Privacy Policy
Last updated: February 2026
AI Headshot Generator ("we", "our", or "the app") is committed to protecting your privacy. This policy describes how we collect, use, and share information when you use our iOS mobile application.
1. Information We Collect
- Account information: When you sign in (e.g. with Apple Sign In), we receive your email address (or Apple private relay address), name (if provided), and a unique user identifier.
- Photos you upload (face data): To generate your headshots, you voluntarily upload selfie photos that contain your face. These photos are transmitted to a third-party AI service (Astria AI) for processing. We do not store your photos on our own servers. See Section 3 and Section 4 (Face Data) below for full details.
- Job and usage data: We store your headshot job status, style choices, and the URLs of your generated headshot images in our database (Firebase Firestore) so you can view and download your results within the app.
- Purchase information: In-app purchases are processed by Apple. We receive purchase confirmation and entitlement data via RevenueCat to manage your credit balance. We do not receive or store your payment card details.
- Push notification token: If you grant notification permission, we store a device push token so we can notify you when your headshots are ready.
2. How We Use Your Information
We use your information to:
- Create and manage your account and session
- Transmit your photos to our AI processing partner to generate your headshots
- Store and display your completed headshot results within the app
- Fulfill in-app purchases and manage your credit balance
- Send push notifications when your headshots are ready
- Improve our service and diagnose technical issues
- Comply with legal obligations
3. Face Data — Detailed Disclosure
Because the selfie photos you upload contain your face, we provide this dedicated section to fully explain how face data is handled, as required by applicable platform policies.
- What face data is collected: You voluntarily upload selfie photographs (5–15 images) that contain your face. The app does not use the device camera directly, perform facial recognition, extract facial geometry, or create biometric identifiers. The photos are used as training images for an AI model.
- All uses of face data: Your photos are used solely and exclusively to train a personal AI model on Astria AI's platform and to generate professional headshot images for you. Your photos are not used for advertising, analytics, to train shared or public AI models, or for any purpose other than generating your headshots.
- Who your photos are shared with: Your photos are transmitted to Astria AI (astria.ai), a third-party AI model training and image generation service. No other third party receives your photos. We do not sell your photos or share them with advertisers or data brokers.
- Where photos are stored: Photos are stored only on Astria AI's servers during processing. We do not store your original photos on our own servers or in cloud storage.
- How long photos are retained: Astria AI automatically and permanently deletes your photos, the trained AI model, and all generated images 30 days after training is complete. You or we can also request deletion before that date. Our own database retains only the URLs of your completed headshot images (not the original photos) for as long as your account is active.
- Your consent: Before uploading any photos, the app presents a clear consent screen describing exactly how your photos will be used, identifying Astria AI as the processor, and stating the 30-day retention period. You must explicitly agree before any photos are transmitted.
For Astria AI's own privacy practices, see astria.ai/privacy.
4. Third-Party Services
We use the following third-party services. Each has its own privacy policy.
- Astria AI — AI model training and headshot image generation. Your selfie photos are sent to Astria AI and retained for up to 30 days after training. See Section 3 for full details. Astria Privacy Policy
- Google Firebase (Google LLC) — We use Firebase for authentication (sign-in), cloud database (Firestore) to store job status and result URLs, cloud functions for backend logic, and Firebase Cloud Messaging (FCM) for push notifications. Your original photos are not stored in Firebase. Google Privacy Policy
- RevenueCat — In-app purchase management and entitlement tracking. RevenueCat receives purchase confirmation data from Apple and provides us with your credit balance. RevenueCat Privacy Policy
- Apple — Sign in with Apple and in-app purchase processing. We receive only the account and purchase confirmation information Apple provides to developers. Apple Privacy Policy
- Expo (Expo Operations Inc.) — Push notification delivery service used to send headshot-ready notifications to your device. Expo Privacy Policy
5. Data Retention
- Your photos: Not stored by us. Stored by Astria AI for up to 30 days after training, then permanently deleted.
- Your account and job data: Retained for as long as your account is active. You may request deletion by contacting us at the address below.
- Generated headshot URLs: Stored in our database until you request deletion or your account is removed. The underlying image files are hosted by Astria AI and are also subject to their 30-day deletion policy.
6. Security
All data transmissions between the app, our backend (Firebase), and Astria AI are encrypted via HTTPS. Access to our Firebase database is protected by authentication and security rules. We follow industry-standard practices to protect your information.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict its processing. To exercise any of these rights, contact us at ai-headshot-generator@evtsoy.com.
8. Children
The app is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy from time to time. We will post the updated policy on this page and update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.
10. Contact
For privacy-related questions, data deletion requests, or any other inquiries, please contact us at: