Privacy Policy
Last Updated: October 21, 2026
Welcome to Botox & Filler Simulator ("we," "us," or "our"). This Privacy Policy explains how Dedaldev DOO ("Company") collects, uses, discloses, and protects your personal information when you use our mobile application and related services (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
We may collect the following types of information:
- Account Information: Email address, username, and profile details if you create an account. If you continue without an account, we create an anonymous account that is identified only by a random ID.
- Usage Data: Information about how you use the Service, including features accessed, time spent, and interaction patterns.
- Uploaded Images: Photos you take or choose for aesthetic treatment simulation. They are used only to create your result and are not stored by us after the result has been returned to your device (see section 2).
- Generation Records: For each simulation we keep a record that contains your user ID, the style you chose, your platform and app version, your IP address, how the simulation was paid for (subscription or one time purchase), the time, and a one way hash of the photo. A hash is a short fingerprint that cannot be turned back into the photo. The record does not contain the photo or the result.
- Device Information: Device type, operating system, language, app version, unique device identifiers, mobile network information, and, if you allow notifications, a push notification token.
- Payment Information: Transaction details processed through Apple App Store, Google Play, or other payment providers. We do not store your full payment card details.
2. Face Data and Photo Processing
What face data does the app collect?
When you use the app to simulate a cosmetic treatment, you provide a portrait photo using your device camera or photo library. This photo may contain an image of a face. We do not extract, analyze, or store any biometric data (such as facial geometry, facial recognition templates, or identity markers) from your photo. The photo is used solely as visual input for AI-based aesthetic simulation.
How is the photo used?
Your photo is used exclusively to generate a simulated result image in a single, one-time operation. Specifically:
- Your photo is sent over an encrypted HTTPS connection to our secure server.
- The photo is forwarded to a third-party AI content moderation service to screen for prohibited content.
- The photo is then forwarded to a third-party AI image generation service to produce the simulated output.
- The resulting simulation image is returned to your device and displayed to you.
- No facial recognition, biometric profiling, or identity analysis is performed at any stage.
Is face data shared with third parties?
Yes. Your photo is transmitted to the following third-party AI service providers for content moderation and simulation generation:
- OpenAI, L.L.C. (USA) checks photos with its content moderation service before they are processed, and generates the result for all treatment styles except those in the Breasts category. See the OpenAI Privacy Policy.
- OpenRouter receives the photo for treatment styles in the Breasts category and passes it to the Sourceful Riverflow image model, which generates the result. See the OpenRouter Privacy Policy.
We evaluate and may change our AI processing partners over time. If we do, we will update this Privacy Policy. Each provider handles your photo under its own privacy policy and may keep requests for a limited period, for example to detect abuse. OpenAI states in its API data policy that content sent through its API is not used to train its models by default. Your photo is not shared with any other third parties.
How long is face data retained?
- Your original photo (input): Not stored. It is processed in memory on our server and discarded as soon as the generation request completes.
- Generated simulation (output): Not stored. The result is sent back to your device in the same request and we do not keep a copy.
- On your device: Images are held in memory during the active session only. They are not saved to your device unless you explicitly choose to save them.
Is face data linked to your user account or identity?
Your photo and the generated result are never stored and are not linked to your account. To enforce usage limits and prevent abuse, we keep a generation record linked to your account (see section 1). It contains a one way hash of the photo, which cannot be used to view or recreate the photo, and no photo or result. We do not use your photo to identify you across sessions.
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the Service, including processing your aesthetic treatment simulations and enforcing daily usage limits.
- Improve and personalize your experience.
- Process transactions and send related information.
- Send promotional communications (with your consent).
- Detect, prevent, and address technical issues or fraudulent activity.
- Detect, investigate, and prevent abuse of the Service, including automated scripting, systematic circumvention of usage limits, and unauthorized API usage.
- Comply with legal obligations.
Abuse and Fraud Prevention: We collect and analyze technical usage data, including IP addresses, request frequency, client identifiers, device fingerprints, image hashes, and API usage patterns, for the purpose of detecting, preventing, and responding to abuse, fraud, automated scripting, and violations of our Terms of Service. Accounts identified as abusive may be classified as restricted accounts and may have their access to the Service limited or terminated. This processing is carried out on the basis of our legitimate interests in maintaining the security, integrity, and fair availability of the Service for all users (Article 6(1)(f) GDPR). By using the Service, you acknowledge and consent to this processing.
4. Analytics and Tracking
We use analytics services to understand how users interact with our Service. Our analytics partners include:
- Firebase Analytics (Google LLC): app usage analytics.
- Microsoft Clarity (Microsoft Corporation): session recording and user interaction heatmaps. Clarity may record screen interactions during your session to help us improve the app experience. The photos you select and the generated results are masked in the recordings, so they are not visible (app version 0.2.5 and later).
These services may collect information about your device, location, and usage patterns. You can opt out of analytics tracking through your device settings. The app does not show advertising.
5. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, or to comply with legal obligations. Specifically:
- Uploaded (input) photos: Not stored. Processed in memory and discarded as soon as AI generation completes.
- Generated simulation images: Not stored. Returned to your device in the same request and not kept by us.
- Generation records: Kept for as long as needed to enforce usage limits and prevent abuse. They are deleted when you delete your account.
- Account information: Retained until you delete your account or request deletion.
- Purchase records: Records of purchases may be kept as needed for accounting and to prevent the same purchase from being used twice.
- Usage data: Retained for up to 24 months for analytics purposes.
6. Third-Party Services and AI Processing
We use the following third-party services to operate the app:
- OpenAI, L.L.C. (USA): content moderation of photos and AI image generation for all styles except the Breasts category.
- OpenRouter with the Sourceful Riverflow image model: AI image generation for styles in the Breasts category.
- Firebase / Google LLC: Authentication (including anonymous accounts), push notifications, remote configuration, and analytics.
- Google LLC: Sign in with Google.
- Apple, Inc.: Sign in with Apple and App Store payments.
- RevenueCat, Inc.: Subscription and in-app purchase management. RevenueCat receives purchase information together with your user ID.
- Microsoft Clarity: Session recording and interaction analytics, with photos masked as described in section 4.
We also send internal operational alerts to our team through a messaging tool. These contain only technical data such as app version, platform, device model, language, and an internal numeric user ID. They never contain photos, names, email addresses, or usernames.
We may also share your information in the following circumstances:
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
We do not sell your personal information to third parties.
7. Data Security
We implement industry-standard security measures to protect your information:
- Encryption in transit (HTTPS/TLS) and at rest.
- Secure cloud infrastructure with access controls.
- Payment processing that adheres to PCI-DSS standards.
- Regular security assessments and updates.
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have certain data protection rights under GDPR:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your personal data.
- Restriction: Request limitation of processing.
- Portability: Request transfer of your data to another service.
- Objection: Object to processing based on legitimate interests.
To exercise these rights, contact us at the email below. We will respond within 30 days. You can also delete your account directly in the app under Profile, Delete Account.
9. Children's Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately in compliance with COPPA (Children's Online Privacy Protection Act).
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including Serbia, where our company is located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us