Privacy Policy

1. Scope and who is responsible

This Privacy Policy applies to mobile apps, app websites, the fbappstudio.com website, support, and related services published or operated by 16601839 Canada Inc, operating as FB App Studio ("FB App Studio", "we", "us", or "our").

An app-specific privacy page, permission prompt, consent screen, store privacy label, or feature notice may provide more detail for a particular workflow. The more specific notice applies to that workflow, but it does not reduce the rights described here. Apple, Google, and third-party services also apply their own policies to data they receive directly from you.

2. Information we handle

The exact data depends on the app and the feature you choose. Installing an app does not by itself give us access to every permission listed below.

• Content you choose to provide: photos, scans, screenshots, audio or voice recordings, prompts, messages, notes, ratings, imported records, support attachments, and generated results.
• Profile and personalization data: name or nickname, language, preferences, goals, birth date, birth time and place, relationship context, reading history, collections, routines, reminders, and similar app-specific settings.
• Sensitive or higher-risk inputs in relevant apps: pregnancy or fertility-test images, private pregnancy audio, baby and caregiver records, mood and wellbeing entries, nutrition and fitness details, private conversations, precise catch or security locations, and network-security context.
• Device and activity information: app and install identifiers, app version, operating system, device type, language, country or approximate region, feature events, subscription entitlement, notification state, request route, status, duration, and request or response size.
• Diagnostics: crash reports, logs, error context, performance information, and limited interaction traces. Older versions of certain apps may have sampled screen-session replays through diagnostic providers.
• Purchase and support information: product, entitlement, renewal and transaction status supplied by Apple, Google, or RevenueCat; and your email address, message, device/app details, and attachments when you contact us.
• Website information: essential local storage for language and notice preferences, plus ordinary server and security logs such as IP address, user agent, requested page, timestamp, and error information.

3. What stays on-device and what is sent off-device

Some histories, preferences, journals, collections, images, and settings are stored locally using the device storage provided by iOS or Android. Local data generally remains until you delete it in the app, clear app data, or uninstall the app; device backups may be controlled by Apple or Google.

When you choose an online or AI feature, the app may send the selected photo, recording, screenshot, text, profile context, or query to our Cloudflare-hosted backend and to the provider needed to produce the result. Analytics, diagnostics, notifications, subscription verification, weather, mapping, book-catalogue, search, and support features also require limited off-device processing.

A camera, photo-library, microphone, location, notification, or network permission allows the specific app feature described in the system prompt. You can deny or later revoke it. Permission access and off-device collection are different: content is transmitted only when the app invokes an online workflow.

4. Why we use information

We use information to provide the feature you request; personalize and save your experience; verify subscriptions; deliver notifications you enable; respond to support; secure, debug, and improve our services; prevent abuse; comply with law; and maintain business records.

Depending on your location and the data involved, processing is based on your consent, performance of the service you requested, our legitimate interest in operating and securing the service, or a legal obligation. Choosing an online feature and submitting its requested input directs us to perform that feature; where law or platform rules require separate express consent for sensitive content or a third-party AI transfer, the app must obtain it before transmission. You may withdraw consent, but the affected feature may stop working.

5. AI, media, and generated outputs

Many FB App Studio apps use Google Gemini for text or multimodal analysis and Replicate-hosted models for image generation or transformation. Cloudflare provides the backend, delivery, and, for some generated or restored outputs, image hosting. We do not use your content to train our own general-purpose AI models.

AI inputs are normally processed for the active request and are not intentionally added to a permanent FB App Studio user-profile database. Providers may retain request data, safety records, or logs under their API terms and our configuration. Generated or restored image outputs may be copied to Cloudflare Images and remain available until deletion is requested or they are removed through service cleanup. Do not submit content you do not have the right or permission to process.

AI outputs are probabilistic and may be wrong, incomplete, or synthetic. Our apps do not make decisions that produce legal or similarly significant effects about you solely through automated processing.

6. Service providers and disclosures

We disclose only the information reasonably needed for a service provider to perform its role. Not every provider is used by every app or every version.

• Cloudflare: backend hosting, security, delivery, operational analytics, and image hosting.
• Google Gemini and Google services: AI analysis, generation, search grounding, maps/places, or other requested Google-powered features.
• Replicate and model providers available through Replicate: image generation, restoration, enhancement, or transformation.
• RevenueCat, Apple, and Google Play: purchases, trials, subscription status, restore, refund, and store operations. We do not receive your full payment-card number.
• Aptabase (including our self-hosted deployment), Amplitude, and Mixpanel: product analytics in apps that include them.
• Sentry: crash, performance, feedback, and diagnostic information in apps that include it.
• Expo, Apple, Google, notification providers, and feature-specific catalogue, weather, search, or content APIs: app delivery and the feature you invoke.
• Professional advisers, a successor in a business transaction, or authorities when reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights.

7. No sale or behavioural advertising

We do not sell or rent personal information. We do not disclose personal information for cross-context behavioural advertising. We also do not knowingly use sensitive app content for advertising profiles. If this practice changes, we will update this policy and provide any notice, consent, or opt-out required by law before the new use begins.

8. Retention and deletion

We retain information only for the purpose that required it, subject to legal, security, fraud-prevention, backup, and dispute needs. Retention differs by data type and service.

• Local app data: until you delete it, clear app storage, or uninstall, subject to device backups.
• AI request inputs: normally for real-time processing; transient infrastructure and provider logs may remain for limited security, abuse-prevention, or service periods under provider terms.
• Hosted generated or restored images: until a verified deletion request or service cleanup. A hosted URL may remain accessible to anyone who has the URL while it is retained.
• Analytics and diagnostics: under the retention configured in the applicable analytics or crash provider, then deleted or aggregated when no longer reasonably needed.
• Support and privacy requests: for as long as needed to resolve and document the request, enforce rights, and meet legal obligations.
• Purchase records: Apple, Google, and RevenueCat retain transaction and entitlement records under their policies and applicable tax, accounting, and fraud rules.

9. International processing

We are a Canadian company. Providers and infrastructure may process information in Canada, the United States, the European Economic Area, or other countries where they operate. Information may therefore be subject to lawful access in those jurisdictions. We assess providers, limit data sent, use contractual and technical safeguards where appropriate, and conduct privacy-impact review for higher-risk or cross-border processing where required.

10. Security

We use measures appropriate to the sensitivity of the information, including encrypted transport, access controls, scoped credentials, platform permission controls, service monitoring, and incident response. No system is completely secure. You should protect your device, avoid sending secrets through support, and remove identifying background details from media when they are not needed for the result.

11. Your choices and privacy rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or information about use and disclosures; withdraw consent; object to certain processing; or complain to a privacy regulator. California residents may also have rights to know, correct, delete, opt out of sale or sharing, limit certain sensitive-information uses, and receive equal service, where the law applies.

Use in-app deletion controls for local data, device settings for permissions and notifications, and Apple or Google settings for subscriptions. Email our Privacy Lead for records held by us or our processors. We may verify your identity and may retain information where law permits or requires. Authorized agents must provide proof of authority. We aim to respond within the period required by applicable law.

12. Children and family-oriented apps

Our services are not directed to children under 13 and are not intended to be used by a child without a parent or guardian where local law requires consent. Apps about babies, pregnancy, or family routines are designed for adult users and caregivers; they are not children’s social services. Do not submit a child’s information unless you are authorized to do so and the feature genuinely requires it. Contact us if you believe a child’s information was provided improperly.

13. Changes, questions, and complaints

We may update this policy when apps, providers, or laws change. We will change the date above and provide additional in-app notice or consent when a material new use requires it. A policy update does not retroactively create consent for a materially different use of sensitive information.

Questions, rights requests, complaints, or requests to delete a hosted output can be sent to contact@fbappstudio.com. You may also complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or the regulator where you live.