Privacy

Privacy Policy

Updated July 19, 2026

We process data only to provide features you choose. We do not sell personal data or use your toy photos to train a PopPose-owned model.

1. Account data

You can create an account with Sign in with Apple. We store the app-specific Apple user identifier and any name or relay email you choose to provide. Your session lives in device Keychain; the server stores only its hash.

2. Collection and media

When signed in, collection names, series, numbers, notes, dates and cover images are encrypted in transit to Cloudflare D1 and private R2 for cross-device sync. Standard cutout runs entirely on-device and uploads nothing.

3. AI processing

Only when you choose AI cutout or video generation do we send the selected image and necessary parameters to a provider. Replicate processes BRIA background removal; Atlas Cloud processes ByteDance Seedance video generation.

4. Retention

Collection covers remain while your account exists. Temporary AI inputs, outputs and job records are retained briefly for reliable delivery and cleaned by lifecycle rules. You control files saved locally.

5. Deletion and rights

Delete your account inside Settings. Cloud account records, collection indexes, covers, generation jobs and sessions are deleted together, and the Sign in with Apple token is revoked when server credentials are configured.

6. Security

We use TLS, account-scoped object paths, private R2 storage, authorization checks, rate limits and hashed sessions. No online system can guarantee absolute security; please report concerns promptly.

7. Children

PopPose is for general collectors and is not directed to children under 13. We do not knowingly collect their personal data.

8. Contact

Send privacy requests to support@poppose.app. The operator’s legal name and mailing address will be added before public release.