Privacy Policy

1Scope

This Privacy Policy describes how Appcyber Limited (“Appcyber Limited,” “we,” “us,” or “our”) handles information when you use our mobile application and related support services (together, the “Application”).

By using the Application, you acknowledge the practices described here. Where consent is required, the Application will ask for it at the appropriate time. You may decline optional permissions, although the related feature may then be unavailable.

2Data we collect and why

We collect data directly from you, automatically from the Application and your device, and from Apple or service providers when needed to operate a feature.

3Device permissions and choices

• Photos or media: access occurs only after you use a feature that needs it and grant the relevant iOS permission. Where supported, you may select only specific items.
• Notifications: you may allow or deny notification permission and later change it in iOS Settings.
• Analytics: where the Application provides a privacy control, you can change it under Settings > Privacy Settings. You may also limit tracking through iOS Settings > Privacy & Security > Tracking.
• Optional features: you can avoid sending content to a processing service by not using the related online or AI feature.

We request only permissions relevant to the feature you select. Revoking a permission does not delete information already processed; see Section 6 for deletion options.

4Artificial intelligence features

The Application may provide AI-assisted caption and hashtag generation, editing, and AI-powered image processing tools. When you use an AI feature, the input needed for your request is sent to our servers and selected AI processing providers. The output is returned to the Application.

AI image processing features may include:

• AI background removal: removes or isolates the background from a photo or image you select. The selected image is uploaded for processing and a result image is returned.
• AI image expansion (outpainting): extends the edges or canvas of an image based on your request. The selected image and related expansion parameters are uploaded for processing.
• AI erase / object removal: removes selected objects, marks, or regions from an image. The selected image and any mask or selection area you provide are uploaded for processing.

• Purpose limitation: submitted content, including images and masks, is processed only to provide the result you request, maintain security, and troubleshoot failures.
• No model training by us: we do not use your input or output, including uploaded images, to train or fine-tune AI models.
• Temporary image processing: images uploaded for AI background removal, expansion, or erase are used solely to complete the requested processing and are not retained by us longer than needed for delivery, security, and abuse prevention, except where a history feature expressly stores a result for your later access.
• History: certain text-generation inputs and outputs may be retained in a device-linked history so you can access them again. This is different from temporary provider-side processing.
• Sensitive content: do not submit passwords, payment credentials, government identifiers, health records, photos of identity documents, or other information you do not want processed by an AI service.

AI providers are required to process data only for providing the requested service and under protections consistent with this policy. Provider retention may be limited to the period needed for processing, security, and abuse prevention, subject to their contractual and legal obligations.

5When we share information

We do not sell personal data. We disclose limited information only when needed to provide the Application, complete a transaction, comply with law, or protect users and the service.

• AI processing: Replicate and, depending on the selected feature or model, model providers such as OpenAI or Google.
• Analytics, diagnostics, and attribution: providers may include Amplitude, Google services, Kochava, Branch, and AppsFlyer, depending on the Application version and configuration.
• Purchases and distribution: Apple processes App Store purchases, subscription management, receipt validation, and refunds under Apple’s own terms and privacy practices.
• Notification delivery: Apple Push Notification service and configured delivery providers, which may include JPush.
• Hosting and operations: infrastructure, security, database, and support providers that process information on our behalf.

Our service providers may access only the information reasonably necessary for their assigned function. They are contractually restricted from using it for unrelated independent purposes and must provide protection consistent with this policy and applicable requirements.

We may also disclose information when reasonably necessary to comply with law or valid legal process; investigate fraud, abuse, or security incidents; protect the rights and safety of users or others; or complete a merger, financing, acquisition, reorganization, or sale of assets. If ownership changes, the recipient must honor this policy or notify you of material changes.

6Retention and deletion

We retain each category of information only for as long as reasonably necessary for the purpose described in this policy:

• Device, usage, attribution, diagnostic, and security records are kept while needed to operate, analyze, secure, and improve the Application, then deleted or de-identified.
• AI history is kept to provide the history feature and is deleted or de-identified after a valid deletion request, subject to necessary security backups and legal obligations.
• Support communications are kept while we resolve the request and for a reasonable period afterward to document the resolution and protect against abuse.
• Purchase and subscription records are kept as required to verify entitlements and satisfy accounting, fraud-prevention, tax, dispute, and legal obligations.

To request deletion, email support@appcyb.com with the subject “Data Deletion Request” and include the app name plus the support reference or device identifier shown in the Application, if available. We may ask for limited verification so that we do not delete another person’s information. We will delete or de-identify eligible data unless retention is required by law, security, fraud prevention, or an unresolved transaction or dispute.

Deletion from active systems may not immediately remove copies in encrypted backups. Backup copies are isolated from ordinary use and removed according to the backup lifecycle.

7Security and international processing

We use administrative, technical, and physical safeguards designed to protect information, including access controls and measures intended to secure data in transit and at rest where appropriate. Access is limited to authorized personnel and providers who need it for their work. No system is completely secure, so we cannot guarantee absolute security.

Appcyber Limited and its providers may process information in countries other than your own. Where required, we use appropriate contractual or legal safeguards for international transfers.

8Children’s privacy

The Application is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal data from children below the applicable minimum age. If you believe a child has provided personal data, contact us so we can investigate and delete it where required.

9Your privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent. You may also have the right to appeal our response or complain to your local data protection authority.

To exercise a right, email us and describe your request. We may need to verify that the request relates to you. We will not discriminate against you for exercising a privacy right. You can also manage permissions and subscriptions directly in iOS Settings or your Apple account.

10Changes and contact

We may update this Privacy Policy when our practices, services, or legal obligations change. We will post the revised policy here, update the “Last updated” date, and provide additional notice where required. Material changes apply prospectively unless the law permits otherwise.