Overview
This policy describes the information SelfieShift processes and the choices available to you.
Data collected
The service may receive account details, device diagnostics, support messages and limited usage events needed to operate and improve the app.
Photos
On-device filters and consultation plans remain on your device. Plans contain your original, saved looks, edit choices and appointment notes. Plans and saved edits stay until you remove them; copies you export to Photos or share with another app are controlled by you. A photo is transmitted for AI processing only when you choose an AI feature. The updated iOS app asks permission before each new AI upload.
AI processing
AI edits send your selected photo and effect instructions through SelfieShift's secure processing service to OpenAI to produce the requested result. This includes faces and other details visible in the photo. Location metadata is removed before transmission. SelfieShift does not use face recognition or create biometric identity profiles. SelfieShift does not publish or sell photos, distribute them for unrelated purposes, or routinely view them. OpenAI processes images under its API data controls, including separate abuse-monitoring retention and safety-review rules; SelfieShift's seven-day limit does not describe OpenAI's systems. See https://developers.openai.com/api/docs/guides/your-data for those rules.
Analytics
Privacy-conscious analytics may record events such as screen views, language changes and download clicks. Photo contents are not analytics data.
Accounts and payments
Account identifiers, ticket balances and verified purchases may be processed. Apple and Google handle mobile payment details, and Stripe handles website payment details; SelfieShift does not receive full card data.
Retention
On SelfieShift's processing servers, original uploads are removed after completed or canceled jobs. Failed-job inputs, generated results and reusable image caches are retained only for processing, recovery and delivery, for no more than seven days. Download links expire sooner than the image cache. Hosting backups may retain copies longer than seven days until those backups are replaced; they are reserved for disaster recovery and are not routinely accessed. Images you save to your own device remain there until you delete them. Account and purchase records are separate from photo processing files and are kept to operate your account, provide purchased tickets and meet applicable recordkeeping obligations.
Children
SelfieShift is intended for users aged 13 and older and is not directed to children under 13. Any higher minimum age or parental-permission requirement applicable in your country also applies.
Your rights
You can decline an AI upload and continue using on-device tools. Delete your account in Account → Delete Account, or request help at support@selfieshift.io. Depending on your location, you may request access, correction, deletion or restriction of eligible personal data. Deletion revokes sessions, removes sign-in connections and personal account fields, and removes your processing photos, results and caches from active storage. Cleanup retries if interrupted. The updated iOS app also removes its local plans, saved-edit copies and AI cache. Exported copies in Photos or other apps remain under your control. Sign in with Apple tokens are revoked; older accounts without a stored token receive instructions to remove that connection manually. Encrypted tokens awaiting revocation are kept only to retry that action and removed when it succeeds. Hosting backups are separate as described above. Purchase records needed for accounting or fraud prevention may be retained without your sign-in profile.
International processing
Service providers may process data outside your country with appropriate safeguards where required.
Contact
Privacy questions and eligible data requests may be submitted through the SelfieShift support page.