นโยบายความเป็นส่วนตัว

Privacy for iOS and iPadOS

Last updated: October 23, 2026.

This section applies when you use the Photo to Skin app on iPhone or iPad. It supplements the website policy above and takes precedence for the app where the two differ. Photo to Skin is responsible for the account and generation service. For privacy questions and requests, contact support@phototoskin.com.

Information the app processes

• Account: your email address, account ID and name if provided. Our server verifies your password against a password hash; the app stores an authentication token in the iOS Keychain, with an app-private fallback if Keychain storage is unavailable. Google sign-in is optional; Google authenticates you and supplies the account details you authorize. We do not receive your Google password.
• Photos and instructions: only the photo you select, your text prompt or optional appearance instructions, and the previews and skin files generated from them. The app resizes selected photos before uploading them for generation. Your photo library is not uploaded automatically.
• Service records: a randomly generated installation identifier, account and task identifiers, task status, generation history, credit balance and credit transactions. Our hosting services also process network information, including IP addresses, to deliver requests, secure the service and prevent abuse.
• Purchases: Apple processes in-app payments. We process product and transaction identifiers, signed transaction information and credit grants to verify purchases and provide credits. We do not receive your Apple Account password or full payment-card information.
• Support: information you choose to include when contacting us. Please do not send passwords or unnecessary sensitive information.

We use this information to authenticate accounts, perform requested generations, provide history and downloads, manage credits and purchases, answer support requests and protect the service. We do not use your photos to identify you or create a facial-recognition or biometric identity database.

Third-party processing and your choice

AI generation takes place on remote services, not entirely on your device. In the current app, submitting a generation request sends the relevant content to the services listed below. Selecting a photo alone does not submit a generation request. Review the recipients, information and purposes before submitting; if you do not want that processing, do not submit the request. You can still use features that do not require AI processing. Photo-library permission is separate from permission to share content with an AI service. You can stop future AI transfers by not submitting further generations and may contact us to withdraw consent or request deletion of previously submitted data. Withdrawing consent does not undo processing that has already taken place.

The generation services used by the app include:

• Kie AI: receives your selected photo and appearance instructions through our server to generate character previews. Its reference-image upload infrastructure uses the kieai.redpandaai.co and tempfile.redpandaai.co domains. Kie AI privacy policy.
• ModelsLab: receives text generation instructions to generate skin images. A text-only request does not include a selected photo. ModelsLab privacy policy.
• Waffo Prompt Screening API: receives the text prompt or appearance instructions for content-safety review, not the uploaded photo. Waffo's API documentation states that this check does not retain prompt text after returning.

  Waffo processing information

  .
• Cloudflare: provides hosting, network security, database and storage infrastructure for our service.

  Cloudflare privacy policy

  .

These services receive the data needed for their tasks; generation requests do not require us to send your account password, Apple payment details or entire photo library. We require service providers handling app data on our behalf to protect it at least as well as this policy and Apple's applicable requirements, and restrict its use to the service purposes disclosed to you. We remain responsible for selecting and overseeing those providers. Provider policy links do not waive your rights or reduce our responsibilities.

Photo to Skin does not use your photos or prompts to train its own general-purpose AI models. Do not interpret this as a promise that third-party input storage is zero or that all suppliers have identical training and deletion terms. Their applicable processing terms must be considered before you authorize a transfer.

Photos, permissions and sharing

The app uses Apple's photo picker so you can choose specific images without giving us access to your whole library. Saving a skin to Photos requires the system's add-photos permission. You may refuse or change that permission in iOS Settings; other export methods remain available. The app does not require camera, microphone, contacts or location access for skin generation.

History, exports and edited skins may also be stored on your device. Sharing or exporting a file to another app is your choice; that destination's privacy rules apply to the copy you send. Opening the online editor sends the skin you choose to edit to an editor page hosted on our service, which also receives ordinary web-request information.

Advertising, analytics and websites

The native app does not integrate advertising or a third-party analytics SDK, request an advertising identifier, or track your activity across other companies' apps and websites for advertising. Necessary account, security and transaction records are still processed as described above. We do not sell your personal data.

Website cookie and Google Analytics settings in this policy apply to website visits, including web pages you open from the app, rather than representing an analytics SDK in the native app. Google sign-in and other external pages are also subject to their own privacy notices. The website analytics control applies to the browser in which you set it.

Retention and deletion

We keep account information while your account remains active and keep generated previews, skin files, prompts and credit history to provide your account history and service. Deletion requests end that routine retention, except for records needed to meet legal obligations or resolve a transaction or security issue. Any retained records are restricted to those purposes and removed or anonymized when no longer needed.

Original photos are transmitted to the AI image-processing service; they are not published in our public photo gallery. This does not mean that no temporary or provider-held copy exists. Provider-held inputs and outputs are subject to that provider's applicable processing and deletion terms. We coordinate requests concerning data we submitted on your behalf. We do not promise immediate erasure from third-party systems or a fixed automatic expiry that has not been verified.

To request permanent deletion of your account and associated data in the current app version, contact support@phototoskin.com. After verifying the request, we assist with deleting or irreversibly anonymizing the account and associated personal data under our control, including cloud generation history, stored outputs and authentication credentials, unless retention is required for the limited reasons above. If completion takes additional time, we tell you the expected timing and confirm completion. The current app's Sign Out control is not an account deletion control.

The History delete action removes the record from that device; it must not be treated as confirmation that the cloud account or a provider-held copy has been deleted. Signing out or uninstalling also does not delete your server account. Copies exported to Photos, Files, backups or other recipients must be managed separately. Apple controls its own payment records and refund decisions; deleting an account does not itself request a refund from Apple.

Security, international processing and your rights

We use encrypted network connections, access controls and authenticated account downloads. Information may be processed in countries where we and our providers operate; applicable safeguards are required for international transfers. No online service can promise absolute security.

You may request access, correction, export, deletion, or restrictions on processing and withdraw consent by contacting support@phototoskin.com. We may verify your identity to protect your account. Where applicable, you may also complain to your local data-protection authority. We do not knowingly collect children's personal information without any authorization required by applicable law. If you believe a child has submitted data without the necessary authorization, contact us so we can investigate and arrange deletion.

We update the date when this notice changes and give appropriate notice of material changes. A new use or disclosure requiring consent will require fresh permission; posting a revised policy alone does not provide that permission.