← Back

Privacy Policy

Last updated: August 2026

Draft. This text describes how the app actually works technically. Legal review is still pending before launch.

1. Controller

Ovix Solutions, c/o F2BII E-Commerce#1076, Hintergoldingerstrasse 30, 8638 Goldingen, Switzerland. The Swiss Data Protection Act (FADP) applies, as does the General Data Protection Regulation (GDPR) for users in the EU/EEA.

2. What data we process

• Account data: email address and sign-in data (managed via Supabase, servers located in Frankfurt/EU).
• Reference images: the photos you upload, used solely to create or edit your images.
• Generated images and edits.
• Purchase and credit data: packs purchased and credit entries. No payment details – payments are handled entirely by Apple and Google.
• Job metadata: chosen style, timestamp, status, and an optional rating.
• Technical editor events in minimised form (e.g. tool used, export format, number of variants). Prompts, image content, and local file paths are not stored.

3. How long we keep images

• Your reference images are only processed temporarily on our servers and are deleted automatically as soon as generation finishes.
• Generated images are deleted once your app has downloaded them.
• An additional automated process removes any leftover temporary files after 24 hours at the latest.
• Your finished images are stored only locally on your device. We do not run a cloud gallery.

4. AI processing by Google (transfer to a third country)

To generate and edit images we send your reference images to Google's Gemini API. Processing may take place in the United States. This is based on the EU Standard Contractual Clauses and the Swiss-U.S. Data Privacy Framework. In the paid tier we use, Google does not use the content to train its models.

5. Your rights

At any time, directly in the app, you can:

• view and export all data stored about you (Profile → Data export),
• permanently delete your account and all server-side data (Profile → Delete account),
• delete your local images (Profile → Delete local images).

You also have the right to rectification, restriction of processing and objection, as well as the right to lodge a complaint with a data protection authority (Switzerland: FDPIC).

6. Legal bases (EU/EEA)

Processing is carried out to perform our contract with you (Art. 6(1)(b) GDPR – creating your images, managing your credit balance) and on the basis of your active decision to upload reference images. Minimised technical editor events are processed for error analysis and product stability on the basis of our legitimate interest (Art. 6(1)(f) GDPR). They are kept until your account is deleted. There is no advertising or third-party tracking.

7. Processors

• Supabase Inc. – database and authentication (Frankfurt region, EU)
• Railway Corp. – hosting of our application server and job queue; your reference images pass through it during processing
• Google LLC – AI image processing (Gemini API)
• Apple Inc. / Google LLC – in-app purchase handling

8. This website

This site is static and sets no cookies. There is no analytics or advertising tracking. Fonts are loaded from Google Fonts, which transmits your IP address to Google.

9. Contact

For privacy enquiries: contact@rutila.app