Privacy Policy
What Artify Lab does with your prompts, images and data — and, just as importantly, what it doesn't.
Last updated:
The short version
- Your library — images, prompts and version chains — syncs through your own private iCloud, not through our servers.
- We do not sell your data, and we do not use your prompts or images to train generative models.
- Prompts and reference images travel to an AI provider to produce your image, then leave that pipeline.
- Payments are handled by Apple. We never see your card details.
The rest of this page is the detail behind those four lines.
Who this applies to
This policy covers [[Artify Lab — registered entity name]] ("we", "us"), the controller of personal data processed through the Artify Lab apps for iPhone, iPad and Mac, and through artifylab.app.
What we process
- Prompts and reference images — the text you write and any images you add, sent to our generation provider for the sole purpose of producing your result.
- Generated images — created on our infrastructure and delivered to your device, where they are stored in your library.
- Purchase records — the fact that a credit pack was bought and your remaining balance, received from Apple. Apple does not pass us your payment details.
- Device and diagnostic data — app version, OS version, device model and crash reports, used to find and fix problems.
- Support correspondence — anything you send us by email, kept for as long as resolving the matter requires.
We do not ask for your name, postal address or phone number, and Artify Lab has no account of its own to sign up for.
Where your library lives
Your library is stored on your device and synced through your private iCloud database using Apple CloudKit. That container belongs to your Apple Account: we cannot read it, and it is covered by Apple's privacy terms. Turning iCloud off for Artify Lab keeps everything local to that device.
Why we process it, and on what basis
- To provide the Service — generating images from your prompts, delivering results, keeping your credit balance correct. Basis: performance of our contract with you.
- To keep the Service safe — enforcing the rules in our Terms, filtering prohibited content, preventing abuse of the credit system. Basis: legitimate interests, and legal obligation where applicable.
- To fix and improve the app — diagnosing crashes and errors. Basis: legitimate interests.
- To answer you when you write to us. Basis: legitimate interests and, where relevant, our contract with you.
We do not build advertising profiles, and we do not process your content for behavioural advertising.
Who we share it with
- Apple — App Store distribution, in-app purchases, and iCloud sync.
- AI model and infrastructure providers — receive your prompt and reference images in order to produce the image, under contracts that prohibit using them for their own model training.
- Crash and diagnostic tooling — receives technical error data.
- Legal recipients — authorities, where we are legally required to respond to a valid request, and a successor entity in the event of a merger or acquisition, subject to this policy.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law.
How long we keep things
- Prompts and reference images sent for generation: removed from the generation pipeline once your result is delivered, and within 30 days at the latest.
- Content retained after a safety flag: up to 12 months, to enforce our Terms and meet legal obligations.
- Purchase and credit records: as long as accounting and tax law require.
- Diagnostic data: up to 12 months.
- Your library: for as long as you keep it — it is in your iCloud, under your control.
Security
Data is encrypted in transit with TLS and encrypted at rest. Access to production systems is limited to the people who need it and protected by strong authentication. No system is perfectly secure, but we take this seriously, and where a breach affects you and the law requires it we will notify you and the relevant regulator.
Children
Artify Lab is not directed at children under 13, and we do not knowingly process their personal data. If you believe a child has provided us with personal data, write to privacy@artifylab.app and we will delete it.
International transfers
Our providers may process data outside the country where you live, including in the United States. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to processing, to receive it in a portable format, and to withdraw consent where processing rests on consent.
Because Artify Lab has no account system, most of your data is already in your hands: your library sits in your iCloud, and deleting the app together with its iCloud data removes it. For anything we hold, write to privacy@artifylab.app and we will respond within the time the law allows — 30 days under the GDPR, 45 days under the CCPA. You also have the right to complain to your local data protection authority.
Changes to this policy
We will update this page when our practices change, and revise the date at the top. If a change is material, we will give notice in the app before it takes effect.
Contact
Privacy questions and requests: privacy@artifylab.app. Everything else: support@artifylab.app.