Privacy Policy

Last updated: 12 November 2025

Thank you for using Vesica (“Vesica,” “we,” “us,” or “our”).

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, mobile applications, and related online services (collectively, the “Service”). By using the Service, you agree to the practices described below.

1) Information We Collect

Account & Identity Data

We collect the minimum data needed to operate the Service. This may include your name, email address, and authentication provider identifiers (Apple, Google, or email/password). Optional profile data (e.g., preferred language, notification settings) may also be stored. Device metadata (model, OS version, device fingerprint) may be used to help prevent fraud and duplicate credit grants.

Anonymous Usage

You can use Vesica without creating a named account. In this mode, we create an anonymous profile tied to your device fingerprint to prevent fraud and duplicate credit grants. Your uploads and results are stored in this anonymous profile until you delete it via Settings → Delete Account or by contacting support.

Payment & Transaction Data

Purchase receipts, transaction IDs, and credit balances are processed via the App Store / Google Play and RevenueCat. We never store full payment card numbers or CVV codes.

Headshot Uploads & Generated Images

Your uploaded photos and generated portraits are associated with your account (including anonymous profiles) so you can view and re download them. You can request permanent deletion at any time via Settings → Delete Account or by contacting support.

Usage & Feedback Data

We may collect preset selections, likes/dislikes, and run counts to improve quality. We also collect diagnostics, crash reports, and performance logs (e.g., via Expo and Firebase Crashlytics), and de-identified analytics events to understand feature usage and improve reliability.

Support & Communication

If you contact us via in-app support or email, we collect your message content and any attachments. Support tickets are retained until resolved and for up to 12 months thereafter for quality assurance.

2) Face Data Protection

Vesica does not perform facial recognition, biometric analysis, or feature mapping. AI providers process your images only for rendering and do not retain them after processing.

Vesica storage: Your uploads and generated portraits may be stored by Vesica as described above (for account features and session continuity). No facial templates or biometric identifiers are extracted, stored, sold, or shared.

3) How We Use Information

We use information to:
– provide, maintain, and improve the Service (e.g., apply presets, queue renders, deliver results);
– enforce usage limits, detect abuse, and secure accounts;
– communicate important updates, receipts, and support responses;
– personalize preset rankings, highlight new styles, and recommend relevant content;
– comply with legal obligations and respond to lawful requests.

We do not sell or share your personal information for cross-context behavioral advertising. We do not use third-party advertising SDKs.

4) Sharing & Disclosure

We may share limited data with:
– Service providers (e.g., Firebase, Google Cloud, Expo, RevenueCat, FAL AI) solely to operate authentication, storage, AI rendering, diagnostics, and payments;
– Analytics/diagnostics partners for aggregated performance metrics;
– Legal/safety authorities when required by law, court order, or to prevent fraud or security incidents;
– Business transfer counterparties (e.g., merger or acquisition), under appropriate confidentiality.

We do not allow providers to use your data for their own marketing.

Third-Party Services (illustrative list):
– FAL AI (portrait generation; images processed temporarily, not retained)
– Firebase (analytics, crash reporting, storage)
– Expo (build and update delivery)
– RevenueCat (in-app purchases)
– Google Cloud (secure infrastructure)
Additional AI providers may be integrated in the future under the same safeguards.

5) Data Retention

Account data, uploads, results, and sessions are retained while your account is active. If you request account deletion, we purge uploads, results, credits, tokens, and feedback within 30 days, retaining only minimal records required for fraud prevention or legal compliance. We do not currently auto- delete data after inactivity.

6) Security

We employ industry-standard safeguards, including HTTPS/TLS encryption, HMAC- authenticated preset catalogs, strict Firebase security rules, and monitored access controls. Although no system is 100% secure, we continuously monitor and remediate vulnerabilities. Please use a unique password, enable device security, and report suspicious activity promptly.

7) Your Rights & Choices

Depending on your jurisdiction, you may have the right to:
– access, correct, or delete personal data;
– request export of your portraits or account logs;
– withdraw consent for specific processing (e.g., marketing emails);
– lodge a complaint with your local data protection authority.
You can manage most preferences in-app (profile, notifications, Delete Account). For other requests, contact us using the details below.

8) Children’s Privacy

Vesica is not intended for users under 16 (or the age defined by applicable local law). We do not knowingly collect data from minors. If we learn that a child has provided personal data, we will delete it promptly.

9) International Transfers

We operate using global cloud infrastructure (including Google Cloud regions in the United States and Europe). By using the Service, you consent to the transfer and processing of your information in countries that may have different data-protection laws than your own. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

10) Changes to This Policy

We may update this Policy to reflect product, legal, or regulatory changes. When material updates occur, we will notify you via an in-app banner, email, or website notice. Continued use of the Service after changes become effective constitutes acceptance.

11) Contact Us

For questions, data requests, or privacy concerns:

Vesica Team
Email: hello@getvesica.com

For EU/UK users, you may also contact your local supervisory authority. We aim to respond to privacy inquiries within 30 days.

By continuing to use Vesica, you acknowledge that you have read, understood, and agreed to this Privacy Policy, and consent to the processing of your data as described herein.