The short version
Guise: AI Photo Editor has no accounts. You never give us your name, email address or phone number. Everything we hold is tied to a random identifier created on your device the first time you open the app.
Photos you upload are deleted automatically after 30 days. Your photos are not used to train anyone's AI models. Self-service deletion is unavailable; you may request deletion by email as described below.
Who is responsible
Guise: AI Photo Editor is operated by Mahendra Kumar, an individual developer based in India, who is the data controller for the purposes of the EU/UK General Data Protection Regulation and the data fiduciary for the purposes of India's Digital Personal Data Protection Act, 2023.
Contact: androiprogrammers@gmail.com
What we collect
- Photos you choose to upload. Sent to our server so the AI can produce the restyled image you asked for. We never scan your gallery — only the specific photo you pick.
- The images the AI generates for you, including intermediate versions, kept so your in-app library works.
- A random install identifier — a version-4 UUID generated on your device. It is not your device's advertising ID, IMEI or serial number, and it is not linked to your identity. It exists so your sessions and your generations can be connected to each other.
- Device and app information — manufacturer, model, operating system and version, app version and build, language, country (as set in your device's language settings, not from GPS) and time zone.
- Usage activity — which screens you open, which templates you choose, which buttons you press, when sessions start and end, and which ads were requested, shown, or tapped. Tied to the install identifier.
- Crash and diagnostic information — whether the app crashed, and how many times, via Firebase Crashlytics.
- Advertising identifiers, collected by Google AdMob to show and measure ads.
- A push notification token, only if you allow notifications, via Firebase Cloud Messaging.
We do not collect your name, email address, phone number, contacts, calendar, precise location, microphone or camera stream.
Photos and faces specifically
A photo you upload will usually contain a face. Facial images can constitute biometric data, which the GDPR treats as a special category and which laws such as Illinois' Biometric Information Privacy Act regulate specifically. We want to be precise about what we do and do not do:
- We use the photo only to produce the restyled image you requested.
- We do not build a faceprint or face template to recognise you, do not attempt to identify who you are, and do not match your face against any database or against other users.
- We do not sell, licence, or trade facial data, and we do not disclose it to anyone beyond the processors listed below.
- Your photos are not used to train AI models. They are used only to place your face into the template you selected.
How long we keep it
- Photos you upload: 30 days. A scheduled job deletes the original file after that. We keep the record that a generation happened — which template, when, whether it succeeded — but not your photograph.
- Generated images: until you delete them. They are what your in-app library shows, so we keep them until you erase your data.
- Usage activity, device information and crash counts: until you erase your data.
- Push token: until you turn notifications off, uninstall, or erase your data.
Why we are allowed to hold it
Where the GDPR applies, our legal bases are: contract — we cannot generate an image without the photo you send; consent — for notifications, and for personalised advertising where that consent is required; and legitimate interests — for crash diagnostics and aggregate usage analysis that keep the app working. Where India's DPDP Act applies, we rely on your consent, given when you accept these terms and choose to upload a photo.
You can withdraw consent at any time by turning notifications off, or by erasing your data and uninstalling the app.
Who else processes it
We do not sell your personal data and we run no advertising exchange of our own. Data reaches these providers because they make the app work:
- Google AdMob — advertising identifiers and ad interaction data, to serve and measure ads.
- Google Firebase — Crashlytics (crash reports), Analytics (aggregate usage), Cloud Messaging (notifications), Remote Config (app settings).
- DigitalOcean — hosts our server and database in India.
We may also disclose data where we are legally required to, or to protect against fraud, abuse, or a threat to someone's safety.
Where your data goes
Our server and database are hosted in India. Google's services process data on infrastructure in several countries, which may include transfers outside India and outside the EEA. Google's transfers rely on the European Commission's Standard Contractual Clauses.
Your rights
Self-service deletion is temporarily unavailable. To request deletion, email androiprogrammers@gmail.com with your install identifier. See the Delete Your Data page for details.
Depending on where you live you may also have the right to access a copy of your data, correct it, restrict or object to its processing, or complain to a regulator. Because the app has no accounts, we need your install identifier to act on any such request — the app shows it under Settings → Delete my data and it can be copied from there. Email androiprogrammers@gmail.com and we will respond within 30 days.
In the EEA you may complain to your national data protection authority; in the UK, to the Information Commissioner's Office; in India, to the Data Protection Board once it is constituted.
Advertising
The app is free and supported by ads served by Google AdMob. You can limit ad personalisation in your device settings (Android: Settings → Google → Ads). In regions where consent is required before personalised ads may be shown, you will be asked first, and you can change that choice later.
Children
This app is not directed at children. It is intended for users aged 16 and over, and we do not knowingly collect data from anyone under that age. If you believe a child has used the app and sent us their data, email us and we will delete it.
Security
All traffic between the app and our server is encrypted with TLS, and the app's release build refuses unencrypted connections outright. The administrative console is restricted to authorised staff accounts. No system is perfectly secure, but we hold no passwords, payment details or contact details, which limits what a breach could expose.
Changes
If we change this policy we will update the date at the top of this page. A change that materially affects how we handle your data will be announced in the app before it takes effect.