Last updated: 23 August 2026
PicBuddy turns your photos into AI-generated images. This policy explains exactly what we collect, what we don't, and who processes your data. It reflects what the app actually does — not a generic template.
| Data | Why | Retention |
|---|---|---|
| Photos you choose | To generate the image you requested. Sent over an encrypted connection to our processing server and on to the AI provider that produces the result. | Held in memory for the duration of the request only. Never written to our storage. |
| Text you type (e.g. an edit instruction or an Imagine prompt) | To generate the image, and to run a safety check that blocks prohibited requests before they reach the AI provider. | Not stored. If a request is blocked, we log only the reason code — never the text. |
| An anonymous device identifier | A random value created by the app and stored in your device keychain. Used solely to apply fair-use rate limits and prevent abuse of the service. | Kept in server logs for up to 30 days. Not linked to your name, email or Apple ID. |
| Technical request data (app version, language, style used, timing, error codes) | To keep the service working and diagnose failures. | Server logs, up to 30 days. |
Photos you select may contain your face or the faces of people you choose to include. PicBuddy treats these images as sensitive data:
Your generated images, your history, your saved prompts and your credit balance are stored locally on your iPhone. They are not uploaded to us. Deleting the app removes them permanently. Images you explicitly save go to your photo library using the add-only permission, which does not give the app the ability to read your library.
To produce an image we send your photo and the prompt to one of the following providers, which act as our processors:
Which provider handles a given request depends on the style you chose and provider availability. These providers process the request to return a result and apply their own safety filtering.
Results are produced by machine learning models. They are interpretations, not photographs of real events, and may contain inaccuracies or unexpected artifacts. Do not rely on a generated image as a factual record. Every result screen includes a way to report a problematic result to us.
PicBuddy is not directed at children and we do not knowingly process data from them. Prompts involving minors are blocked by our safety filter.
Because we hold no account and no profile, there is generally nothing tied to you for us to export or delete. If you believe a server log entry relates to you, email us with your device identifier prefix (shown in the support email the app composes) and we will locate and delete it. Depending on where you live, you may have rights under the GDPR or CCPA; we honour these requests regardless of your location.
All traffic uses HTTPS. Our AI provider keys live only on the server and are never present in the app. Requests are rate-limited per device.
If this policy changes materially we will update the date at the top and, where the change is significant, note it in the app.
Questions, deletion requests or content reports: support@firstvibe.net