PosePal — Privacy Policy

Last updated: 24 September 2026

PosePal ("the app", "we") is a camera and photo-editing app. This policy explains what data the app handles, why, and what happens to it. The short version: your photos stay on your device unless you run an AI feature, we don't run ads, we don't sell anything, and we don't follow you across other companies' apps or websites. We do measure how PosePal itself is used, plus the few answers you give when you set it up, so we can see which features work — you can switch that off in the app.

Data we collect

• Account data — signing in is optional. If you sign in with Apple or Google: the email address and name that sign-in shares, and a user ID. If you tap “skip for now” instead: a user ID only, with no name and no email, tied to a random key kept on your device. You can sign in later from Profile, and your user ID stays the same. Used to keep your library scoped to your account, attach and restore subscription access through RevenueCat, and authorize and rate-limit cloud AI requests. Stored with our authentication provider, Supabase, and shared with RevenueCat as the app user ID.
• Purchase history — subscription products, transaction status, and whether you have active PosePal PRO access. Apple and our subscription provider, RevenueCat, process this to validate purchases, enable and restore Pro, prevent fraud, and provide aggregate subscription dashboards and experiment results. It is linked to your app account, but is not used for advertising or cross-app tracking. We never see your payment-card or Apple Account payment details.
• Photos — photos you take or import are stored on your device only. They are never uploaded, except as described under "AI features" below.
• Face data — when you edit a photo, the app measures the position of a face in that photo on your device, to aim its retouch and lighting tools. This never leaves your device and is never stored. See Face data below for the full description, including retention, sharing and deletion.
• AI usage count — a running count of how many AI edits your account has run today. Used only to cap daily spend and stop abuse, never to build a profile. It records how many, not what you edited, and its account-linked rows are deleted when you delete your account.
• Product analytics — which screens you open and which features you use (for example: that a pose was chosen, that an AI edit ran and whether it succeeded, that the subscription screen appeared), together with the technical context that rides along with an event, such as app version and build, device model, iOS version, language, time zone and a session identifier. Used only to work out where people get stuck and what to fix. It records that a feature was used, never what you made with it: it never includes a photo, anything measured from a face, a caption, a search you typed, or your name or email. Every event also carries whether you had PosePal PRO at the time, so we can tell whether free and paying people hit different problems. During setup these records carry no identity; once you finish setup, by signing in or by tapping “skip for now”, they are linked to your account's user ID. Finishing setup also attaches how you continued (Apple, Google or skipped), a flag marking our own test accounts, and the answers you tapped during setup: the photo problem you picked, whether you asked to be shown poses for women, men or everyone, and the subjects you ticked. Each one is a pick from a short fixed list in the app, never anything you typed, and the pose question asks which guides to show you, not what your own gender is. We keep them so we can see which kinds of people get stuck where. The subjects question can be left blank, and if you already have an account and tap “log in” at the start you skip all three, so none of them are attached to you. Processed on our behalf by PostHog (see Third-party services), which stores them in Germany. Each event carries a flag that switches off PostHog's location lookup, so no location is worked out from your IP address and none is kept. Kept for up to 12 months. Once you are past setup you can turn this off at any time in the app under Profile › Product analytics, and we will delete the records linked to your account if you ask.

AI features

When you deliberately run an AI feature (Digital Flash, AI Skin Retouch, Background Remover), the selected photo is sent over an encrypted connection to Google's Gemini API to produce the edit, then the result is returned to your device. We do not keep copies of these photos on our servers; Google processes them under its Gemini API terms. Nothing is uploaded unless you tap an AI feature.

Google receives only the selected photo and instructions needed to make the requested edit. We require every service provider that receives personal data from PosePal to use it only for the service described here and to protect it to the same or an equivalent standard as this policy. We do not sell the photo, permit its use for advertising, or opt in to voluntary API-log or dataset sharing.

PosePal asks for your consent before the first such upload. You can withdraw that consent at any time in the app under Profile → Cloud AI processing. With it off, no photo leaves your device; the on-device editing tools keep working, and you will be shown the full Google Gemini disclosure again the next time you start an AI edit. Consent is remembered separately for each account on the device, including one made by skipping sign-in.

Face data

PosePal has editing features that work on faces, so this section sets out exactly what face data the app handles, what it is used for, who it is shared with, how long it is kept, and how you delete it or withdraw your permission.

What face data we collect, and how we collect it

When you open a photo in the editor, the app uses Apple's Vision framework, running entirely on your device, to measure two things from that photo:

• the rectangle containing the largest face in the photo, and
• a set of two-dimensional landmark points outlining the eyes, eyebrows and lips inside that rectangle.

Nothing is measured until you open a photo for editing, and the measurements come only from that photo. PosePal does not use ARKit face tracking, does not access TrueDepth face geometry, and does not build a 3D face mesh, a faceprint, or any other template capable of identifying or recognising a person. The app does not attempt to determine who anyone is, does not match faces against any database, and does not link face measurements to your account or to any other person.

All intended uses and disclosures of face data

These measurements are used for three things, and nothing else:

• AI Skin Retouch — the landmark points are turned into soft grayscale region masks so smoothing is applied to skin only, and stays off the eyes, eyebrows and lips.
• Automatic lighting — if the face rectangle is darker than the rest of the frame, the app lifts the exposure a little in that area.
• The "face detected" indicator in the retouch tool, which tells you a face was found so you know the localized tools will apply.

Face data is never used for advertising, profiling, analytics, identification, authentication, age estimation, or for training any model.

Face data sharing

The face rectangle and landmark points are never transmitted to anyone, including us. They are produced on your device, used on your device, and discarded on your device. They are not sent to Google, Supabase or RevenueCat, and they are not included in the requests the AI features make.

The one thing that can leave your device is the photograph itself, and only when you deliberately run one of the three AI tools (Digital Flash, AI Skin Retouch, Background Remover). If that photo shows your face, then your face is in the image sent to Google's Gemini API to produce the edit. This is the only circumstance in which anything showing your face is shared with a third party; it never happens without the permission described below; and what is sent is the picture itself — not any measurement, template or faceprint derived from it. The rest of the handling of that photo is described under AI features above.

Equal protection. Google is the only third party that ever receives an image containing your face. We require Google, and every other service provider that receives personal data from PosePal, to protect that data to the same or an equivalent standard as this privacy policy, to use it only to perform the edit you asked for, and to keep no copy afterwards. We do not sell it, do not permit its use for advertising, and do not opt in to any voluntary log-retention or dataset-sharing programme that would allow it to be used to train models.

Face data retention

Face measurements are held in volatile memory only, for the editing session. They are never written to disk, never backed up, and never attached to your account. The app keeps them for at most the last 8 photos you edited and discards the oldest beyond that, and it discards all of them when you sign out, when you delete your account, and when the app closes. Re-opening a photo simply measures it again. Because nothing is stored, there is no face-data archive and no retention period longer than the time the app is open.

Deleting your face data, and withdrawing your consent

• To delete the face measurements: close the app. They exist only in memory and are gone. Deleting the photo itself (in the app, or by deleting the app) removes the only thing they can ever be derived from.
• To withdraw your permission to send photos of your face to Google: turn off Profile → Cloud AI processing in the app. From that moment no photo leaves your device. The on-device editing tools keep working; only the three AI tools stop. You will be shown the full Google Gemini disclosure again, and asked again, before any future upload. This permission is asked for before the first upload, and is remembered separately for each account on the device, including one made by skipping sign-in.
• To stop face measurement entirely: stop opening photos in the editor, or delete the app. There is no persistent record to erase.
• To delete everything else: Profile → Delete account, as described under Data retention & deletion below.

Camera and TrueDepth

The camera is used when you choose to take a photo or portrait for editing. PosePal does not use ARKit face tracking, does not access TrueDepth face geometry, and does not collect a 3D face mesh. The optional 3D face scan that appeared in earlier development builds was removed and is not present in the app.

What we don't do

• No ads, no ad networks, no data sales.
• No cross-app tracking. We don't follow you across other companies' apps or websites, we don't use the advertising identifier, and we don't share anything with data brokers. The app declares "no tracking" in its App Store privacy manifest.
• No analytics profiles built on your photos. Our product analytics records that a feature was used, never the photo it was used on, and never anything measured from a face.

Data retention & deletion

Photos live on your device — deleting them in the app (or deleting the app) removes them. You can delete your account any time in the app under Profile → Delete account; this permanently deletes your Supabase authentication record, account-linked AI usage rows, RevenueCat customer record, and the photos owned by that account on the device. It works the same for an account made by skipping sign-in. Deleting your PosePal account does not cancel an auto-renewable Apple subscription. Apple billing continues until you cancel it under Apple Account → Subscriptions, and Apple may retain transaction records required for billing, tax, fraud prevention, and legal compliance.

Third-party services

• Supabase — account storage and authentication (Sign in with Apple, Google, or an anonymous account if you skip sign-in).
• Apple — payments and subscription management.
• RevenueCat — subscription status.
• PostHog (PostHog, Inc.) — product analytics. Runs on PostHog Cloud EU, hosted in Frankfurt, Germany. Receives the usage records described under Data we collect; it never receives a photo or any face measurement.
• Google Gemini API — AI photo edits you explicitly request. The only third party that receives a photo, which may show your face. See Face data.

Children

PosePal is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version will be posted at this URL with an updated date.

Contact

Questions or requests: tripathysattvik@gmail.com