Privacy Policy

This document, referred to as the "Privacy Policy" outlines the terms governing collection and utilization of Personal Information from Users by Ergashev Zarifjon ("Developer", "we", "us", or "our") during download, installation, and use of mobile applications published by Ergashev Zarifjon.

Consent of the User

By downloading, installing, and using the Mobile application, you voluntarily provide written consent for the processing of your Personal Information as specified in this Policy.

1. General Terms

1.1. This Policy constitutes an integral part of the End User License Agreement (EULA) for the Mobile application. By downloading and utilizing it, you fully accept the terms outlined herein.

1.2. Processing methods include collection, recording, systematization, storage, updating, extraction, use, transfer, depersonalization, blocking, deletion, and destruction, with or without automated facilities.

1.3. EULA and other agreement terms apply unless explicitly stated otherwise in this Policy.

2. Personal Information

2.1. Users do not create accounts or provide personal information such as name or email, except optionally during product surveys. Some of our applications collect a device identifier (Device ID) to enable core app functionality and analytics, as described below.

2.2. Personal Information includes the User's email or social media account provided during product surveys for users who made purchases.

2.3. The User acknowledges third-party software use, which may collect and transmit data as described in Section 3.

3. Third-Party Software and Data Collection

Our applications may integrate the following third-party services:

• Amplitude — collects device identifiers and product interaction data (such as feature usage, screen views, and app events) for analytics purposes. This data is linked to the device identifier to help us understand how users interact with our apps and improve functionality.
• Google AdMob — collects advertising data to display third-party rewarded ads within the app. This data is not linked to the user's identity and is not used for cross-app tracking.
• Firebase, Google Analytics, Apple Analytics — may collect device information and usage data for analytics purposes, subject to their respective privacy policies.

None of the data collected by these third-party services is used for tracking purposes (as defined by Apple), nor is it shared with data brokers.

4. Face Data and Photo Processing (Rassom: AI Photo Maker)

This section applies specifically to Rassom: AI Photo Maker and describes how the app handles face data and user photos.

4.1. What Face Data We Collect

When you use Rassom's AI photo generation feature, you may provide a selfie or photo containing your face. The app uses Apple's Vision framework to perform on-device face detection to verify that a face is present in your photo. This detection returns only a presence indicator (whether a face is detected or not). No facial geometry, biometric identifiers, face embeddings, or facial recognition data is extracted, created, or stored. The app does not perform facial recognition, create face templates, or generate any biometric information as defined under applicable biometric privacy laws.

4.2. How We Use Your Photo

Your photo is used solely to generate an AI-transformed image based on the style template or custom prompt you select. The photo is compressed to JPEG format and transmitted securely via HTTPS to our server (hosted on Supabase), where it is immediately forwarded to our AI processing providers for image generation. Your original photo is never written to our database or file storage systems. It exists only in server memory during the brief processing period (typically a few seconds) and is discarded immediately after being forwarded to the AI provider.

4.3. Third-Party AI Processing Providers

To generate AI images, your photo is transmitted to the following third-party AI providers:

• OpenAI (OpenAI, L.L.C.) — via the Images API for template-based generations. OpenAI's data usage policy applies: https://openai.com/policies/privacy-policy
• Google (Google LLC) — via the Gemini API for certain template-based and custom prompt generations. Google's privacy policy applies: https://policies.google.com/privacy

These providers process your photo solely to generate the requested AI image. We do not authorize these providers to retain, store, or use your photo for model training or any other purpose beyond fulfilling the generation request.

4.4. Storage and Retention of Face Data

• Your original photo (input): Never stored on our servers. It exists only in device memory during processing and in transit to the AI provider. It is discarded immediately after the generation request is sent. There is no database column, file storage entry, or backup of your original photo on our servers.
• Generated image (output): Temporarily stored on our servers during download (typically seconds to minutes), then permanently deleted from our servers after you download it. The generated image is saved only on your local device under your control.
• On-device face detection data: Processed entirely on your device using Apple's Vision framework. No face detection data is transmitted to our servers or any third party.

4.5. No Biometric Data

Rassom does not collect, store, or process biometric identifiers or biometric information as defined under applicable biometric privacy laws (including but not limited to BIPA and GDPR). Face detection is used solely to confirm a face is present in the photo and does not create a face template, face print, embedding, or any persistent facial geometry data. The on-device face retouching features (skin smoothing, teeth whitening, eye enhancement) use temporary geometric coordinates computed locally by Apple's Vision framework, which are discarded immediately after the editing operation is applied and are never transmitted off the device.

4.6. Your Rights Regarding Face Data

Since we do not store your original photos on our servers, there is no server-side face data to access, correct, or delete. You may delete any generated images from the app at any time. You may also choose not to provide a photo, in which case the AI generation feature will not be available for use.

5. Children's Privacy

Ergashev Zarifjon does not intentionally collect personal data from children under 16 and will promptly delete such information if inadvertently obtained.

6. Purposes of Personal Information Processing

The Developer may use Personal Information for:

• Communication with the User
• Marketing and promotional activities
• Statistical research and analysis
• Improving the functionality and performance of our applications
• Targeting advertising based on depersonalized data

7. User's Rights

Users have the right to:

• Be informed about data processing
• Access their personal data
• Correct inaccurate data
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Request deletion of personal data
• Data portability

These rights are exercisable by contacting Ergashev Zarifjon via the contact information provided below.

8. Data Retention

Personal Information will be stored as long as necessary or permitted by law. The Developer periodically reviews data processing systems for relevance.

9. Data Protection

Ergashev Zarifjon stores and protects Personal Information against unauthorized access according to internal terms and regulations.

10. Transfer of Personal Information

The Developer may transfer Personal Information to third parties:

• With user consent
• For application functionality
• To third-party service providers
• In the event of asset transfers

11. Amendments to Privacy Policy

Ergashev Zarifjon may unilaterally amend or terminate this Policy without prior notice. Users are advised to regularly check the current version.

12. Contact

For questions, amendments, or deletion requests, contact Ergashev Zarifjon at zarifergashev4@gmail.com.