FanCam 26 — Privacy Policy

Effective date: July 24, 2026

This Privacy Policy explains how your personal data is processed when you use the FanCam 26 mobile application (the "App"), operated by KaratSoft ("KaratSoft", "we", "us"). KaratSoft is the data controller. You can reach us at [email protected].

1. No Account Required

You do not need to create an account to use FanCam 26. The App links your credit balance and generated images to a randomly generated, anonymous identifier specific to your device. This identifier does not contain your name, email address, or identity.

2. Data We Process

Photos you upload: Processed solely to create the poster you request. Each photo first passes an automated content-safety check, is then used for image generation, and is permanently deleted from our servers as soon as generation completes. Photos that fail the safety check are deleted immediately as well. We do not perform facial recognition or identification on your photos, and we do not use your photos to train our own AI models. Your photo is uploaded only after you confirm the in-app consent notice shown before your first generation.
Generated posters: Stored on our servers, linked to your anonymous identifier, so they can appear in your in-app gallery. They are kept until you delete them or request deletion of your data.
Device and usage data: Anonymous device identifier, device model and OS version, app language, device-integrity tokens (Google Play Integrity / Apple DeviceCheck), credit balance and credit transaction records, and aggregated usage and crash statistics (Firebase Analytics).
Purchase data: Subscriptions and purchases are handled by the App Store / Google Play; receipts are validated through RevenueCat. Your payment card details never reach us.
Advertising data: The App currently shows no ads. If rewarded ads are enabled in a future version, they will be served through Google AdMob, which may process your device's advertising identifier; whether ads are personalized will depend on your operating-system settings and consent.
Notifications: If you grant permission, a Firebase Cloud Messaging token is stored so we can send you notifications.

3. Face Data

FanCam 26 does not collect biometric face data. We do not create faceprints, facial-geometry templates, or any other biometric identifiers, and we do not perform facial recognition or identification. The only face-related data we process is the photo you voluntarily select or take, which contains your face.

Collection: your photo is uploaded only when you tap Generate, and only after you have confirmed the in-app consent notice explaining this processing.
Use: the photo is used exclusively for two automated operations — an automated content-safety check and the generation of your fan poster. It is not used for advertising, profiling, identification, or to train AI models.
Storage: the photo is transmitted over an encrypted connection (HTTPS/TLS) and stored temporarily on our own servers, only for the duration of the generation process.
Sharing: to generate the poster, the photo is sent to our AI infrastructure providers, Google LLC (Gemini API) and fal.ai, which process it solely to fulfill the generation request and provide a level of data protection equivalent to this policy. It is never shared with anyone else, never sold, and never used for advertising.
Retention: the photo is deleted from our servers automatically and permanently as soon as generation completes — whether it succeeds or fails — typically within 1–2 minutes of upload. We keep no copy of the original photo. The generated poster (an AI-created artwork that includes your likeness) is stored in your private gallery until you delete it or request deletion of your data.
Deletion: you can delete your generated posters and all associated data at any time in the App via Settings → Account Settings → Delete Account, or by emailing [email protected].

4. Purposes and Legal Bases

We process your data to provide the service (performance of a contract), to keep our systems secure and prevent abuse (legitimate interest), and to show personalized ads and send notifications (consent).

5. Sharing Your Data

We do not sell your personal data. Data is shared only with the following service providers, and only to the extent necessary to provide the service:

Google LLC: image generation (Gemini API), analytics and notifications (Firebase), advertising (AdMob; no ads in the current version)
fal.ai: backup image-generation infrastructure
RevenueCat: purchase and subscription validation
Our hosting providers: server infrastructure

These providers process your photos and data solely to carry out the requested operation, and we only work with providers that offer a level of data protection equivalent to that described in this policy. Your photo is shared with the AI providers above only after you confirm the in-app consent notice. Some providers are located outside your country; where required, transfers take place with appropriate safeguards (such as standard contractual clauses).

6. Retention

Uploaded photos: deleted the moment generation completes.
Generated posters and credit records: kept until you delete them or request deletion.
Purchase records: kept as long as required by applicable law.
Analytics data: aggregated and de-identified.

7. Deleting Your Data

You can permanently delete your anonymous identifier, all generated posters, and associated data from within the App via Settings → Account Settings → Delete Account. You can also send a deletion request to [email protected].

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time. If you are in the European Union or United Kingdom, these rights are granted under the GDPR / UK GDPR, and you also have the right to lodge a complaint with your supervisory authority. To exercise your rights, contact [email protected].

9. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect data from them. If we become aware that data of a child under 13 has been processed, we will delete it promptly.

10. Security

Your data is encrypted in transit (HTTPS/TLS) and protected against unauthorized access with appropriate technical and organizational measures.

11. Changes

Material changes to this policy will be published on this page with an updated effective date.

12. Contact

KaratSoft — [email protected] — karatsoft.uk