Privacy Policy

This Privacy Policy describes how VIONYX TECHNOLOGY JOINT STOCK COMPANY ("we", "us", "our", or "PixoraAI") collects, uses, stores, discloses, and protects information when you use the PixoraAI mobile application and related services (the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account information: email address, display name, profile picture (if you sign in via Google, Apple, or Facebook).
• User content: photos, images, prompts, and any content you upload or generate using the Service.
• Communications: messages you send when contacting our support team.
• Purchase information: subscription status and transaction IDs (handled by Apple App Store / Google Play; we do not receive your full payment card details).

1.2 Information Collected Automatically

• Device information: device model, operating system version, language, timezone, unique device identifiers, and crash logs.
• Usage data: features used, time spent, button taps, and frequency of use, collected via analytics SDKs.
• Advertising identifiers: IDFA (iOS) / GAID (Android) used by ad networks, only with your consent where required by law.
• Log data: IP address, request timestamps, and error logs collected when you interact with our servers.

2. How We Use Your Information

• To provide, operate, and maintain the Service and its AI editing features.
• To process photos and generate AI-edited results that you request.
• To authenticate users and manage accounts.
• To process subscriptions, in-app purchases, and prevent fraud.
• To improve product quality, fix bugs, and develop new features.
• To display relevant in-app advertisements and measure ad performance.
• To send service-related notifications and respond to support requests.
• To comply with applicable laws and protect our legal rights.

We do not use your photos or content to train AI models.

3. Third-Party Services

We rely on trusted third-party providers to deliver the Service. Each provider has its own privacy policy:

• Authentication: Google Sign-In, Apple Sign-In, Facebook Login.
• Cloud infrastructure & storage: Amazon Web Services, Google Cloud, Cloudflare R2.
• AI processing: third-party AI APIs (e.g., OpenAI, Replicate, fal.ai) for image generation and editing.
• Analytics: Firebase Analytics, Google Analytics, AppsFlyer.
• Crash reporting: Firebase Crashlytics, Sentry.
• Advertising: Google AdMob, Meta Audience Network.
• Payments: Apple App Store, Google Play Billing, RevenueCat.

These providers process data only as needed to perform their functions and are contractually required to safeguard your information.

4. Data Sharing & Disclosure

We do not sell your personal data. We share information only in these cases:

• Service providers: to operate the Service, as described in Section 3.
• Legal requirements: to comply with court orders, subpoenas, or government requests.
• Protection of rights: to prevent fraud, abuse, or threats to users or the public.
• Business transfers: in the event of a merger, acquisition, or asset sale, with notice to affected users.
• With your consent: when you explicitly authorize us to share information.

5. Data Storage & Retention

• Photos you upload for processing are stored on secure cloud servers and automatically deleted after a maximum of 30 days, unless required for an active subscription feature.
• Account information is retained while your account is active.
• If you delete your account, we erase your personal data within 30 days, except where retention is required by law or for legitimate business records (e.g., transaction records).
• Aggregated, anonymized analytics may be retained indefinitely.

6. Data Security

We use industry-standard measures to protect your data, including:

• HTTPS/TLS encryption for data in transit.
• Encryption at rest for stored photos and credentials.
• Access controls and audit logging.
• Regular security reviews and dependency updates.

No system is 100% secure. If we detect a breach affecting your data, we will notify you and the relevant authorities as required by law.

7. Your Rights

Depending on your jurisdiction (including GDPR for EU/EEA and CCPA for California residents), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data — see our Data Deletion Instructions.
• Restrict or object to certain processing.
• Export your data in a portable format.
• Withdraw consent for marketing communications.
• Lodge a complaint with a data protection authority.

To exercise these rights, email us at vionyxtechnologies@gmail.com.

8. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States, Singapore, and Vietnam. We rely on standard contractual safeguards to protect cross-border transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the app or via email. Your continued use of the Service after changes take effect constitutes acceptance.

11. Contact Us

For privacy questions, requests, or complaints, contact us at: