Privacy Policy | iPhone Kupi

Who is responsible

BRICKAI LIMITED, a company registered in England and Wales, is the controller of the personal data described here. Contact: 757786288@qq.com.

What we collect

Account details: your name, email address and, if you sign in with Google, your Google profile name and picture.
Photos you upload and images you create: stored in your private library so you can see your history.
Payment records: what you bought and when. Card details are handled by Stripe; we never see or store them.
Technical data: basic logs such as IP address, browser and error reports, needed to run and secure the service.
Usage events: we record our own, first-party usage events: page visits, photo picks, sign-ups, email verifications, generations, checkouts, purchases, downloads and shares. Each event holds a random visitor ID, your account ID once you have one, the country (looked up from your connection by Cloudflare), the site that first sent you here and its campaign tag, and which release of the site recorded it. We do not store your IP address in these events, and we use no third-party analytics.

A photo you pick on the site stays on your device until you are signed in and press Generate.

Why we use it

To provide the service you ask for: creating your images and keeping your history (performance of a contract).
To take payments and keep accounting records (contract and legal obligation).
To keep the service secure and prevent abuse, such as repeated sign-ups for free credits (legitimate interests).
To see which steps of the site work and which break, and which sources bring visitors who buy, using the usage events (legitimate interests). The site that first sent you here also decides whether a new account gets free credits.
To send account emails such as sign-in verification (contract).

We do not sell your data, do not use your photos to train AI models, and do not send marketing emails without your consent.

Who processes it for us

Cloudflare: hosting, database and file storage.
AIsa (api.aisa.one): receives your photo and the style prompt to generate the image, using an OpenAI image model.
Google: sign-in, if you choose "Sign in with Google".
Resend: sends account emails.
Stripe: payments.

Some of these providers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or the providers' standard contractual safeguards.

Your photos and images are kept until you delete them or your account. Account details are kept while your account exists. Usage events are kept while the site runs; when you delete your account they are unlinked from it. Payment records are kept for as long as UK tax law requires (normally six years). Logs are kept for a short period for security.

Your rights

Under UK data protection law you can ask to access, correct or delete your data, to restrict or object to its use, and to receive a copy of it. You can delete photos, images and your whole account yourself in settings, or email 757786288@qq.com. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use cookies to keep you signed in and to remember choices such as dark mode. Two more are our own and are never shared: mk_vid, a random visitor ID, and mk_ft, the site and campaign tag of your first visit. Both last up to a year. If your browser sends Global Privacy Control, we set neither cookie and record no page visits, photo picks, downloads or shares from it; you can also block cookies for this site in your browser. Embedded posts from X are loaded from X and are subject to X's own privacy policy.

Changes

If this policy changes in a way that matters, we will update the date above.