1. Introduction
GlamSwap ("the App") is published by AbdiAI ("we", "us"). This policy explains what the App collects, why, who processes it and how long it is kept. Contact: info@abdiai.com.
2. Who Can Use GlamSwap
GlamSwap is intended for people 18 years or older. We do not knowingly collect data from anyone under 18. If you believe a minor has used the App, contact us and we will delete the account.
3. What We Collect and Why
| Data | Why | Linked to your account |
|---|---|---|
| The photo you choose, when you tap Transform | Sent to our server and to Google's Gemini API to create your image. It is not stored on our server. | Only while it is processed |
| The generated image | Delivered to you. Kept on our server for about one hour (at most 90 minutes) so you can recover it if the App closes, then deleted automatically. | Yes |
| App user ID (a random identifier created on your device) and an anonymous Firebase sign-in ID | Keep your credit balance and creations attached to your account and protect it from misuse. | Yes |
| Device verification (Apple App Attest; Apple DeviceCheck when a free trial is offered) | Prove that requests come from the genuine App, and allow a one-time free trial only once per device. | Yes |
| Purchase records (product, transaction ID, date) | Deliver purchased credits exactly once and handle refunds. | Yes |
| Generation records (style, quality, time, credits used; no images) | Charge and refund credits correctly, prevent abuse and control costs. Deleted after 30 days. | Yes |
| IP address | Limit abuse (for example, too many new accounts from one network). Used only as a one-way hash with a key that changes daily; we do not store your IP address in readable form. | No |
| Crash and diagnostic data (Firebase Crashlytics) | Find and fix bugs. | Yes |
| App usage events and approximate region (Firebase Analytics, region derived from IP; no precise location, no advertising ID) | Understand which features are used. | No |
We do not collect your name, email address, contacts or precise location (unless you email us, in which case we receive your email address and message). We do not use your data for tracking or advertising, and we do not sell personal data.
4. AI Processing
When you tap Transform, the photo you chose and the selected style are sent to Google's Gemini API (paid tier). Under Google's paid API terms, your photo and the generated image are not used to train AI models. Google may keep requests and responses for a limited time solely to detect abuse and meet legal requirements. Nothing is sent until you allow AI photo processing, and you can turn it off at any time in Settings → Privacy & AI. We do not use your photos to train any model.
5. Where Your Data Is Stored
- On your device: your saved selfie and the creations you keep in the App, which you control.
- On our servers: Google Cloud / Firebase in the United States: account, credit balance, purchase and generation records, and generated images for about an hour.
- Service providers: Google (Gemini API, Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check, Analytics, Crashlytics) and Apple (App Store purchases, App Attest, DeviceCheck). They process data on our behalf under their own terms.
6. How Long We Keep Data
| Data | Retention |
|---|---|
| The photo you choose | Not stored on our server; used only during processing |
| Generated images on our server | About one hour, at most 90 minutes (automatic deletion runs every 30 minutes) |
| Generation records (no images) | 30 days |
| Account and credit balance | Until you delete your account |
| Purchase records | Kept after account deletion as needed for accounting, fraud prevention and refunds |
| Free-trial and account-security records | Kept after account deletion in minimal form (hashed identifiers, used/unused status) to prevent abuse |
| Crash and analytics data | According to Firebase's standard retention |
7. Deleting Your Account
Settings → Delete Account deletes your account, credit balance and generation history from our servers, and your creations and saved selfie from your device. Remaining credits are deleted with the account. The minimal records listed in section 6 remain. You can also email info@abdiai.com; Settings → Contact Support adds your User ID automatically.
8. Your Rights
Depending on where you live (for example under the GDPR in the EU/EEA or KVKK in Türkiye), you may have the right to access, correct, delete or export your data, and to object to its processing. Email info@abdiai.com; we answer within 30 days. You may also complain to your local data protection authority.
9. Security
All traffic is encrypted (HTTPS/TLS). Our servers accept requests only with a Firebase sign-in and Apple device attestation, and purchases are verified against Apple's signatures. Your app user ID is kept in the iOS Keychain.
10. Changes to This Policy
We will post any changes on this page and update the date above. Significant changes will also be shown in the App.
11. Contact Us
- Email: info@abdiai.com
- Website: abdiai.com