Privacy Policy

Effective date: November 1, 2026. Applies to the HiPose app on iOS and Android.

In short: photos stay on your phone unless you confirm an AI edit. A photo you confirm goes to our server and to a third-party AI provider (Google). There is no login and there are no ads. If you use credits, our server keeps a credit record.

1. Who we are

HIYESNO AI PTE. LTD., Singapore ("we"). Contact: support@hipose.net.

2. What stays on your phone

• The live camera view and body detection. They run on the phone and are not uploaded.
• Photos in the in-app album, and basic enhancement (exposure, white balance, color).
• Optional height, age group and gender. They are used for guidance and default tabs.
• The diagnostics log, if you turn it on. It holds numbers and states, not images.

We do not ask for location, microphone or contacts permission. Voice guidance uses your phone's own speech voices.

3. What leaves your phone when you confirm an AI edit

You pick the photos and confirm the upload. We then receive:

• a resized copy of each photo (longest side up to 2048 pixels), which may show faces and anything else in the picture;
• the edits you chose, the app language, the AI edit region, the phone's country setting and a job ID;
• a random install token that lets the server accept the request.

We send the photo and instructions to Google (Gemini API), which creates the edited copy and may first check whether the chosen edit fits the photo. Google may decline a photo. If we change AI provider, we will update this policy first.

How long photos are kept

• Our server: photos are held in memory for processing and are not written to disk by our application. Parts of an unfinished upload expire after about 10 minutes. A result is deleted about 10 minutes after you download it, or within 24 hours if you do not.
• Google: it handles data under its own terms and we do not control it. Google states it may keep data for a limited time for abuse monitoring. Under its paid API terms as we understand them, this data is not used to train its models.
• We do not use your photos to train AI models.

Your original photo stays on your phone and is not replaced. Results with changed content carry an "AI generated" label in the file's metadata.

4. What is sent without an AI edit

• Update check, at app launch: platform, app runtime version, current update ID and a random install ID generated by the update software. The install ID decides whether and when an update is offered. Our code processes it in memory and does not store it.
• AI edit menu, at app launch: AI edit region, language and the phone's country setting, so we can offer suitable options. We do not use GPS.
• IP address: any connection reveals it. We use it, in hashed form, as a short-lived rate-limit key. Separately, our web server access log records the IP address with the time, request path, status and size. It does not record request contents. It is kept for about 14 days.
• Android only: eye detection uses Google's ML Kit library on the phone. Google says ML Kit sends Google technical data for diagnostics and usage analytics: device and app information, performance metrics, API settings, event types, error codes and an installation identifier.

Content usage counts

To decide which poses, hairstyles, backgrounds and edit options to keep or add, the app counts how often each one is selected, and how often edits complete or fail. These counts do not include your photos, face or body data, your height, age or gender, your location or country, advertising ID, or any account or install ID, and they are not used to identify you, assess your appearance or infer personal traits. Our server adds them into daily totals, does not store the individual reports, and keeps the totals for up to 24 months. Sending them is a connection like any other, so the IP address note above applies.

You can turn this off in Settings → Privacy & data; this stops counting and clears unsent counts. Whether it starts on or off depends on your region: it starts off in the EU, the UK and Switzerland, and on phones where the country can't be determined. The phone decides this and does not send us your country. Totals already sent can't be removed because they can't be traced back to you.

5. Credits, purchases and invitations

There is no login. To keep your balance, our server issues a random account ID, kept on your phone. With it we store:

• credit entries: free credits, purchases, uses, returned credits and refunds, with dates;
• for purchases: the store transaction ID, the number of credits and the date. We do not store price, name or email;
• your invite code, which account invited which account, and when;
• for invitations: a keyed hash of your network (not your IP address), whose key changes monthly, used to spot abuse, and notes on any reward held for review.

Apple or Google handles payment, and no other payment company is involved. We do not receive your card details. We keep these records while they are needed to provide your balance, handle refunds and meet legal and accounting duties. On iOS the account ID is kept in the Keychain. On Android it may be included in your device's backup to your Google account, if backup is on.

6. Other records

• Job records without images, kept for up to 7 days: state, chosen edits, an image hash used to detect duplicate jobs, and technical details.
• Cost logs, kept for about 6 months: time, model, duration, cost and result, with a hashed ID. They contain no images.
• Server application logs: time, request path, status, duration and job IDs. They contain no images or IP addresses. They have no fixed deletion date; older entries are removed when log storage fills.
• Feedback you choose to send us: the text and the technical summary you share, kept as long as needed to help you.

7. Why we use data, and who receives it

We use this data to provide AI edits and credits, deliver app updates, prevent abuse, control costs, choose what content to offer and answer you. Where a law requires a legal basis, we rely on your consent for uploads, on performing our contract with you, and on our legitimate interest in security. We do not sell your data, show ads or track you across other companies' apps.

Recipients are Google (AI processing, and ML Kit technical data on Android), our hosting provider DigitalOcean, Apple and Google (store purchases), and authorities where the law requires. Our server is in the United States. Data may be processed outside your country, including in the United States and Singapore.

8. Your choices and rights

• You can use the camera guidance without AI edits.
• You can delete photos and AI versions in the app. Removing the app removes its private data from the phone, except that the iOS Keychain or a device backup may keep the account ID.
• Depending on where you live, you may have rights to access, correct, delete or object to the use of your data. Email us with your invite code or recovery code so we can find your record. Deleting a credit record ends the balance on it.
• We cannot find a photo in Google's systems for you, because we keep no copy linked to you. You can contact Google directly.

9. Children

HiPose is not directed to children. If you upload a photo of a child, you must be the child's parent or guardian, and the app asks you to confirm this in some cases. Contact us if you believe a child has given us personal data.

10. Security and changes

Connections use HTTPS. No system is completely secure. We will post changes here and update the date above.