Privacy
Draft privacy language for what SelfMosaic stores, what outside services do, and how deletion or export requests should work.
Draft for founder/legal review. Privacy should be a visible product path, not something you only discover after a problem.
What we store
The product should explain storage, AI processing, analytics, deletion, export, and contact paths without making stronger promises than the current proof supports.
Privacy
This is draft launch privacy language for founder and legal review. It explains the current product intent, but the final notice still needs approved operator details, vendor and transfer language, cookie policy shape, and App Store privacy-label alignment before release.
Privacy
SelfMosaic stores the account, library, support, and subscription details needed to create edits, save and reopen work, export or delete account data, restore purchases, investigate support issues, and keep the service reliable. Depending on what you use, that can include account email, selected photos, voice notes, prompts, generated results, notes, titles, AI guidance and image insight metadata, support requests, consent history, and subscription or restore state.
Privacy
Outside services may handle hosting and storage, Google Gemini image generation and editing, Apple billing, RevenueCat subscription management, crash diagnostics, support handoff, and optional product analytics. Before Gemini runs for the first time, SelfMosaic asks permission before sending selected photos, prompts, or voice notes for AI processing. SelfMosaic does not use your photos, prompts, or voice notes to train SelfMosaic models. Google Gemini processing still follows Google's API terms and configured retention settings. Stronger promises about provider retention, model training, regions, or subprocessors must match vendor proof and founder/legal approval before launch.
Privacy
Account deletion signs you out immediately. Queued cleanup is designed to finish within about 30 days, subject to backups, legal duties, support records, and background work still in flight. Data exports stay downloadable for 7 days after preparation and may include links to media rather than a raw archive of every original file in the first version.
Privacy
SelfMosaic is not designed around ad tracking or cross-app tracking. The public website uses Vercel Web Analytics and Speed Insights for aggregate page and performance metrics. Crash diagnostics stay on so the app can catch breakage without prompts, media URLs, tokens, or raw photos. Optional in-app product analytics stay off until you turn them on from Privacy in the app. EU/UK cookie and analytics wording still needs founder/legal approval before public release.
Privacy
Use the privacy inbox for access, correction, export, deletion, or data-handling questions. SelfMosaic does not plan to sell personal information for profit, and optional analytics stay off by default until explicit consent. Before public launch, the privacy inbox and any region-specific rights workflow must be delivery-verified and founder/legal approved.
Requests and controls
Use the in-app deletion path for account removal. If you are signed out, sign in to the iPhone app to request export from Profile. If sign-in is blocked or you need a correction, email privacy.
Delete
Start account deletion from Profile in the iPhone app. If that path fails, use the privacy inbox. Before release, that inbox must be verified as reachable.
Export
If you are signed out, sign in to the iPhone app first, then request a downloadable bundle from Profile with account details, prompts, saved results, AI guidance and image insight metadata, AI processing consent history, billing state, deletion request history, and links to your media. If sign-in is blocked or account data looks wrong, email privacy for export or correction help.