Privacy Policy

1. Who We Are

PortraitAce AI is operated by Shenzhen Yunzhuo Digital Technology Co., Ltd., which acts as the personal information controller.

2. Information We Process

• Account and verification data: phone number, SMS verification result, Sign in with Apple identifier, and profile details you provide. Server-side SMS challenges normally expire after five minutes.
• Install, device, and network data: a random app-install identifier, device model, OS and app version, language, IP address, network status, crash data, and API errors for session continuity, security, compatibility, and troubleshooting.
• Photos and creation data: only photos you select or capture, prompts, editing parameters, task status, results, Works, and client-album data needed to perform the features you request.
• Purchase and service data: product ID, order number, transaction and subscription status, points balance, and points ledger. App Store handles payment credentials; we do not store complete payment-card details.
• Service-request data: questions, order evidence, and communications you submit for service or dispute handling.

3. Permissions and Sensitive Data

Photo access is used only when you choose input or save results. Facial images may be sensitive personal information; we process them only after you initiate the feature and provide separate consent. Do not upload identity documents, payment cards, medical records, or content you are not authorized to process.

• This release does not collect persistent hardware identifiers such as IMEI, OAID, or MAC address, and does not include Umeng Analytics or read contacts, SMS, or call history.
• Before adding a new purpose, SDK, or permission, we will update this policy and store disclosures and obtain consent where required.

4. Purposes and Automated Processing

We use data only to provide accounts, retouching, AI generation, client albums, membership, points, orders, service requests, security, and legal compliance. AI output may be inaccurate, similar to other content, or inappropriate; review it before use or publication. We do not rely solely on automated processing for decisions that produce significant effects on your rights.

5. Processors and Disclosure

To complete a feature you request, we may send the minimum necessary data to cloud storage/CDN providers, SMS providers, the App Store, and AI processors identified in the feature notice (for example, Alibaba Cloud Computing Co., Ltd.). Contracts and security measures restrict processing to our instructions. We do not sell personal information. Other disclosure occurs only with consent, legal authority, vital-interest protection, or a lawful corporate transaction.

6. Retention, Location, and Security

We retain information for the shortest period needed for its purpose and keep necessary order, tax, and dispute records where law requires. We then delete or anonymize it. Data is generally stored in mainland China. If a cross-border transfer becomes necessary, we will satisfy applicable legal requirements and provide additional notice. We use access controls, encryption in transit, audit logging, and least privilege, but no internet service can guarantee absolute security.

7. Your Rights

In the app you can review or correct profile data, manage photos and Works, withdraw optional permissions, and request account deletion. You may also request access, correction, a copy, deletion, restriction, or an explanation. Withdrawal does not affect earlier lawful processing. Deleting an account does not cancel an App Store subscription; cancel the subscription in system settings first.

8. Children

The service is primarily intended for adults. Users under 18 should use it only after a parent or guardian has reviewed and accepted the terms. If we learn that a child's data was processed without required parental consent, we will delete it or take other legally required measures.

9. Updates

We will provide prominent notice of material changes.