Privacy Policy

1. What we collect

• Photos you upload — including face photos and multi-angle face scans used to create your character's likeness.
• Content you create — generated comic panels, covers, characters, sticker sheets, and 3D models.
• Account details — email and name if you sign in with Apple; anonymous identifiers otherwise.
• Order details — shipping name, address, and email when you buy physical products.
• Purchase records — what you bought and your credit balance (payment card numbers are handled by Apple and Stripe; we never see them).
• Usage & diagnostics — generation activity, app session lengths, crash reports, and device/OS information used to run and improve the Service.

2. Face data

Your photos, including face photos, are used for exactly one purpose: generating your custom comic art, stickers, and 3D figures. Specifically:

• Reference photos are sent to our AI providers (Google Gemini, and OpenAI as a fallback) to render your character's likeness, and to Tripo3D when you create a 3D model.
• Reference photos and generated art are stored in your account's private cloud storage so your heroes and comics sync across your devices. They are retained until you delete them or delete your account.
• We do not use face data to identify you, build a facial-recognition database, authenticate you, or for advertising, and we do not sell or share it for those purposes.

3. Where your data goes (our processors)

We use these providers to deliver the Service, each receiving only what its job requires: Supabase (hosting, database, and content storage), Google Gemini and OpenAI (AI image and text generation), Tripo3D (3D model generation), Apple and RevenueCat (in-app purchases), Stripe (web and physical-goods payments), Printful (sticker printing and shipping), Lulu Press (comic book printing and shipping), and Netlify (this website). When you order a physical product, files needed for printing (for example a sticker sheet or book PDF) are shared with the printing partner via unguessable links to fulfil your order.

4. Retention and deletion

• Your content stays in your account until you delete it or delete your account.
• Delete Account (in the app's settings) permanently erases your profile, photos, comics, characters, generated art, and stored files. Records we must keep for safety, fraud, or legal reasons (for example content-abuse reports and purchase ledgers) are kept in pseudonymised form, unlinked from your identity.
• Export (also in the app) gives you a complete JSON archive of your account data — GDPR Art. 15 / CCPA access.

5. Children

The Service is not directed at children under 13, and you must be at least 13 (or the age of digital consent in your region) to create an account. Photos of a child may be uploaded only by that child's parent or legal guardian, or with the guardian's express permission. If we learn an account was created by a child under 13, we will delete it. Guardians can contact us at any time to remove a child's photos.

6. Security

Data is encrypted in transit (TLS). Server data is protected by per-account access controls; devices prove ownership of an account with a secret token stored in the iOS Keychain. No system is perfectly secure, and we do not claim otherwise — if a breach affecting your data occurs, we will notify you as the law requires.

7. Your rights (GDPR & CCPA)

• Access / portability — use in-app Export, or email us.
• Deletion — use in-app Delete Account, or email us.
• Correction, objection, restriction — email us and we'll act within the statutory window.
• CCPA: we do not sell or share personal information as defined by the CCPA, and we don't use it for cross-context behavioural advertising. No tracking across other companies' apps or websites occurs, so no App Tracking Transparency prompt is needed.

8. Contact

Privacy requests and questions: mrlister@mrlister.life or the Support Center. We answer within 30 days.

If this policy changes materially, we'll update this page and note it in the app.