Privacy Policy

1. Who we are

Papercopy ("the App", "we", "our", "us") is an independent mobile application developed and operated by Milos Micunovic, a sole developer. The App turns your phone into a lightbox so you can trace a picture onto paper. This Privacy Policy explains what information we collect when you use the App, why we collect it, who we share it with, and what choices you have.

2. Summary

• Tracing pictures from your gallery happens entirely on your device. Those photos are never uploaded.
• If you use AI features, the prompt you type or the photo you choose to edit is sent to our server and to an AI provider to produce the result.
• Generated images are stored on our server so the App can show them to you again.
• The App shows ads. Ad partners may use your device's advertising identifier, subject to your consent where required.
• We use Firebase for sign-in, analytics, and crash reporting.
• You can ask us to delete everything we hold about you at any time.

3. Information we collect

3.1 Account information

You can use the App without an account. If you sign in with Google through Firebase Authentication, we receive and store your Firebase user ID, your email address, your display name, and your Google profile picture URL. We use these to identify your account, link your purchases and AI credits to it, and respond to your support and deletion requests.

3.2 AI Studio (image generation)

When you generate an image with AI Studio, we collect and store:

• The prompt you type, and the theme, style, and tweaks you select
• The generated image
• The date and time of the generation, and the credit used for it

The prompt is checked against our content rules before generation and is then sent to the AI provider that produces the image. Generated images belong to you. We store them so the App can display them again and so we can investigate misuse or billing problems.

3.3 AI photo editing

When you use an AI editing feature on one of your own photos (for example turning a photo into line art), the App uploads that photo to our server, which forwards it to the AI provider together with the editing action you chose and your device language. We do not keep a copy of the original photo after the edit is complete. The edited result is stored in the same way as an AI Studio image.

3.4 Purchases and credits

Purchases are handled by Google Play or the App Store. We do not receive your card or bank details. We do receive and store the purchase token or receipt, the product bought, the purchase date, and your resulting credit or subscription balance so we can deliver what you paid for and handle refunds.

3.5 In-app feedback

If you send feedback from inside the App, we store the message you write, the topic you chose, your user ID if you are signed in, and the date. Your IP address is used briefly to limit abuse of the feedback form.

3.6 Analytics and crash reports

We use Google Firebase Analytics and Firebase Crashlytics to understand which features are used and to find and fix crashes. These services collect a per-installation identifier, device model and operating system version, app version, country derived from IP address, session and screen information, and crash traces.

3.7 Advertising

The free version of the App shows ads served by Google AdMob, with Meta Audience Network as a mediation partner. To show and measure ads, these partners may collect your device's advertising identifier, IP address, device information, and coarse location derived from IP address. Where the law requires it (for example in the European Economic Area, the United Kingdom, and some US states), the App shows a consent form before any personalised ads are served, and you can change your choice at any time from the App.

3.8 Server logs

Our server keeps technical logs to keep the service running and to diagnose problems. These logs contain your user ID, request timestamps, and technical details such as error messages. Prompts may appear in logs when detailed logging is turned on for troubleshooting.

3.9 What we do not collect

We do not collect your precise location, your contacts, or the contents of your photo library. Photos you trace from your gallery without using an AI feature never leave your device.

4. Why we use your information and our legal basis

• To provide the App, including generating and editing images, delivering purchases, and keeping your credits. Legal basis: performance of our contract with you.
• To show ads in the free version. Legal basis: your consent where required, otherwise our legitimate interest in funding a free app.
• To understand usage and fix crashes. Legal basis: our legitimate interest in improving and maintaining the App.
• To prevent abuse, such as blocking prompts that violate content rules and limiting spam. Legal basis: our legitimate interest in keeping the service safe.
• To answer your requests and comply with legal obligations, including tax and accounting rules for purchases.

5. Who we share your information with

We do not sell your personal information. We share it only with the service providers listed below, and only as needed to run the App.

• Google Firebase (Google LLC): authentication, database, file storage for generated images, analytics, crash reporting, and remote configuration.
• OpenAI (OpenAI, L.L.C.): image generation and editing, and prompt moderation. OpenAI receives your prompt or the photo you chose to edit.
• Google Gemini (Google LLC): image generation and editing for some features. Google receives your prompt or the photo you chose to edit.
• Google AdMob and Meta Audience Network: ad serving and measurement, as described in section 3.7.
• Google Play and Apple App Store: purchase processing.
• Hosting providers that run our server.

We may also disclose information when required by law, to respond to a lawful request from a public authority, or to protect our rights and the safety of our users.

Our server and providers are located mainly in the United States and the European Union. If you use the App from elsewhere, your information is transferred to those locations. Where required, our providers rely on standard contractual clauses or equivalent safeguards for these transfers.

6. How long we keep your information

• Account, generated images, prompts, and credits: until you delete your account or ask us to delete your data.
• Original photos sent for AI editing: only for the duration of the edit. They are not retained afterwards.
• Purchase records: as long as required for accounting and tax purposes, even after account deletion.
• Feedback messages: until resolved and no longer needed, or until you ask us to delete them.
• Analytics and crash data: according to Google's retention settings for Firebase, currently up to 14 months for analytics and 90 days for crash reports.
• Server logs: for a short period needed to diagnose problems, after which they are deleted.

7. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy
• Correct information that is inaccurate
• Delete your account and personal information
• Object to, or ask us to restrict, certain processing
• Withdraw consent at any time, for example for personalised ads, without affecting processing that happened before
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at mmicunovic1@gmail.com. We will respond within 30 days. We may ask you to confirm your identity, for example by writing from the email address linked to your account.

You can also reset or delete your advertising identifier and opt out of personalised ads in your device settings.

8. Deleting your data

You can ask us to delete your account and all personal data we hold at any time by emailing mmicunovic1@gmail.com or using our data deletion request page. After we confirm the request, we delete your account, generated images, prompts, credits, feedback, and analytics identifiers within 30 days. Purchase records that we must keep for accounting are retained for the legally required period and then deleted. Deletion is permanent and any remaining credits are lost.

Photos and tracing history kept on your device are removed when you uninstall the App.

9. Children

The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Security

Data is sent between the App and our server over encrypted connections, and access to our server and databases is restricted to authenticated requests. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

11. AI-generated content

Images produced by AI Studio and AI editing are generated automatically by third-party models. They may be inaccurate or unexpected, and we are not responsible for their content. Prompts that violate our content rules are rejected.

12. Changes to this policy

We may update this Privacy Policy when the App changes. The effective date at the top shows when it was last revised. For significant changes we will also tell you in the App.

13. Contact

Questions about this policy or about your data? Contact us at: