Privacy Policy - MissPic

This Privacy Policy explains how CreatorCraft Ltd, trading as MissPic ("MissPic", "we", "us", or "our"), collects, uses, stores, and shares personal data when you use the MissPic mobile app, visit misspic.app, or contact us.

CreatorCraft Ltd is the data controller for the personal data described in this policy. Our registered address is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. You can contact us at info@misspic.app.

1. The Information We Collect

We collect only the information we need to provide, improve, protect, and support MissPic.

Information you provide in the app

Photos you choose to upload or select for AI portrait enhancement.
Enhanced photo outputs generated by the app.
Feedback you submit about edited photos, including ratings and comments.
Photos that receive poor ratings, where we keep a backup for internal quality review.
Account details for paid users, such as your email address, account identifier, and sign-in information from Apple, Google, or email login.
Subscription and purchase status needed to unlock paid features. Payments are processed by Apple or Google, not directly by MissPic.

Information collected automatically

Device and app information, such as device type, operating system, app version, and diagnostic data.
Crash and error reports through Sentry, which help us identify and fix technical problems.
Basic usage and service data needed to run the app, manage accounts, and prevent abuse.
Website analytics through Google Analytics, such as page views, browser type, device type, approximate location, and interaction data.

2. How We Use Your Information

We use your personal data for the following purposes:

To process, enhance, and return the photos you choose to edit.
To create and manage accounts for paid users.
To manage access to subscriptions and paid features.
To review poorly-rated photo results and related feedback so we can diagnose quality issues and improve the service.
To monitor app stability, investigate crashes, and fix bugs.
To understand how people use our website and improve our marketing pages.
To respond to support requests and other communications.
To protect MissPic, our users, and our services from misuse, fraud, or unlawful activity.
To comply with legal obligations and enforce our terms.

3. Our Lawful Bases

Under UK data protection law, we rely on the following lawful bases:

Contract: to provide the app, process your photos, manage subscriptions, and support your account.
Legitimate interests: to keep the app secure, fix bugs, review poor-quality results, improve our service, and prevent misuse. We consider your rights before relying on this basis.
Consent: where required, including for non-essential website analytics cookies and similar technologies.
Legal obligation: where we need to keep or disclose information to comply with applicable law.

4. Photo Processing and AI

MissPic is an AI portrait enhancement app. When you choose a photo to edit, we send it to our cloud infrastructure and AI processing provider so the requested enhancement can be generated. This processing may involve photos of identifiable people, so you should only upload images that you have the right and permission to use.

We do not use your photos to train AI or machine-learning models. We do not sell your photos or personal data.

Photos are not stored long term after ordinary processing. However, if you rate an edited photo poorly or submit feedback about a poor result, we may retain a copy of the relevant original and edited photo with your feedback for internal quality review. This helps us understand what went wrong and improve MissPic. These review copies are used internally and are not used to train AI models unless we ask for and receive separate consent.

5. Third-Party Services

We use trusted third-party providers to operate MissPic. These providers process personal data only as needed to provide their services to us.

Supabase: backend infrastructure, database, storage, and account-related services.
AI processing provider: cloud-based processing needed to generate photo enhancements.
Superwall: paywall and subscription access management.
Sentry: crash, error, and diagnostic reporting.
Apple and Google: app distribution, platform sign-in where used, and subscription payment processing.
Google Analytics: website analytics for misspic.app.
Vercel, Google Fonts, and content delivery networks: website hosting, fonts, and static asset delivery.

We are not responsible for the privacy practices of app stores, payment platforms, or other third-party services that you access directly. Their own privacy notices apply to their processing.

6. International Transfers

Some of our providers may process personal data outside the United Kingdom or European Economic Area, including in the United States. Where required, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or equivalent contractual protections.

7. How Long We Keep Information

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required by law.

Photos uploaded for normal AI processing are deleted within 72 hours after processing is complete.
Poorly-rated photos and related feedback retained for quality review are kept for up to 12 months, then deleted or anonymised.
Account information for paid users is kept while the account remains active and for a reasonable period afterwards for backups, legal, tax, fraud-prevention, and support purposes.
Crash and diagnostic data is kept for the period configured in Sentry, typically up to 90 days unless needed longer to investigate a specific issue.
Website analytics data is kept according to our Google Analytics retention settings.

8. Your Rights

Under UK data protection law, you may have the right to:

Access the personal data we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete your personal data.
Ask us to restrict or object to certain processing.
Ask for a copy of your data in a portable format.
Withdraw consent where processing is based on consent.
Complain to the UK Information Commissioner's Office at https://ico.org.uk.

To exercise your rights, contact us at info@misspic.app. We will usually respond within one month.

9. Cookies and Website Analytics

Our website uses Google Analytics to understand how visitors use misspic.app. Google Analytics may set cookies or use similar technologies to collect information about your device, browser, and website activity. Where required by law, we will ask for your consent before setting non-essential analytics cookies.

10. Children

MissPic is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will take reasonable steps to delete it.

If you are under 18, you should use MissPic only with permission from a parent or guardian.

11. Security

We use reasonable technical and organisational measures designed to protect personal data. However, no internet or mobile app service can be guaranteed to be completely secure. You use MissPic with that understanding.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by updating this page, providing an in-app notice, or contacting you where appropriate. The latest version will always be available on this page.

13. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, contact CreatorCraft Ltd at info@misspic.app.