Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how GigaRizz ("we", "us", "our") collects, uses, and shares information when you use the GigaRizz iOS app and related services (collectively, the "Service").

1. Information We Collect

1.1 Photos and content you provide

• Source photos — selfies and reference images you upload for AI generation, face enhancement, outfit/hairstyle/age try-on, or pose generation.
• Generated photos — AI-generated outputs and the styles, prompts, or pose references you used.
• Bios and chat content — text you submit to the AI Coach (bio writer, openers, replies).

1.2 Account information

• Apple Sign-In identifier (an opaque ID Apple provides; we do not receive your Apple ID password).
• Email address (only if you provide one through Apple Sign-In's relay or directly).
• Subscription status (free, Plus, or Gold) managed by RevenueCat and Apple's App Store.

1.3 Usage data

• Feature usage events (which tools you use, generation counts) via PostHog analytics.
• Crash reports and error logs.
• Device type, OS version, app version.

2. How We Use Information

• Provide the Service — process your photos through AI models to generate new images, enhance faces, swap outfits, etc.
• Improve quality — analyze aggregated, de-identified usage patterns to improve features. We do not train AI models on your photos.
• Customer support — respond to questions you send to support@gigarizz.app.
• Safety and moderation — detect and prevent abuse, including content that violates our Terms (CSAM, non-consensual intimate imagery, etc.).
• Legal compliance — comply with applicable laws and lawful requests.

3. AI Processing — Third-Party Providers

To generate, enhance, or modify your photos, we transmit them to one or more of the following AI providers:

• Replicate (Flux family, SDXL, SD3, RealVisXL, Playground, Ideogram, InstantID, CodeFormer)
• fal.ai (Flux variants, Recraft V3, SDXL Lightning, Nano Banana 2)
• OpenAI (GPT Image 1, GPT Image 2, DALL-E 3, GPT-4o-mini for AI Coach)

These providers process your photos to fulfill your generation request. Per their terms, they do not retain your photos beyond the time required to return the result, and they do not use your photos to train their models. We send only the photos and parameters required for the requested generation.

4. Data Storage

• Photos — stored in Amazon S3 (us-east-1). Source photos are retained for 30 days, then automatically deleted. Generated photos are retained until you delete them or your account.
• Account data — stored on our servers (AWS EC2, us-east-1).
• Subscription data — managed by RevenueCat and Apple App Store.

5. Sharing

We do not sell your personal information. We share data only with:

• AI providers listed in Section 3, solely to fulfill generation requests.
• Service providers (AWS, Cloudflare, RevenueCat, PostHog, Firebase) under contracts that limit their use to providing the Service.
• Law enforcement, when legally compelled by valid process.

6. Your Rights

• Access and export — you can request a copy of your data at privacy@gigarizz.app.
• Deletion — delete your account from Settings → Account → Delete Account. This permanently removes your photos, generated outputs, bios, and account record within 30 days.
• Correction — update your account email at any time.
• Withdraw consent — uninstall the app and delete your account.

6.1 GDPR (European users)

If you are in the EEA, UK, or Switzerland, you have the rights described above plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing is your consent (when you submit photos) and contract performance (when we deliver the Service).

6.2 CCPA (California users)

California residents may request disclosure of categories and specific pieces of personal information collected, request deletion, and opt out of sale. We do not sell personal information.

7. Children

GigaRizz is rated 17+ on the App Store and is not directed to children under 13. We do not knowingly collect data from children under 13. If we learn we have collected data from a child under 13, we delete it.

8. Security

We use industry-standard measures to protect your data: TLS 1.3 in transit, encryption at rest in S3, signed pre-authenticated upload URLs, content moderation pre-checks, and least-privilege IAM roles. No method of transmission or storage is 100% secure.

9. Changes

We may update this Privacy Policy. Material changes will be communicated via in-app notice or email. Continued use after the effective date constitutes acceptance.

10. Contact

Questions or requests: privacy@gigarizz.app or /support.