Privacy Policy

Data We Collect

Selfie Photos: When you upload a selfie, it is stored locally on your device only. Your selfie is sent to our server solely to generate your photo and is not stored on our servers after processing.

Photos You Choose to Edit: You can also attach any photo from your library or camera and describe a change to it. That photo is handled like your selfie: it is sent to our server and to our image-generation providers only to create your edit, and is not stored on our servers afterwards. It never replaces your saved selfie. Only attach photos you have the right to use, and if a photo shows other people, make sure they are okay with it.

What You Type:The description you type is sent with your photo to create the edit and is kept with the generation record on our servers. Please don't include personal information in it.

Generated Images: AI-generated images are created via a third-party service and delivered to your device. We do not permanently store generated images on our servers.

No Accounts: We do not require user accounts. We do not collect your name, email address, or any personal identifiers.

Usage Data: We collect app usage events, such as when a generation starts or finishes, using PostHog. These are tied to a random identifier for your device, not to your name or email, and we use them to understand and improve the app.

Face Data Collection, Use, and Sharing

What face data we collect: When you upload a selfie, the app collects your facial image (photograph containing your face, facial features, and likeness). The app does not perform facial recognition, create facial geometry maps, or generate biometric identifiers.

How we collect it: You voluntarily provide your selfie by choosing a photo from your library or taking one with your camera. The app only accesses photos you explicitly select.

How we use it:Your face data is used exclusively to generate AI-powered photos of you in luxury scenes. Your selfie is sent to fal.ai, a third-party AI image generation service, which passes it to OpenAI's image model to create the generated image. It is not used for facial recognition, identification, authentication, or any other purpose.

Third-party sharing: Your selfie (containing face data), and any photo you choose to edit, is shared with fal.ai (operated by fal.ai, Inc.) and, through fal.ai, with OpenAI, solely for the purpose of AI image generation. fal.ai processes the image in real-time and does not store your selfie or face data after generation is complete. fal.ai provides the same or equal protection of user data as described in this privacy policy.

Storage and retention: Your selfie is stored only on your local device. During generation, it is transmitted to our server and then to fal.ai via encrypted HTTPS connections. Neither our server nor fal.ai retains your selfie or face data after the generation process is complete. Generated images are delivered to your device and not stored on our servers.

Deletion: You can delete your selfie at any time by uploading a new photo (which replaces the previous one) or by deleting the app, which removes all locally stored data including your selfie.

Consent: Your selfie is always a photo you explicitly choose from your library or take yourself — the app cannot access any other photos. No face data leaves your device until you actively request a generation, and this policy is linked in the app so you can review how that data is handled before doing so. If you never request a generation, no face data is transmitted.

Third-Party Services

• fal.ai — AI image generation. Your selfie is temporarily processed to generate images.
• Supabase — Backend infrastructure for serving scene data.
• RevenueCat — Subscription management and purchase validation.
• PostHog — Product analytics.
• Sentry — Crash and error reporting.
• Apple — In-app purchases are processed by Apple.

Data Retention

Selfie photos are stored on your device and can be deleted at any time by uploading a new selfie or deleting the app. We do not retain your selfie or generated images on our servers after processing is complete.

IP-based rate limiting logs are automatically deleted after 24 hours and contain no personal information beyond your IP address.

Children's Privacy

LarpMaxxing is not intended for children under 13. We do not knowingly collect data from children under 13.

Security

We use HTTPS for all data transmission. Your selfie is sent over encrypted connections and is not stored on our servers. API keys for third-party services are kept server-side and are never exposed to client devices.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the date at the top of this page.

Contact

If you have questions about this privacy policy, contact us at support@larpmaxxing.com.