Updated November 1, 2026
This policy describes AI Professional Headshot: Pro, operated by Nikolai Timo Schuler. Contact: nikolai.bora.mindwise@gmail.com.
You choose photos from your device. The app checks photo quality on your device where supported. AI generation, refinement and style analysis require sending selected photos and editing instructions to our processing services; the AI generation is not performed entirely on your device. In the updated app, a separate permission prompt appears before the first upload. You must own the photos or have permission from everyone shown, including a guardian when applicable. You may decline, or withdraw permission in Settings before future uploads. Withdrawal does not undo processing that has already occurred.
Photos are used to create the portrait or style graphic you request and to check input and output safety. We do not operate a public photo feed, sell your photos, or use them to identify you against a facial identity database. Visual face-quality checks are not an identity-verification service. We do not intentionally send photos to analytics or advertising services.
Provider storage, abuse monitoring, legal retention and international processing are governed by their terms and our applicable arrangements. We do not promise zero retention by a provider. See OpenAI API data controls, Gemini API terms, and Supabase Privacy Policy. If you do not agree to this third-party AI processing, do not upload photos.
Our functions attempt to delete input photos from our storage after each completed or failed request. A scheduled server cleanup removes interrupted or orphaned uploads after 23 hours on a 15-minute schedule, targeting removal within 24 hours under normal service operation. Provider outages can delay deletion; contact us if you need help. This also covers older temporary uploads in the legacy storage area. Storage-service backup and legal-retention terms may apply independently.
Generated portraits and history are saved locally in the app, not in a permanent cloud gallery. A generated portrait sent for refinement is another temporary upload. History keeps up to 50 results; photos that you save to the device gallery or share elsewhere are under your control and are not removed by deleting the app history.
We retain limited safety metadata (anonymous service ID, operation ID, action, outcome, request counters, timestamps, consent version, blocking status) and report metadata (result ID, reason, review status) for up to 90 days to prevent abuse and investigate reports. These records do not contain stored photo bytes or raw editing instructions. Blocking is applied to a service account; an anonymous identity does not guarantee that every attempt to evade a block can be identified.
Deleting app data does not cancel an App Store subscription or remove gallery photos. Manage subscriptions through your store account. Older installed versions may not have these new controls; update the app or use the email contact for access, correction, deletion or other privacy requests. We may need reasonable information to locate your request without collecting unnecessary photos.
We prohibit nudity, sexualized edits, nonconsensual intimate imagery, exploitation, sexual content involving minors, and deceptive or abusive uses. Input photos, instructions and generated output are checked. Requests cannot proceed when a required safety check is unavailable. Automated checks can make mistakes and are not a guarantee that every harmful result will be detected. Report problems in the app or by email. We review reports, remove service-held prohibited material when found and can suspend abusive service accounts. There is no public messaging or following system.
The service is not directed to children under 13. A user must have lawful authority to submit any photo of a minor. Sexualized content involving minors is prohibited regardless of claimed consent. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent or complain to a data-protection authority. Contact us to exercise these rights.
We use HTTPS, server-side access checks and private storage permissions. No system or automated classifier is infallible. We will update this policy when processing changes materially and request renewed AI-processing permission when appropriate.