Privacy Policy

This Privacy Policy explains what data Persoa collects, why, and what you can do about it.

Data we collect

• Google account: email, Google user ID, display name, profile picture — used to sign you in and identify your account.
• Photos you upload: selfies you submit for portrait generation. Stored temporarily so the AI provider can process them and so we can support you if a generation fails.
• Generated portraits: stored in your account so you can view them in "My Gallery".
• Purchase records: product ID and Google Play purchase token for each credit purchase (used to verify and grant credits). We do NOT receive your card number or Google account payment details.
• Usage logs: request timestamps, generation counts, hashed device identifiers (for abuse prevention only), and error diagnostics — used to keep the service running and prevent multi-account fraud.

How we use it

• To provide the service (authenticate you, generate portraits, show your gallery).
• To process payments via Google Play Billing.
• To prevent fraud, spam, and abuse.
• To improve reliability (aggregate usage stats only).

Who we share it with

• OpenAI — receives your uploaded photo and prompt to generate the portrait. Governed by OpenAI's data policy for API traffic (no training on API data by default).
• Cloudinary / Amazon S3 — stores your uploaded photos and generated portraits.
• Google Play — processes payments and provides purchase verification.
• We do NOT sell your data or share it with advertisers.

Retention

• Uploaded selfies: retained up to 30 days after generation, then deleted.
• Generated portraits: retained until you delete them or delete your account.
• Purchase records: retained as long as legally required for tax and audit purposes.
• Logs: retained up to 90 days.

Your rights

• Access — email support@zubolin.com to request a copy of your data.
• Deletion — follow the steps on our Delete account page, or email support@zubolin.com with "delete my account" from your registered Google email. Deletion is permanent and removes portraits, uploaded selfies, and account records within 30 days.
• Correction — profile fields (name, email) come from Google; update them there.

Security

We use HTTPS for all traffic, encrypt data at rest, and restrict access on a need-to-know basis. No system is 100% secure — please report vulnerabilities to support@zubolin.com.

Children

Persoa is not directed to children under 13. If we learn we've collected data from a child under 13, we will delete it.

International transfers

Data may be processed in the United States (OpenAI, AWS) and other jurisdictions. By using the app you consent to this transfer.

Changes

We may update this policy. Material changes will be highlighted in the app.

Contact

Questions? Email support@zubolin.com.