Privacy Policy

1. Service Overview

Sketchtoo is a mobile application that transforms uploaded drawings into realistic photos and AI art styles. We process only the data necessary for service operation and security. This Privacy Policy explains what data we collect, how we use it, and your rights under applicable law, including GDPR.

2. Data Controller

The personal data controller for this service is the Sketchtoo project. For all questions regarding access, deletion, or transfer of data, please contact us at [email protected].

3. What Data We Collect and Why

• Email & username — registration, notifications, and support. Stored until account deletion.
• Uploaded photos / original drawings — result generation and gallery sync. With your permission, the app reads only the single drawing or photo you pick from your photo library — nothing else on your device is accessed. The original is uploaded to our server and linked to your account. Stored until you delete the creation or your account.
• Generated images and videos — your finished creations and links to their images are uploaded to our server and linked to your account, so your gallery is available on your other devices and deletions sync across them. With your permission, you can also save any generated image or video to your device's Photos library. Stored until you delete them or your account.
• Purchase data — managing your credit purchases and balance. Stored until account deletion.
• User ID — a unique identifier assigned to your account within the app to link your data and content. Stored until account deletion.
• Push notification token — with your permission, so we can notify you when your creation is ready. Stored until you disable notifications or delete your account.
• IP addresses & server logs — security and abuse prevention. Stored for 14 days.

3a. Push Notifications

With your permission, we collect a push notification token for your device so we can notify you when your creation is ready. Notifications are delivered through Apple's Push Notification service (APNs) and our push provider, Expo. You can disable notifications at any time in your device settings.

4. Image & Video Processing Pipeline

When you upload a drawing, or animate a creation into a video, it follows this path:

1. Your image (or the image being animated) is transmitted over HTTPS to our secure backend server (running Temporal workflow engine on a VPS).
2. Our server routes the image to fal.ai (Fal, Inc.) for AI processing and generation — the same provider is used for both photo and video generation.
3. The generated result is returned to you through our server.
4. Your original image and the finished creation (image or video) are stored on our server, linked to your account, so your gallery is available on all your devices. Both are deleted when you delete the creation or your account.

We do not use user images or videos to train AI models without your separate explicit consent.

5. Use of fal.ai

We use fal.ai (Fal, Inc.) as our AI processing provider for both image and video generation. To generate the requested image or video, your image is sent to fal.ai, which processes it as our data processor. Processing and retention of data on fal.ai's side are governed by fal.ai's own terms of service and privacy policy.

For more information about fal.ai's data practices, visit fal.ai/privacy.

6. Third-Party Data Processors

Your data may be processed by the following providers:

• fal.ai (Fal, Inc.) — AI image and video processing. Receives your image to generate the result; processing and retention on fal.ai's side are governed by fal.ai's terms and privacy policy.
• VPS / backend infrastructure — Temporary processing and routing of images and videos via Temporal workflow engine, and storage of your original images and finished creations for gallery sync.
• Apple Inc. — App Store in-app purchase processing, and delivery of push notifications via Apple's Push Notification service (APNs).
• Google — Google Play in-app purchase processing (Android).
• Expo — our push notification provider, used to deliver notifications to your device.
• Account credentials — email and password stored securely on our own servers. We do not use third-party sign-in providers.

We do not sell your personal data to any third party.

7. Data Retention & Deletion

• Email, username — retained until you delete your account.
• Original images and finished creations (gallery) — retained until you delete the creation or your account.
• Purchase data — retained until you delete your account.
• Push notification token — retained until you disable notifications or delete your account.
• IP addresses and server logs — 14 days.

You can delete your account and all associated data at any time directly in the app using the Delete Account button in the app settings. You may also request deletion by emailing [email protected].

8. Your Rights (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — ask us to limit how we use your data while a complaint is resolved.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Children's Privacy

Sketchtoo is designed for family use. We do not knowingly collect personal information directly from children under the age of 13. Accounts are created by parents or guardians, who are responsible for their child's use of the app. If you believe a child has provided us with personal information without parental consent, please contact us immediately at [email protected].

10. Security

We use industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security of your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email. Continued use of Sketchtoo after changes constitutes acceptance of the updated policy.

Contact

General support: [email protected]
Privacy & data requests (GDPR/DSAR): [email protected]