Privacy Policy

Rocket Digital Limited ("we," "us," or "our") operates SelfAI - AI Photo Studio (the "App") and the website https://www.ai-photo.app (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website. Please read this policy carefully. By using SelfAI, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: When you create an account, we collect your email address, display name, and authentication credentials through Firebase Authentication. You may also sign in with Apple or Google, in which case we receive the basic profile information those providers share.
• Photos and selfies: When you use our AI photo generation features, you upload selfies or photos. These images are processed by our AI services to generate new photos in the styles you select.
• Payment information: Subscription purchases are processed through Apple App Store, Google Play Store, or Stripe. We do not directly collect or store your credit card details. RevenueCat manages subscription status on our behalf.
• Support communications: If you contact us for support, we collect your name, email, and the content of your message.

1.2 Information Collected Automatically

• Device information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage data: Pages visited, features used, photo styles selected, session duration, and interaction patterns within the App and Website.
• Log data: IP address, browser type, referring/exit pages, timestamps, and crash reports.
• Cookies and tracking technologies: We use cookies, pixels, and similar technologies on our Website for analytics, advertising, and functionality purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the SelfAI App and Website, including generating AI photos from your selfies.
• To process your subscription and manage your account through RevenueCat and Firebase.
• To improve, personalise, and expand our services, including training and refining the quality of our AI photo generation pipeline.
• To communicate with you, including sending service-related notifications, updates, and promotional materials (with your consent where required).
• To display relevant advertisements through Google AdMob for free-tier users.
• To analyse usage trends and measure the effectiveness of our marketing campaigns through Google Analytics, Meta Pixel, and Vercel Analytics.
• To detect, prevent, and address technical issues, fraud, and security concerns.
• To comply with legal obligations and enforce our Terms of Service.

3. Photos and AI Processing

Your photos are at the core of what SelfAI does. Here is exactly how we handle them:

3.1 Upload and Storage

When you upload selfies, they are securely transmitted over encrypted connections (TLS) and stored in Firebase Cloud Storage. Access to your stored photos is restricted to your authenticated account.

3.2 AI Processing

To generate your AI headshots and styled photos, your uploaded selfies are sent to one or more of the following third-party AI processing services:

• OpenAI — for AI image generation and transformation.
• Microsoft Azure — for cloud computing and AI services used in image processing.
• Replicate — for running AI model inference to generate styled photos.
• Fal.ai — for AI model inference to generate styled photos.

These providers process your photos solely to generate the images you request. Each provider operates under its own privacy policy and data processing agreements with us. We select providers that commit to not using your photos for training their own models without explicit consent.

3.3 Generated Photos

The AI-generated photos created from your selfies are stored in your account on Firebase Cloud Storage. You can download, share, or delete them at any time from within the App.

3.4 Your Control Over Your Photos

You retain ownership of your original photos and the AI-generated images. You can delete your uploaded selfies and generated photos at any time through the App. When you delete your account, all associated photos — both uploaded and generated — are permanently removed from our systems within 30 days.

4. Third-Party Services

We use the following third-party services to operate SelfAI. Each service may collect and process data as described below:

5. Advertising

SelfAI displays advertisements to users on the free tier through Google AdMob. These ads may be personalised based on your interests, device information, and activity, or they may be non-personalised depending on your consent preferences and regional regulations.

Google AdMob may use your device's advertising identifier (IDFA on iOS, Advertising ID on Android) to serve relevant ads. You can opt out of personalised advertising through your device settings:

• iOS:Settings > Privacy & Security > Tracking, and disable "Allow Apps to Request to Track."
• Android: Settings > Privacy > Ads, and select "Delete advertising ID."

Subscribing to a paid plan removes all advertisements from the App.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion.
• Uploaded photos: Retained until you delete them or delete your account. Removed from all systems within 30 days of deletion.
• Generated photos: Retained until you delete them or delete your account. Removed from all systems within 30 days of deletion.
• AI processing data: Photos sent to AI providers (OpenAI, Azure, Replicate, Fal.ai) for generation are processed transiently. These providers do not retain your photos after processing is complete, in accordance with our data processing agreements.
• Usage and analytics data: Retained in aggregated or anonymised form for up to 26 months for analytical purposes.
• Transaction records: Subscription and payment records may be retained for up to 7 years to comply with tax and accounting obligations.

7. Children's Privacy

SelfAI is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@rocketdigital.ai and we will promptly delete that information from our systems.

If we discover that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that data and terminate the associated account.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 Rights Under the EU/UK General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete personal data.
• Eraseyour personal data ("right to be forgotten").
• Restrict processing of your personal data in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent at any time where processing is based on your consent.
• Lodge a complaint with your local data protection authority.

8.2 Rights Under the California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell.
• Delete personal information we have collected from you, subject to certain exceptions.
• Opt out of the sale of personal information. We do not sell your personal information in the traditional sense, but certain data sharing for advertising purposes (e.g., Meta Pixel, Google AdMob) may constitute a "sale" under the CCPA.
• Non-discrimination — we will not discriminate against you for exercising your CCPA rights.

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at hello@rocketdigital.ai. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

9. International Data Transfers

Rocket Digital Limited is based in Hong Kong. Your information may be transferred to, stored, and processed in countries other than your own, including the United States, where our third-party service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in recognised data transfer frameworks.

By using SelfAI, you acknowledge that your data may be processed in multiple jurisdictions as necessary to provide the service, including for AI photo generation by providers located in the United States.

10. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of data at rest in Firebase Cloud Storage.
• Firebase Security Rules to restrict data access to authenticated and authorised users.
• Regular security reviews of our infrastructure and third-party integrations.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining strong safeguards and promptly addressing any security incidents.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notification. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: