Privacy Policy
1. Service Overview
Sketchtoo is a mobile application that transforms uploaded drawings into realistic photos and AI art styles. We process only the data necessary for service operation and security. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable law, including GDPR.
2. Data Controller
The personal data controller for this service is the Sketchtoo project. For all questions regarding access, deletion, or transfer of data, please contact us at [email protected].
3. What Data We Collect and Why
- Email & username — registration, notifications, and support. Stored until account deletion.
- Uploaded photos / original drawings — processing and result generation. With your permission, the app reads only the single drawing or photo you pick from your photo library — nothing else on your device is accessed. Uploaded images are discarded immediately after generation; never stored on our servers.
- Generated images and videos — your results are stored locally on your own device. With your permission, you can save any generated image or video to your device's Photos library. We do not store your results on our servers; result links are hosted by fal.ai.
- Subscription and purchase data — managing your subscription and access to paid features. Stored until account deletion.
- User ID — a unique identifier assigned to your account within the app to link your data and content. Stored until account deletion.
- Push notification token — with your permission, so we can notify you when your creation is ready. Stored until you disable notifications or delete your account.
- IP addresses & server logs — security and abuse prevention. Stored for 14 days.
3a. Push Notifications
With your permission, we collect a push notification token for your device so we can notify you when your creation is ready. Notifications are delivered through Apple's Push Notification service (APNs) and our push provider, Expo. You can disable notifications at any time in your device settings.
4. Image & Video Processing Pipeline
When you upload a drawing, or animate a creation into a video, it follows this path:
- Your image (or the image being animated) is transmitted over HTTPS to our secure backend server (running Temporal workflow engine on a VPS).
- Our server routes the image to fal.ai (Fal, Inc.) for AI processing and generation — the same provider is used for both photo and video generation.
- The generated result is returned to you through our server.
- Your uploaded image is not permanently stored on our servers — it is held only temporarily during the generation process and discarded immediately after.
We do not use user images or videos to train AI models without your separate explicit consent.
5. Use of fal.ai
We use fal.ai (Fal, Inc.) as our AI processing provider for both image and video generation. fal.ai receives your uploaded image solely to generate the requested image or video output. fal.ai does not use your images for model training and operates under a Data Processing Agreement (DPA) with us in compliance with GDPR.
For more information about fal.ai's data practices, visit fal.ai/privacy.
6. Third-Party Data Processors
Your data may be processed by the following providers, each operating under a DPA with us:
- fal.ai (Fal, Inc.) — AI image and video processing. Images are forwarded for generation and immediately discarded. No retention for training purposes.
- VPS / backend infrastructure — Temporary processing and routing of images and videos via Temporal workflow engine. No permanent image or video storage.
- Apple Inc. — App Store billing and subscription management, and delivery of push notifications via Apple's Push Notification service (APNs).
- Expo — our push notification provider, used to deliver notifications to your device.
- Account credentials — email and password stored securely on our own servers. We do not use third-party sign-in providers.
We do not sell your personal data to any third party.
7. Data Retention & Deletion
- Email, username — retained until you delete your account.
- Subscription and purchase data — retained until you delete your account.
- Push notification token — retained until you disable notifications or delete your account.
- IP addresses and server logs — 14 days.
You can delete your account and all associated data at any time directly in the app using the Delete Account button in the app settings. You may also request deletion by emailing [email protected].
8. Your Rights (GDPR)
If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your personal data ("right to be forgotten").
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — ask us to limit how we use your data while a complaint is resolved.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Children's Privacy
Sketchtoo is designed for family use. We do not knowingly collect personal information directly from children under the age of 13. Accounts are created by parents or guardians, who are responsible for their child's use of the app. If you believe a child has provided us with personal information without parental consent, please contact us immediately at [email protected].
10. Security
We use industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security of your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email. Continued use of Sketchtoo after changes constitutes acceptance of the updated policy.
Contact
General support: [email protected]
Privacy & data requests (GDPR/DSAR): [email protected]