Privacy Policy

Last updated: February 9, 2026

TooniAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the TooniAI mobile application (the "App"). Please read this policy carefully. By using the App, you consent to the practices described herein.

1. Information We Collect

Photos You Provide

When you use TooniAI, you select photos from your device to transform into art styles. These photos are transmitted to our server-side API proxy, which forwards them to Google's Gemini API for AI processing. We do not store your photos on our servers. Photos are processed in real-time and discarded within seconds of processing completion. The generated styled image is returned to your device and is not retained server-side.

No AI Training: Your photos are not used to train, fine-tune, or improve any AI or machine learning models. Photos are used solely for the one-time purpose of generating your requested art style transformation.

Facial Data

When you submit a photo containing a face, the AI service processes facial features as part of the art style transformation. However:

We do not extract, collect, or store biometric identifiers or biometric information (as defined under BIPA, CUBI, or similar laws).
We do not perform facial recognition, facial identification, or facial authentication.
We do not create facial geometry maps, faceprints, or facial templates.
Facial features are processed solely for artistic style transformation by the third-party AI service and are not retained after the image is generated.

Locally Stored Data

The following data is stored locally on your device only and is never transmitted to our servers:

Generated images — Your styled images are saved in the app's local gallery on your device.
Preferences — Onboarding state, style quiz results, and app settings.
Credits balance — Your weekly credit count and bonus credits.
Notification preferences — Whether you've opted in to local notifications.
Review prompt tracking — Dates and counts for App Store review prompts.

Purchase Information

Subscriptions and in-app purchases are managed through Apple's App Store and RevenueCat. RevenueCat creates an anonymous user ID tied to your Apple ID via the App Store receipt. We do not require you to create an account, provide an email address, or sign in. We do not have access to your Apple ID, name, or email through this process. Purchase history (subscription status, transaction records) is collected by RevenueCat for entitlement verification and fraud prevention.

Tracking and Analytics

The App does not use cookies, tracking pixels, advertising identifiers (IDFA), analytics SDKs, or any cross-app tracking technologies. We do not track you across other companies' apps or websites. We do not respond to "Do Not Track" browser signals, as the App does not operate in a web browser context.

2. Summary of Data Practices

Data Type	Collected	Purpose	Linked to Identity
Photos	Yes (transmitted, not stored)	AI style transformation	No
Purchase History	Yes (via RevenueCat)	Entitlements, fraud prevention	No (anonymous ID)
Anonymous User ID	Yes (via RevenueCat)	Subscription management	No
Generated Images	Device only	Gallery display	No
App Preferences	Device only	App functionality	No

We do not sell your personal information. We have not sold personal information in the preceding 12 months.

3. How We Use Your Information

We use the information described above solely for the following purposes:

Photo processing — To transmit your selected photo to the Google Gemini AI service via our server-side proxy and return the styled result to you.
Subscription management — To verify your subscription status and credit balance via RevenueCat.
Local notifications — To send locally scheduled reminders (weekly credit refresh, re-engagement) if you have explicitly opted in. These are local-only notifications; no push notification server is used.
App Store reviews — To determine eligibility for native App Store review prompts based on locally tracked usage counts.

We do not use your photos or data for marketing, advertising, data mining, or any purpose other than providing the art style transformation service.

4. Third-Party Services

We use the following third-party services. Your data shared with these services is governed by their respective privacy policies:

Google Gemini API — Processes your photos to generate styled images. Photos are sent to Google's servers for processing via our server-side proxy. Per Google's API Terms of Service, data submitted through the paid Gemini API is not used by Google to train its AI models. Google may temporarily retain API inputs for abuse monitoring purposes. See Google's Privacy Policy and Gemini API Terms.
RevenueCat — Manages subscriptions and in-app purchases. RevenueCat receives anonymous purchase data from the App Store for entitlement verification and analytics. See RevenueCat's Privacy Policy.
Apple App Store — Handles all payment processing for subscriptions and credit packs. See Apple's Privacy Policy.

Each third-party provider is required to protect your data in accordance with their published privacy policies. We do not share your data with any other third parties.

5. Data Sharing

We do not sell, rent, trade, or share your personal information with third parties for marketing, advertising, or any purpose other than operating the App. Your photos are shared only with Google's Gemini API for the sole purpose of generating your requested art style transformation.

We may disclose information if required to do so by law, regulation, legal process, or governmental request.

6. International Data Transfers

Your photos are transmitted through our server-side API proxy (hosted on Expo Application Services infrastructure) to Google's Gemini API servers, which may be located in the United States or other countries. By using the App, you consent to the transfer of your photo data to servers outside your country of residence. We rely on the data protection commitments made by our service providers, including Google's and RevenueCat's data processing agreements, to ensure adequate protection of your data.

7. Data Retention

Photos — Not retained on our servers. Transmitted for processing and discarded within seconds of completion. Google may temporarily retain API inputs in accordance with their data retention policies.
Generated images — Stored locally on your device. You can delete them at any time from the app's gallery (long-press to delete).
Local data — Stored on your device via AsyncStorage. Deleted when you uninstall the app.
Subscription data — Managed by RevenueCat and Apple. Retained according to their respective data retention policies.

8. Data Security

We take reasonable measures to protect the information processed through our App:

The Gemini API key is stored securely as a server-side environment variable and is never exposed in the client app.
Photo data is transmitted over HTTPS (encrypted in transit) to our server-side API route, which proxies requests to Google Gemini.
No personal data is stored on our servers.
Locally stored data on your device is protected by your device's security features (passcode, Face ID, Touch ID).

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. Children's Privacy

TooniAI is not directed at children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us at support@tooniai.app and we will take steps to delete such information.

10. Your Privacy Rights

All Users

Regardless of your location, you can:

Access and delete generated images — View and delete your images from the app's gallery at any time.
Manage notifications — Disable notifications through your device's Settings app.
Revoke photo access — Revoke the app's photo library permission through your device's Settings app.
Manage subscriptions — Manage or cancel subscriptions through the App Store settings.
Full data removal — Uninstalling the app removes all locally stored data. Note: uninstalling does not cancel an active subscription; you must cancel through the App Store.

European Economic Area (EEA) Residents — GDPR

If you reside in the EEA, you have the following additional rights under the General Data Protection Regulation:

Legal basis for processing: We process your photos based on your explicit consent (you choose to select and submit a photo for transformation). Purchase data is processed based on contractual necessity (to fulfill your subscription or credit pack purchase).
Right of access — You may request a copy of the personal data we hold about you.
Right to rectification — You may request correction of inaccurate data.
Right to erasure — You may request deletion of your data.
Right to restrict processing — You may request that we limit how we use your data.
Right to data portability — You may request your data in a machine-readable format.
Right to object — You may object to certain types of processing.
Right to withdraw consent — You may withdraw consent at any time by discontinuing use of the App.
Right to lodge a complaint — You have the right to lodge a complaint with your local data protection supervisory authority.

Since we do not store personal data on our servers (photos are processed and discarded in real-time), most data exists only on your device and can be managed directly by you. For any requests related to RevenueCat-held data, please contact us at support@tooniai.app.

California Residents — CCPA/CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

Right to know — You may request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to delete — You may request deletion of your personal information.
Right to correct — You may request correction of inaccurate personal information.
Right to opt out of sale or sharing — We do not sell or share your personal information for cross-context behavioral advertising.
Non-discrimination — We will not discriminate against you for exercising your privacy rights.

Categories of personal information collected in the past 12 months:

User content (photos) — transmitted for processing, not stored
Commercial information (purchase history) — collected via RevenueCat

Categories of sources: Directly from you (photos) and from Apple App Store/RevenueCat (purchases).

Business purpose: Providing the AI art style transformation service and managing subscriptions.

To exercise any of these rights, contact us at support@tooniai.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the App after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your privacy rights, please contact us at:

support@tooniai.app