Covershot — Privacy Policy

Last updated: July 16, 2026

Covershot (“we”) is an AI photography app: you add reference photos of a person once, direct a shot with visual controls, and the app generates images. This policy explains exactly what data we handle and where it goes.

What we collect

• Account — you sign in with Apple. We store your user id and the email Apple shares (which may be Apple's private relay address).
• Reference photos — the 1–5 photos you add per character. These depict a real person's face and are treated as sensitive data.
• Scene direction — the settings you choose in the deck (wardrobe, location, light, …), stored with each render so you can reload it.
• Generated images — every render you create.
• Purchase records — Apple transaction identifiers for credit packs and membership (we never see your payment details).
• Push token — so we can notify you when renders finish.

We do not collect analytics identifiers, advertising identifiers, location, or contacts, and we do not track you across apps.

How your photos are used

Reference photos you add are stored with your account and sent to fal.ai, which runs ByteDance's Seedream model, every time you create a render. They are used only to generate the images you direct. The scene settings you choose are compiled into a text description and sent along with the photos.

Uploaded photos and generated images are also checked by an automated moderation service (Sightengine) for prohibited content (explicit material, minors, violence).

Your content is never used to train models by us. It is never sold, never used for advertising, and never shared beyond the processors listed here.

Face data

Reference photos and generated images depict a real person's face, and we treat them as sensitive data. To be explicit about what that means:

• The only face data Covershot handles is the photographs themselves: the reference photos you add and the images generated from them. We do not perform facial recognition and we do not compute, collect, or store biometric identifiers such as face templates or faceprints.
• The app uses Apple's on-device face detection once per photo solely to center its circular avatar thumbnail; the detected rectangle is used in the moment, on the device, and is never stored or transmitted.
• Photos are stored privately in our cloud storage (Supabase), accessible only to your account.
• They are shared only with the processors listed below and only to provide the service: fal.ai (ByteDance Seedream) to generate the images you direct, and Sightengine to check uploads and outputs for prohibited content. Both process the photos to fulfil each request; we do not permit them to use your photos for anything else, including training.
• Face data is retained until you delete it: deleting a character permanently removes its reference photos, deleting a render removes its images, and Delete Account & All Data removes everything. We keep no copies after deletion.

Who processes your data

Each processor handles your data only to provide its function above and is bound by its terms with us to protections equivalent to this policy.

Consent

Before your first photo upload, the app asks for explicit consent to this processing. You can withdraw consent at any time in Info → Privacy & Data; new uploads and renders are blocked until you consent again. Photos already stored stay until you delete them.

You must only add photos of yourself, or of adults who have given you permission. Photos of minors are not allowed. Each character requires an explicit likeness attestation.

Retention and deletion

• Reference photos are kept until you delete their character — deleting a character permanently removes its photos from our storage.
• Renders are kept until you delete them; deleting a run removes its images.
• Delete Account & All Data (Info → Privacy & Data) permanently removes your account, characters, reference photos, renders, and remaining credits.

Reporting

Every render can be reported in-app (flag icon on its detail page). Reports are reviewed by a human; content that breaks the rules is removed.

Your rights

Depending on where you live (e.g. GDPR in the EU), you may have rights to access, correct, export, or erase your data. The in-app deletion controls cover erasure; for anything else, contact us.

Contact

sensorevolve@gmail.com

Changes

We will update this page and the in-app consent copy together; material changes re-prompt for consent in the app.

Terms of Use