Privacy Policy

Last Updated: February 20, 2026

Welcome to Caricature Image Converter ("we," "us," or "our"). This Privacy Policy explains how Dedaldev DOO ("Company") collects, uses, discloses, and protects your personal information when you use our mobile application and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

Account Information: Email address, username, and profile details if you create an account.
Usage Data: Information about how you use the Service, including features accessed, time spent, and interaction patterns.
Uploaded Images: Photos you upload for caricature transformation. These are processed temporarily and deleted after AI processing is complete.
Device Information: Device type, operating system, unique device identifiers, and mobile network information.
Payment Information: Transaction details processed through Apple App Store, Google Play, or other payment providers. We do not store your full payment card details.

2. Face Data and Photo Processing

What face data does the app collect?

When you use the app to create a caricature, you provide a portrait photo using your device camera or photo library. This photo may contain an image of a face. We do not extract, analyze, or store any biometric data (such as facial geometry, facial recognition templates, or identity markers) from your photo. The photo is used solely as visual input for AI-based artistic style transformation.

How is the photo used?

Your photo is used exclusively to generate a caricature image in a single, one-time operation. Specifically:

Your photo is sent over an encrypted HTTPS connection to our secure server.
Before generation, the photo is forwarded to a third-party AI content moderation service to screen for prohibited content.
The photo is then forwarded to a third-party AI image generation service to produce the caricature output.
The resulting caricature image is returned to your device and displayed to you.
No facial recognition, biometric profiling, or identity analysis is performed at any stage.

Is face data shared with third parties?

Yes — your photo is transmitted to third-party AI service providers for content moderation and caricature generation, as described above. We evaluate and may change our AI processing partners over time to ensure the best quality and safety standards. Our current AI provider is OpenAI, L.L.C. (USA), whose services are governed by their Privacy Policy. Your photo is not shared with any other third parties. Our AI providers do not use submitted photos to train their models or for any purpose other than generating the requested output.

How long is face data retained?

Your original photo (input): Not stored. It is processed in memory on our server and discarded immediately after the generation request completes.
Generated caricature (output): Temporarily stored on our server for approximately 1 hour for internal operational purposes, then automatically deleted. It is not stored in our database.
On your device: Images are held in memory during the active session only. They are not saved to your device unless you explicitly choose to save them.

Is face data linked to your user account or identity?

No. Your photo is never associated with your user account, stored alongside any personal identifier, or used to identify you across sessions. Each generation is a completely independent, one-time operation with no persistent link to your profile.

3. How We Use Your Information

We use the collected information to:

Provide and maintain the Service, including processing your caricature transformations.
Improve and personalize your experience.
Process transactions and send related information.
Send promotional communications (with your consent).
Detect, prevent, and address technical issues or fraudulent activity.
Detect, investigate, and prevent abuse of the Service, including automated scripting, systematic circumvention of usage limits, and unauthorized API usage.
Comply with legal obligations.

Abuse and Fraud Prevention: We collect and analyze technical usage data — including IP addresses, request frequency, client identifiers, device fingerprints, and API usage patterns — for the purpose of detecting, preventing, and responding to abuse, fraud, automated scripting, and violations of our Terms of Service. Accounts identified as abusive may be classified as restricted accounts and may have their access to the Service limited or terminated. This processing is carried out on the basis of our legitimate interests in maintaining the security, integrity, and fair availability of the Service for all users (Article 6(1)(f) GDPR). By using the Service, you acknowledge and consent to this processing.

4. Analytics and Tracking

We use analytics services to understand how users interact with our Service. Our analytics partners include:

Firebase Analytics (Google LLC) — app usage analytics and crash reporting.
Microsoft Clarity (Microsoft Corporation) — session recording and user interaction heatmaps. Clarity may record screen interactions during your session to help us improve the app experience. Recorded sessions do not include your photos or generated images.

These services may collect information about your device, location, and usage patterns. You can opt out of analytics tracking through your device settings.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, or to comply with legal obligations. Specifically:

Uploaded (input) photos: Not stored. Processed in memory and discarded immediately after AI generation completes.
Generated caricature images: Temporarily stored on our server for approximately 1 hour for internal operational purposes, then automatically deleted. Not stored in our database.
Account information: Retained until you delete your account or request deletion.
Usage data: Retained for up to 24 months for analytics purposes.

6. Third-Party Services and AI Processing

We use the following third-party services to operate the app:

Third-party AI service providers — AI image generation and content moderation. Your portrait photo is transmitted to our current AI provider for caricature generation. We evaluate AI tools continuously and may change providers to ensure the best available quality and safety. Our current provider is OpenAI, L.L.C. (USA) — see OpenAI Privacy Policy.
Firebase / Google LLC — Authentication (Sign in with Google), push notifications, and analytics.
RevenueCat, Inc. — Subscription and in-app purchase management.
Microsoft Clarity — Session recording and interaction analytics.
Apple, Inc. — Sign in with Apple authentication and App Store payments.

We may also share your information in the following circumstances:

Legal Requirements: When required by law, court order, or governmental authority.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

7. Data Security

We implement industry-standard security measures to protect your information:

Encryption in transit (HTTPS/TLS) and at rest.
Secure cloud infrastructure with access controls.
Payment processing that adheres to PCI-DSS standards.
Regular security assessments and updates.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain data protection rights under GDPR:

Access: Request a copy of your personal data.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your personal data.
Restriction: Request limitation of processing.
Portability: Request transfer of your data to another service.
Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at the email below. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately in compliance with COPPA (Children's Online Privacy Protection Act).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Serbia, where our company is located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Dedaldev DOO
Belgrade, Serbia
Email: info@dedaldev.com