opt out of personalised advertising in Google Ads Settings, or opt out of some third-party vendors’ use of cookies at aboutads.info. Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before personalised ads or non-essential cookies are used, and you can change your choice at any time from the privacy message link on the page.

Why we use it

  • To keep your saved styles, and to back them up and sync them if you sign in.
  • To create the images you ask for, and to keep track of your credits, purchases and Pro subscription.
  • To let our team know about new sign-ups and purchases, and to help with purchase problems.
  • To send the notifications you allowed, at a good time for you.
  • To understand which styles and features are useful, so we can improve them.
  • To show ads that keep AI Photo Lab free, and to measure them.
  • To keep the apps and website secure and working.

Who processes it

We don’t sell personal information. These companies process data on our behalf, under their own policies: Google (Firebase sign-in, database, Analytics and Cloud Messaging, AdMob, AdSense, Google Play purchases and hosting), Apple (Sign in with Apple and App Store purchases), Microsoft (Azure OpenAI) and OpenAI (creating images), RevenueCat (confirming purchases), PostHog (session recordings), Slack (our team’s sign-up, purchase and support alerts), and Amazon Web Services (our server, image hosting and photo checks). eXTReMe Tracking collects its website counter data directly, under its own privacy policy. We may disclose information if required by law.

How long we keep it

  • Your account, sign-in details and saved styles are kept until you delete your account. If you remove the app without signing in, its anonymous account can’t be recovered, but holds no personal details.
  • Generated images, and the photos they were made from, are deleted after 30 days; a photo that couldn’t be used is kept for up to 14 days.
  • Your credit balance, its history and your Pro status are kept until you delete your account.
  • Messages you send us are kept until you delete your account.
  • Team alerts are kept in our Slack workspace for up to a year.
  • Session recordings are kept for about a month.
  • Analytics data is kept under Google Analytics’ data retention settings.
  • Server request logs are kept for a short time.

Deleting your account

If you signed in, you can delete your account in the app: open the Profile tab and tap Delete account. This permanently deletes your account, your sign-in details, your saved styles, your generated images and your credits (unused credits, including bought ones, are lost). Deleting your account doesn’t cancel Pro: cancel it first in your App Store or Google Play subscription settings. You can also ask us by email; see how to delete your account.

Your rights

Depending on where you live, including the EEA, UK and California, you may have the right to access, correct or delete personal data, and to object to processing. To use them, email codigicsolutions@gmail.com. On the website, most data is held by Google against cookie identifiers; clearing your cookies removes that link.

Children

AI Photo Lab is not directed at children under 13, and we don’t knowingly collect their data. Creating images in the app is only for adults (18 or older), and the app doesn’t offer it for children’s styles.

Changes

We’ll update the date at the top when this policy changes. See also our terms of use.