Privacy Policy

This policy covers the xPic (Pictra on Google Play) mobile app and this page. It does not cover other Horus Studios products, which have their own policies.

Horus Studios is the data controller. Reach us at hello@horusstudios.com.

• Account and contact information: email address, display name, and, if you use Sign in with Apple or Sign in with Google, the identifier Apple or Google returns to us.
• Content you provide: the photos and videos you choose as references for a generation — picked from your photo library or taken with the camera inside the app — including images that contain a face.
• Content you create: prompts, generated images and videos, saved characters, identity-lock settings and style preferences.
• Generation records: which model ran, when, what it cost in tokens, and whether it succeeded.
• Purchase information: your subscription and token-pack entitlements, as reported to us by Adapty and by the App Store or Google Play. We never see your payment card, Apple ID or Google account credentials.
• Device information: a push notification token, app language, and basic device and app version data needed to deliver a working app.
• Optional connections: if you connect your own AI provider key (fal.ai, EachLabs, Hugging Face or Wiro) or a TikTok account, we store those credentials encrypted.

• To run the generations you request and return the results to your Library.
• To keep your account, balance, entitlements and settings working.
• To send you notifications you have opted into.
• To detect abuse and to keep the service secure and available.
• To meet legal and accounting obligations.

We do not sell personal information, we show no third-party advertising, and we run no third-party analytics or tracking SDKs.

5.1 Face data we collect

The only face data xPic (Pictra on Google Play) collects is the photo or video you choose to provide as a reference for a face swap, portrait or video generation — either picked from your photo library or taken with the camera from inside the app. xPic / Pictra does not create, derive or store faceprints, face templates, face geometry, face embeddings or any other biometric identifier, and it never uses face recognition to identify or verify a person. Nothing is captured in the background: the camera opens only when you tap “Take photo”, and a face image is uploaded only after you explicitly choose it for a generation.

5.2 How face data is used and shared

Your uploaded face image is used to produce the AI output you requested and to screen it against our content rules. It is sent over an encrypted connection through a private link that expires after 10 minutes to Wiro or EachLabs for AI image and video generation, including face swap and video composition through EachLabs. OpenAI GPT vision models reached through Wiro read a reference photo when you ask xPic / Pictra to suggest a prompt and screen images against our content rules. We do not sell face data, do not use it for advertising or profiling, do not use it to train our own or any provider's models, and do not share it with anyone else.

5.3 Where face data is stored and how long we keep it

Uploaded face images and generated outputs are stored in a private, per-account Supabase storage bucket protected by row-level access policies; they are never publicly accessible. We keep them only so your own library stays available to you. You can delete any uploaded reference or output at any time from the Library screen, and deleting your account permanently erases all of your stored images and generation records from our systems. Residual copies in encrypted backups are overwritten within 30 days, as explained in Account and data deletion below.

Prompts and selected media are sent to Wiro or EachLabs for AI image and video generation, including face swap and video composition through EachLabs. OpenAI GPT vision models reached through Wiro read reference photos you submit for analysis, write carousel copy and screen images against our content rules. xPic (Pictra on Google Play) asks for your explicit permission before the first job and never sends anything until you grant it; you can withdraw that permission at any time from the profile screen, which blocks all further sending. Connected provider keys and TikTok tokens are encrypted in Supabase Vault and are never displayed back to the app.

The AI services that receive your content are:

Before you can create anything, xPic / Pictra shows a full-screen disclosure naming each recipient above and stating exactly what each one receives. Nothing is sent until you tap "I agree — send my content to these services". There is no pre-selected checkbox, and declining leaves the account unable to generate. Consent is recorded against your account and enforced on our servers, not only in the app: every generation passes through a single database function that refuses the job when consent is absent. Consent is versioned, so if we ever add a recipient we ask you again rather than relying on your earlier answer. To withdraw, open Profile > Permissions and withdraw your AI processing permission; withdrawal takes effect immediately and blocks all further sending until you grant permission again.

Each provider is bound by contract to protections equivalent to those in this policy: your content is processed only to fulfil your request, is not sold, is not used for advertising or profiling, and is not used to train their models.

Every request passes three server-side checks: the prompt is filtered, any photo you upload is screened before it is sent to a generation model, and the generated result is screened again before it is stored in your Library. Requests involving minors, nudity, graphic violence or non-consensual imagery are refused by design and cost no tokens. Screening is performed by the OpenAI GPT vision model reached through Wiro, on our servers; results that fail screening are discarded and never stored.

• Supabase — database, authentication, private file storage and backend functions
• Wiro — AI image and video generation
• EachLabs — AI image and video generation, including face swap and video composition
• OpenAI — GPT vision models reached through Wiro, used to read a reference photo you submit for analysis, to write carousel copy, and to screen images against our content rules
• Adapty — subscription and purchase validation, paywalls, entitlements
• Apple — App Store purchases, Sign in with Apple, push delivery on iOS
• Google — Google Play purchases and push delivery on Android
• Expo — push notification delivery
• TikTok — only if you connect a TikTok account, and only to publish the posts you explicitly choose to publish
• fal.ai, Hugging Face and other providers — only if you connect your own API key for them in Profile > Permissions, and only for the generations you then run with that key

xPic (Pictra on Google Play) contains no advertising, no ad identifiers and no third-party analytics or tracking SDKs. We do not track you across other companies' apps or websites.

• Photo library: needed to let you pick reference images and to save results back to your library. Both iOS and Android offer a limited selection instead of granting full access, and the app works with the limited selection.
• Camera: optional; used only when you choose “Take photo” to shoot a picture for a generation instead of picking one from your library. The app never opens the camera on its own, and declining still leaves every library-based feature working.
• Notifications: optional; used to tell you a generation has finished.

You can change any of these permissions at any time in iOS Settings or Android system settings.

We keep your account data, uploaded references and outputs for as long as your account exists, so your Library stays available to you. You can delete any individual item from the Library screen at any time. Deleting your account from Profile > Account & security > Danger zone > Delete account, then confirming twice, immediately erases your stored files, generation records and connected credentials from our systems. Billing event records are kept with the account identifier removed for accounting and fraud prevention. Residual copies in encrypted backups are overwritten within 30 days. Full details follow in Account and data deletion.

Delete your account immediately in the app

To delete your account: open the app, go to the Profile tab, tap "Account & security", scroll to the Danger zone and tap "Delete account", then confirm twice. Deletion runs immediately and does not require contacting us.

If you cannot open the app, email hello@horusstudios.com from the address on the account; verified requests are completed within 30 days.

What is deleted

Your profile and display name, your sign-in record and email address, every generation and its prompt, every reference photo or video you uploaded including any face image, every generated image and video, your characters, carousels and batch jobs, your token wallet and credit history, your subscription records, your push notification tokens, any connected provider key and any TikTok connection, and all of your files in our private storage are deleted.

What is kept

Billing event records are kept with the account identifier removed, so they can no longer be linked to you, for accounting and fraud prevention. Purchase records held by Apple or Google belong to them and are governed by their own policies. Residual copies in encrypted backups are overwritten within 30 days.

Delete data without deleting your account

You can also delete data without deleting your account: delete any item from the Library tab, and in Profile > Permissions you can delete a cloned character, disconnect a provider key or TikTok account, and withdraw your AI processing permission.

Guest use

A guest studio has no account; its tokens, characters and gallery live on that device under an anonymous session, and "Discard guest studio" in Profile removes it permanently.

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Write to hello@horusstudios.com and we will respond within the period the applicable law requires. You can also complain to your local data protection authority.

Our providers may process data outside your country, including in the United States. Where that happens, transfers rely on the safeguards permitted by applicable law, such as the European Commission's standard contractual clauses.

Private files are served only through signed, expiring links. Access is restricted per account by database and storage policies. Connected provider keys and TikTok tokens are encrypted at rest and never displayed back to the app. No system is perfectly secure, but we work to keep the surface small.

xPic (Pictra on Google Play) is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, write to hello@horusstudios.com and we will delete it.

We will update this page when our practices change, and we will change the "Last updated" date above. Material changes will be announced in the app.

Horus Studios — hello@horusstudios.com