Privacy Policy

Last updated October 6, 2026

This policy explains what information AnyPic (“we”, “us”), operated by AI Generated Inc., processes when you use the AnyPic iPhone app and its online service, why, and the choices you have. AnyPic has no ads, does not track you across apps or websites, and does not sell or share your personal information. The app uses Firebase Analytics without the advertising identifier.

Your account

You can use AnyPic without signing up. When you first open the app it creates a random installation ID and secret, stored in your device's Keychain, and an anonymous Firebase sign-in. Our server keeps the installation ID, a one-way hash of the secret and the anonymous Firebase user ID to recognize your account, your credits, your purchases and your generated images.

Signing in with Apple or Google is optional. It keeps your credits, purchases and cloud library with you across devices and reinstalls. When you sign in, we store the provider's user ID for your account (through Firebase Authentication) and the email address the provider shares with us, which can be an Apple private relay address. We don't receive your Apple or Google password. If you sign in on a device where you used AnyPic without signing in, that device's credits, plan and generated images move into your signed-in account.

Information we process

• Photos, masks and text you submit to AI features. When you run an AI feature, the photos, masks, prompts and settings you choose are sent through our server to our AI processing provider, fal.ai, to create your result. Our servers do not store the photos, masks or prompts you submit.
• Generated images. We store the images AI features create for you (the outputs only) on Cloudflare R2, linked to your account, so your cloud library is available in the app. On a paid plan they stay there until you delete them from your library or delete your account. Images created on the free plan are kept for 30 days, together with a copy carrying the AnyPic watermark, which is the version the free plan shows; if you subscribe within those 30 days, the originals are kept like a paid plan's. The app loads them through private links that expire. If you edit one of your generated images again, our server sends the stored original to the AI provider instead of a new upload.
• Task and credit records. For each job we keep the feature and model used, settings such as size and format, the dimensions of the images you sent, the job status, links to the results, error messages and the credits held, charged or refunded. We need these to deliver results, show your history and bill credits correctly.
• Purchases. Payments are handled by Apple. We receive transaction details from Apple — product, purchase and renewal dates, and refund status — and a random account token that links purchases to your installation. We never receive your payment details or Apple ID. Purchase and subscription events are also shared with RevenueCat for revenue analytics.
• Device check. We use Apple's DeviceCheck service so welcome credits are given once per iPhone, and so an invite code can be used once per iPhone and never on the iPhone that shared it. Apple keeps two yes/no values for your device and the month they were last changed, shared by apps from the same developer; when your iPhone receives welcome credits we store that state with Apple (leaving both values unchanged), so a reinstall doesn't receive them again. An iPhone on which an invite was already used doesn't receive welcome credits. We don't receive a device identifier. If Apple can't be reached when you first open the app, we keep the temporary DeviceCheck token the app sent for up to a day to try again, then delete it.
• Invites. If you enter a friend's invite code, we keep which account invited yours, the code and when you entered it. The account that invited you only sees that a friend joined and the credits it earned, never who you are; until its reward is paid it also keeps a reference to your account. To keep invites off the iPhone that shared a code, we keep a one-way hash of the installation IDs you open your own invite page on.
• Stock photo search. If you search stock photos, your search terms are sent through our server to Pexels, and the photos load from Pexels' servers.
• Fonts. When you pick a Google font in the text tool, the app downloads it directly from Google Fonts, which receives your IP address.
• Sign-in, analytics, crash reports and configuration. Firebase, a Google service, provides sign-in (Firebase Authentication), analytics, crash reporting and remote configuration. Firebase Analytics records how the app is used (for example which screens and features are opened) together with basic device and app information, without the advertising identifier. Crash reports include the device model, OS and app version and the app's state when it crashed. We use this to fix problems and improve the app, not for advertising.
• Technical and security data. Our servers run on Cloudflare, which processes IP addresses and request details to deliver and protect the service. We use short-lived counters tied to IP addresses and installations to prevent abuse. Our operational logs record request details, which can include stock search terms, but never your photos or prompts, and are kept for a short period.

What stays on your device

Your projects, edits and exports stay on your iPhone unless you send them to an AI feature; generated images are also kept in your cloud library as described above. The app uses the camera, photo library and microphone only when you use a feature that needs them, and only with your permission. Voice dictation is transcribed on your device; the audio isn't sent to us.

How we use information

• To provide AI features, deliver results, keep your cloud library and keep your credit balance, plan and purchases in sync, including across devices when you sign in.
• To prevent fraud and abuse, such as repeated welcome credits, repeated invite rewards or replayed purchases, and to keep the service secure.
• To understand purchases and measure our own App Store ad campaigns through Apple's AdServices attribution, which doesn't track you across other companies' apps or websites.
• To comply with legal obligations and enforce our Terms of Use.

We do not use your photos or prompts to train AI models, and we don't use your information for advertising.

Service providers

• fal.ai — runs the AI models that process your photos and prompts, and hosts result links. It may keep inputs and results for a limited time to deliver them.
• Cloudflare — hosts our servers and stores account, task, credit and purchase records, and your generated images (Cloudflare R2).
• Firebase (Google) — sign-in with Apple or Google and anonymous sign-in, analytics without the advertising identifier, crash reporting and remote configuration, under Google's own privacy policy. It never receives your photos or prompts.
• Apple — payments, subscriptions, DeviceCheck and App Store services, under Apple's own privacy policy.
• RevenueCat — receives purchase and subscription events, an anonymous RevenueCat user ID, basic device and app information (such as app version, OS and IP address) and Apple's AdServices attribution token, to measure revenue and our App Store ad campaigns. It never receives your photos or prompts.
• Pexels — stock photo search, under Pexels' own privacy policy.
• Google Fonts — font downloads for the text tool, under Google's own privacy policy.

These providers may process information in the United States and other countries where they operate.

Retention and deleting your data

We keep account, task, credit and purchase records while your account exists, and your generated images as described above (images created on the free plan for 30 days). You can delete a generated image from your library at any time. You can delete your account at any time in the app under Me → Settings → Remove my account. This permanently deletes your task history, credits, generated images and account data from our servers, including the Apple or Google user ID and email linked to it, and your projects and Library from the device. We keep only what we need to prevent fraud and duplicate credits: a one-way hash of the installation's secret, whether welcome credits were already claimed, salted one-way hashes of the App Store transactions, subscription periods and purchase tokens we already processed (so purchases can't be credited twice and an active subscription can be restored), whether this account already used an invite code (so invite credits can't be claimed twice), the date of deletion and, if the account was merged into a signed-in account, a pointer to that account's random user ID. None of this identifies you by name, email or device. Deleting your account does not cancel an App Store subscription — manage it in your Apple ID settings.

Your rights

Depending on where you live, you may have the right to access, correct, delete or port your information, and to object to or restrict its processing. We don't collect your name, and we only have an email address if you sign in with Apple or Google, so the fastest way to delete your data is in the app. For other requests, email support@anypic.co. You may also complain to your local data protection authority.

Children

AnyPic is not directed to children under 13, and we don't knowingly collect information from them. If you believe a child has used AnyPic, contact us and we will delete the related data.

Changes

We may update this policy. We'll change the date above and, for material changes, tell you in the app.

Contact

AI Generated Inc. · support@anypic.co