Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: email, username, display name
• Date of birth (for age verification)
• Profile information: bio, avatar, social links
• Content: artwork images, time-lapse videos, descriptions
• Direct messages sent to other users
• Communications: support requests, feedback

1.2 Information Collected Automatically

• Device information: browser type, operating system
• Usage data: pages visited, features used, time spent
• Log data: IP address, access times, referring URLs
• Cookies and similar technologies (see Section 5)

1.3 Information from Third Parties

• OAuth providers (Google, Apple, Discord): email, profile picture (if you sign up with these services)

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Display your artwork and profile to other users
• Send transactional emails (verification, password reset)
• Send optional marketing communications (with consent)
• Respond to support requests
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations
• Analyze usage patterns to improve the Service

2.2 Direct Messaging

Direct messages are transmitted over encrypted connections (HTTPS/TLS) and stored on our secure servers. Messages are not end-to-end encrypted — ArtCopy may access message content for content moderation, enforcement of our Community Guidelines, or when required by law. We do not sell, share, or use message content for advertising purposes.

2.3 Automated Content Moderation

We use OpenAI's content moderation API to automatically screen user-submitted text — including public posts, comments, and direct messages — for policy violations. Only the text content is sent; no images, account information, or personal identifiers are shared with OpenAI. This processing is solely for safety and moderation purposes.

3. How We Share Your Information

3.1 Public Information

Your username, display name, bio, avatar, and submitted artwork (once revealed) are publicly visible to all users.

3.2 Service Providers

We share information with third-party services that help us operate:

• Supabase (database and authentication)
• Vercel (hosting)
• Resend (email delivery)
• Expo (mobile app infrastructure and push notifications)
• Sentry (error and crash reporting)
• OpenAI (automated content moderation — text only, no images or personal data)
• RevenueCat (subscription management — processes in-app purchase receipts and your ArtCopy user ID)
• Google AdMob (advertising delivery to free users — see Section 3.6 for details)

These providers are contractually bound to protect your information.

3.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, safety, or the rights of others.

3.4 Business Transfers

In the event of a merger, acquisition, or sale, user information may be transferred to the new owner.

3.5 What We NEVER Share

• We NEVER sell your personal information
• We NEVER share your content with AI training services
• We NEVER share your email with third parties for marketing

3.6 Advertising

Free users of the ArtCopy mobile app may see ads delivered by Google AdMob. To support ad delivery, we share the following with AdMob:

• Your device's advertising identifier (IDFA on iOS, AAID on Android) — only if you grant the tracking permission described below
• General device information (model, OS version, language, country)
• Your approximate location (derived from IP address)

iOS App Tracking Transparency (ATT): The first time we load an ad, iOS will prompt you to allow or deny tracking. If you deny, we continue to deliver ads, but they will be non-personalized and will not use your IDFA.

European Economic Area / United Kingdom users: Before loading ads we will show a Google User Messaging Platform (UMP) consent form so you can agree to or reject personalized advertising, in line with GDPR requirements. Rejection results in non-personalized ads only.

Ad-free alternative: Subscribing to ArtCopy Pro removes all ads and prevents your advertising identifier from being shared with AdMob. You can also reset your advertising identifier at any time through your device settings.

Google's privacy practices are described in their Privacy Policy.

4. Data Retention

• Account data: Retained while your account is active
• Content: Retained until you delete it or your account
• Direct messages: Retained until you or the other party deletes them, or until account deletion
• Logs: Retained for 90 days for security purposes
• Deleted accounts: Data removed within 30 days (except as required by law)

5. Cookies and Tracking

5.1 Essential Cookies

Required for the Service to function (authentication, security). You cannot opt out of these.

5.2 Analytics Cookies

Used to understand how users interact with the Service. We use Vercel Analytics, which is privacy-friendly and does not use personally identifiable information.

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent the Service from functioning.

6. Your Rights and Choices

6.1 Access and Portability

You can access your account data through your profile settings. Contact us to request a copy of your data.

6.2 Correction

You can update your profile information at any time in settings.

6.3 Deletion

You can delete your account in settings. This will remove your profile and personal data. Note: Some content may remain visible (e.g., artwork in challenges) but will be anonymized.

6.4 Opt-Out

• Marketing emails: Unsubscribe link in every email
• Push notifications: Manage in browser/device settings

6.5 GDPR Rights (EU Users)

If you are in the EU, you have additional rights under GDPR:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

Contact us at admin@artcopy.app to exercise these rights.

6.6 CCPA Rights (California Users)

If you are in California, you have rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we don't sell)
• Right to delete personal information
• Right to non-discrimination for exercising rights

7. Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and authentication
• Secure hosting infrastructure

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

If you are between 13 and 18, you must have parental or guardian consent to use the Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers. For transfers of personal data from the EU/EEA to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. The "Last Updated" date at the top indicates when the policy was last revised.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

For GDPR-related inquiries, you may also contact the relevant data protection authority in your country.