Privacy Policy

Effective date: 11 January 2026

This Privacy Policy describes how we collect, use, store, and protect the personal data of users of the PoetryCam iOS application (the "App").

1. Data Controller

The Data Controller of personal data is:
Dario Sanatkar
Contact email: poetrycamapp@gmail.com

2. Types of data processed

2.1 Data provided directly by the user

• Email address (login via magic link or Sign in with Apple).
• Photos taken with the App.
• Generated texts (poems).
• Prompts used to generate content.
• Date and time of content creation.

2.2 Data processed automatically

• Technical identifiers required for the App to function.
• Data related to the display of advertising (according to device settings).

2.3 System permissions

The App may request the following permissions:

• Camera: to take photos.
• Photo Library (Add-only): to save images to the device library.

The App does not access or use:

• Location
• Contacts
• Microphone

3. Purposes of processing

Personal data is processed for the following purposes:

• Provide the App's core features.
• Generate poems through AI systems.
• Save and manage user content.
• Enable authentication and account management.
• Allow sharing images on external platforms.
• Display advertisements.
• Handle optional payments.
• Ensure security, stability, and prevention of abuse.

4. Legal basis for processing

Processing is based on:

• Performance of a contract (use of the App).
• User consent (system permissions and advertising, where applicable).
• Legitimate interest of the Controller (security and prevention of misuse).

5. Image processing and AI usage

Photos are saved locally on the user's device.

Images and related metadata are uploaded to backend servers and stored in Supabase Storage and Supabase Database.

To generate the poem, the App sends OpenAI the image (in base64 format) and the text prompt.

OpenAI returns only the generated text.

Images are not used for purposes other than generating the requested content.

6. Sharing data with third parties

Data may be shared with the following parties, exclusively for the purposes described:

• OpenAI - generation of textual content.
• Supabase - authentication, database, and storage.
• Application backend - service logic hosted on Render.com.
• Google AdMob - advertising delivery.
• Stripe - payment processing via external checkout.
• Apple - authentication services and system features.

Each party acts as an independent controller or processor according to its own policies.

7. International transfers

Some providers may process data outside the European Economic Area.

In such cases, transfers occur in compliance with applicable safeguards.

8. Data retention

Data is retained for the duration of the account.

Account deletion results in the deletion of photos, poems, and profile.

Any technical backups are retained for a limited and proportionate period.

9. User rights

The user may:

• Access their data.
• Request correction or deletion.
• Revoke permissions via device settings.
• Permanently delete their account.

Requests can be sent to poetrycamapp@gmail.com.

10. Security

The Controller adopts appropriate technical and organizational measures to protect personal data (encrypted connections, access control).

Absolute security of systems cannot be guaranteed.

11. Changes to this Privacy Policy

This Privacy Policy may be updated.

The updated version will be made available with the new effective date.

12. Contact

Dario Sanatkar
Contact email: poetrycamapp@gmail.com