Privacy

This policy describes data processing by Sovva and its website. The operator is Sovva LLC. Contact for privacy questions and requests: support@sovva.app; delivery must be verified before launch.

1. Information and its sources

Account: Sign in with Apple supplies an Apple identifier and available sign-in information, including email. We store the username, display name, bio and avatar you provide, and session information needed for authentication.

Image creation: selected photos, prompts, settings, generation jobs and results. Selecting a photo permits processing that material for the feature, rather than access to your entire photo library.

Social features: published creations, creator follows, likes, collections, recipe reveals, reports and blocks. Purchases: Apple transaction identifiers and status, subscriptions and credit history. Sovva does not receive full payment-card details for App Store purchases.

Technical information: IP address, request and browser/client information, errors and server logs. Support requests include your sender address, correspondence and any attachments.

2. Purposes

We use information for authentication and account protection, generation and storage, displaying content you choose to share, feed and profile features, purchase accounting, support, handling reports, preventing fraud and duplicate credit grants, and legal obligations. We do not use these features to identify people by their face or build our own database of biometric templates.

Where required by law, processing relies on providing the requested service, separately obtained consent, legal obligations, or justified service-protection interests subject to your rights. Acceptance of service terms does not replace separate permission for AI sharing.

3. AI recipients and permission

The app requests separate permission before generation. The current integration sends selected photos, prompts and instructions to OpenAI through GetContent / OpenRouter; publishing sends the result and prompt to Google Gemini through these services for suggested tags. The actual production route and contractual recipients must be confirmed before launch.

Permission lasts for the current app session and resets when the session ends or you sign out. You can revoke it in Settings. Declining preserves feed browsing and account management; features requiring AI sharing are unavailable. Revocation stops new submissions but does not undo processing already performed.

We do not promise that external providers never retain data or use it for training until their applicable contracts and settings have been verified. Before release, recipients must be confirmed to provide protection at least equivalent to the final policy. Do not upload information you do not wish to share with these recipients.

4. Other recipients and international processing

Apple provides authentication and purchases. Vercel hosts this website and receives technical visit information. The separately hosted API and database infrastructure process app information; Timeweb provides the image storage currently used. Authorized support staff and infrastructure providers may need limited access. Information may be disclosed in response to binding lawful requests or to investigate abuse, subject to applicable law.

Processing may occur outside your country. Providers, countries and required international-transfer mechanisms, including launch-country requirements, must be confirmed before release. The current implementation does not sell information or share it with advertising networks for targeting.

5. Public and private content

New creations are private by default. If you publish, other users can see the creation and public profile and apply the published style. Recipes are hidden by default but can be revealed through the designated feature. A hidden recipe does not mean that paid recipe reveal is prohibited. Results made by applying another person’s style stay private.

We cannot withdraw copies other people have downloaded or independently saved. Deleting an original should not be understood as deleting all independent results previously created by other users.

6. Retention and deletion

Your account and associated content are stored to provide the service until deletion. In the app, open Profile → Settings → Delete Account. This removes the profile, your creations and related data, with files removed from active storage. Failed cleanup is retried by a background process, so deletion may not complete immediately.

Transaction and credit-grant records remain to prevent duplicate payment processing. Their profile reference is cleared, but transaction identifiers remain. A separate initial-grant ledger retains your Apple identifier and former internal identifier to prevent repeated bonus claims. These are not fully anonymous records.

The current implementation has no automatic deletion deadline for these protection ledgers. Their retention periods and grounds, and retention of server logs, backups, support correspondence and provider-held data, still require approval and implementation. These gaps must be resolved before App Store submission; this policy does not promise an unverified deadline.

7. Your choices and rights

You can edit your profile, manage publication, revoke AI permission, limit Photos access in iOS Settings and delete your account. Depending on applicable law, you may request access, a copy, correction, deletion, restriction, objection or portability, and complain to a competent authority. Contact support to request this; reasonable account-ownership verification may be needed. Mandatory response deadlines and exceptions follow applicable law.

Deleting your account does not cancel an Apple subscription; cancel it separately in your Apple Account subscription settings. Withdrawing consent does not invalidate processing lawfully completed beforehand.

8. Security, children and this website

Access controls and protected transmission are used, but absolute security cannot be guaranteed. The app is not positioned as a service for children; minimum age and minor-use rules will be aligned with its age rating and launch countries.

This website has no photo upload, registration or payment form and does not include marketing analytics. Hosting may process technical logs and use protective measures. If functionality or processing changes, we will update the policy and obtain separate consent when required.