Datenschutzerklärung

Version: 2026-11-15

Sprache des Dokuments

Dieses Dokument wird auf Englisch angezeigt; die englische Fassung ist rechtlich maßgeblich. Bei Fragen schreiben Sie an —.

1. Who we are

The data controller is StudioUp.AI, address: —. Privacy contact: —.

2. What data we process

• Account: email, name, language, country, Apple or Google identifier, password hash (we never know your password).
• Photos: the source photos you upload and the frames we create.
• Biometric face data: numeric vectors (embeddings) used to check likeness, the model's face reference, and the weights of your personal neural model (“My twin”). They are not used to identify you anywhere else.
• “My people”: names and photos of relatives, including children (only with a confirmed parent or guardian consent).
• Descriptions of pictures from “like this photo” (not the file itself), your style requests and the “My look” questionnaire.
• Payments and subscriptions: amount, currency, status, order number. We do not hold card data.
• Technical data: device identifier, push token, app version, request logs.
• Invitations and bonuses, support correspondence.

3. Why and on what basis

• Creating portraits and running your account: performance of the contract.
• Biometric data: only with your separate consent (the screen shown before your first photo upload); you can withdraw it.
• Abuse prevention (repeat bonuses, prohibited images) and security: our legitimate interest.
• Payments and accounting: legal obligations.
• News and offers: only with your consent (toggle in your profile).

4. How long we keep it

• Source photos and results: 30 days from upload or creation, then deleted automatically. The deadline is visible in the app (Profile — Privacy). You can delete them sooner.
• Personal model and face reference: 90 days after last use; with “keep while I have an account” on (a Studio subscription also extends it) — while the account exists.
• Reference descriptions: 30 days. Free preview frames: 72 hours.
• Payment records and the credit ledger: for the periods required by law (usually up to 5 years), detached from your personal data after account deletion.
• The log of your consents: as long as needed to prove consent.
• Abuse-prevention records (device identifier, fact of a bonus): without name or email, no longer than 1 year after account deletion.
• Backups are erased within 30 days after data deletion.

5. Who receives data

We do not sell data. To run the Service we use processors:

• fal.ai (USA): training and running neural networks — receives your photos while processing; we ask it to delete the model weights copy after your model is deleted;
• Anthropic (USA): checks uploaded photos against our rules and describes a picture for “like this photo”: a downsized copy is sent, and we do not ask for it to be kept for model training;
• Apple, Google, Firebase: sign-in, push notifications, store purchases; RevenueCat: store purchase records;
• YooKassa, Prodamus, Robokassa, Stripe: payment processing (they get order data, not photos);
• hosting and cloud storage the Service runs on.

Some processors are outside your country (including the USA). By pressing “I agree” on the consent screen you agree to such transfers.

A company that paid for your session in a corporate workspace can see those photos.

6. Children

Accounts are for adults. Photos of children are added only by a parent or legal guardian in “My people” with a separate confirmation; stronger checks apply and a child's model cannot be exported.

7. Your rights

• Access and a copy: Profile — Privacy — “Download my data” (an archive with data and photos).
• Deletion: “Delete my photos and models” or full account deletion (Profile — Privacy).
• Withdrawing consent to face processing: withdrawal deletes your photos, models and face references; you cannot upload photos again without new consent.
• Correction, restriction, objection, complaint to a supervisory authority: write to —; we reply within 10 business days.

8. Security

Data travels over secure connections. Only you can see your photos (and the administrators of a company, if the session was paid by the company). Passwords are stored only as hashes. Your personal model can only be exported in encrypted form.

9. What remains after account deletion

We delete photos, models, face references, people, references, sign-in methods, tokens and devices. What remains: payment and accounting records without your personal data, the consent log, abuse-prevention records and backups for up to 30 days. A subscription bought in the App Store or Google Play must be cancelled in that store.

10. Changes

We will tell you about material changes in the app. Version 2026-11-15.