Last updated: 19 August 2026
PosePal ("the app", "we") is a camera and photo-editing app. This policy explains what data the app handles, why, and what happens to it. The short version: your photos stay on your device unless you run an AI feature, we don't run ads, and we don't track you.
When you deliberately run an AI feature (Digital Flash, AI Skin Retouch, Background Remover), the selected photo is sent over an encrypted connection to Google's Gemini API to produce the edit, then the result is returned to your device. We do not keep copies of these photos on our servers; Google processes them under its Gemini API terms. Nothing is uploaded unless you tap an AI feature.
Google receives only the selected photo and instructions needed to make the requested edit. We require every service provider that receives personal data from PosePal to use it only for the service described here and to protect it to the same or an equivalent standard as this policy. We do not sell the photo, permit its use for advertising, or opt in to voluntary API-log or dataset sharing.
PosePal asks for your consent before the first such upload. You can withdraw that consent at any time in the app under Profile → Cloud AI processing. With it off, no photo leaves your device; the on-device editing tools keep working, and you will be shown the full Google Gemini disclosure again the next time you start an AI edit. Consent is remembered separately for each signed-in account on the device.
PosePal has editing features that work on faces, so this section sets out exactly what face data the app handles, what it is used for, who it is shared with, how long it is kept, and how you delete it or withdraw your permission.
When you open a photo in the editor, the app uses Apple's Vision framework, running entirely on your device, to measure two things from that photo:
Nothing is measured until you open a photo for editing, and the measurements come only from that photo. PosePal does not use ARKit face tracking, does not access TrueDepth face geometry, and does not build a 3D face mesh, a faceprint, or any other template capable of identifying or recognising a person. The app does not attempt to determine who anyone is, does not match faces against any database, and does not link face measurements to your account or to any other person.
These measurements are used for three things, and nothing else:
Face data is never used for advertising, profiling, analytics, identification, authentication, age estimation, or for training any model.
The face rectangle and landmark points are never transmitted to anyone, including us. They are produced on your device, used on your device, and discarded on your device. They are not sent to Google, Supabase or RevenueCat, and they are not included in the requests the AI features make.
The one thing that can leave your device is the photograph itself, and only when you deliberately run one of the three AI tools (Digital Flash, AI Skin Retouch, Background Remover). If that photo shows your face, then your face is in the image sent to Google's Gemini API to produce the edit. This is the only circumstance in which anything showing your face is shared with a third party; it never happens without the permission described below; and what is sent is the picture itself — not any measurement, template or faceprint derived from it. The rest of the handling of that photo is described under AI features above.
Equal protection. Google is the only third party that ever receives an image containing your face. We require Google, and every other service provider that receives personal data from PosePal, to protect that data to the same or an equivalent standard as this privacy policy, to use it only to perform the edit you asked for, and to keep no copy afterwards. We do not sell it, do not permit its use for advertising, and do not opt in to any voluntary log-retention or dataset-sharing programme that would allow it to be used to train models.
Face measurements are held in volatile memory only, for the editing session. They are never written to disk, never backed up, and never attached to your account. The app keeps them for at most the last 8 photos you edited and discards the oldest beyond that, and it discards all of them when you sign out, when you delete your account, and when the app closes. Re-opening a photo simply measures it again. Because nothing is stored, there is no face-data archive and no retention period longer than the time the app is open.
The camera is used when you choose to take a photo or portrait for editing. PosePal does not use ARKit face tracking, does not access TrueDepth face geometry, and does not collect a 3D face mesh. The optional 3D face scan that appeared in earlier development builds was removed and is not present in the app.
Photos live on your device — deleting them in the app (or deleting the app) removes them. You can delete your account any time in the app under Profile → Delete account; this permanently deletes your Supabase authentication record, account-linked AI usage rows, RevenueCat customer record, and the photos owned by that account on the device. Deleting your PosePal account does not cancel an auto-renewable Apple subscription. Apple billing continues until you cancel it under Apple Account → Subscriptions, and Apple may retain transaction records required for billing, tax, fraud prevention, and legal compliance.
PosePal is not directed at children under 13, and we do not knowingly collect data from them.
If this policy changes, the new version will be posted at this URL with an updated date.
Questions or requests: tripathysattvik@gmail.com