Privacy Policy

Last updated: September 1, 2026

This Privacy Policy explains how Mahendra (“we”, “us”, or “our”) collects, uses, and shares information when you use the AI Sticker Pack mobile application and related websites (together, the “Service”), including ai-sticker-maker-firebase.web.app.

1. Information we collect

Depending on how you use the Service, we may collect:

• Account information — When you sign in with Google or Apple, we receive identifiers and profile details those providers share with us (such as name, email, and a stable account ID), processed via Supabase Authentication.
• Prompts and generated content — Text themes you submit to generate sticker packs, and the resulting sticker images created for you.
• Reference photos (may include faces) — If you choose Photo mode, you may take a camera photo or pick an image from your library to use as a reference for sticker generation. These photos may depict people, including faces. We do not collect Face ID, TrueDepth, facial geometry, or other biometric face templates. See Section 4. Face data and photos of people.
• Purchase and credit data — Purchase status, credit balances, and related transaction metadata processed through Apple App Store / Google Play billing and RevenueCat. We do not receive your full payment card details.
• Device and usage data — App version, device type/OS, crash diagnostics, and basic interaction events needed to operate and improve the Service.
• Support communications — Messages you send to mstudiothoughts@gmail.com.

2. How we use information

• Create and secure your account
• Generate sticker packs from your prompts and optional reference photos using Google Vertex AI (Gemini) image models
• Format and export packs to WhatsApp at your request
• Manage free packs, credits, purchases, and restore flows
• Provide customer support and respond to feedback
• Maintain security, prevent abuse, and improve reliability
• Comply with legal obligations

3. AI processing and Google Vertex AI

When you create stickers, your request is sent over HTTPS to our secure generation backend. That backend then sends the generation input to Google Vertex AI (Google’s Gemini image generation models) so Google can produce the sticker artwork. Google is a named third-party AI service that processes this data on our behalf to fulfill the request you start.

What is sent to Google Vertex AI:

• Text prompts — the theme or description you enter, together with our layout instructions for a 25-sticker sheet (for example, grid size and style).
• Optional reference photos — if you use Photo mode, the single image you take or pick (which may include a person’s face, a pet, or an object) is sent as image data for that generation request.

We do not send your name, email address, account ID, or device identifiers to Google Vertex AI as part of the generation request. Sign-in, account identity, and credit spending are handled on our backend. Google receives only the prompt and optional photo needed to create the image.

The original reference photo is used only for that generation request and is not saved in our databases. Do not include sensitive personal data in prompts or photos that you would not want processed for image generation. Generated stickers are provided for your personal use in messaging apps.

Google is expected to provide the same or equal protection of this data as described in this Privacy Policy. Google’s processing is also governed by Google’s own terms and privacy notices, including the Google Cloud Privacy Notice and the Google Privacy Policy.

Before your first sticker generation, the app asks you to allow sending this prompt and optional photo data to Google Vertex AI. Generation does not run until you allow it. Sign-in screens also link to this Privacy Policy and the License Agreement (the app’s terms of use).

4. Face data and photos of people

This section explains how AI Sticker Pack handles photos that may contain a person’s face. It is the complete description of our collection, use, sharing, storage, retention, and deletion practices for this data.

What we do not collect

The app does not collect Face ID, Touch ID, TrueDepth, ARKit face geometry, facial mapping, face landmarks, iris or retina scans, or any other biometric template used to uniquely identify or authenticate a person. There is no Face ID permission, and we do not use the camera for identity verification or biometric login.

What face data we collect

The only “face data” the app may process is an ordinary photograph that you voluntarily provide. In Photo mode you may (1) take a new photo with the camera or (2) choose an existing image from your photo library. That image is cropped and compressed on your device and used as a reference photo so the AI can generate a 25-sticker pack that resembles the person, pet, or object in the picture. If the photo includes a human face, that likeness is used only as visual reference for sticker artwork — not as biometric identification.

Providing a photo is optional. You can generate packs from a text theme alone. We do not scan your photo library, and we only receive the single image you select.

Planned use

• Generate a sticker sheet whose subject matches the person, animal, or object in your reference photo (identity-preserving image-to-image generation).
• Optionally keep a copy of the reference photo on your device only so you can generate additional packs without picking the photo again. You can remove that on-device copy in the app at any time.
• Store the generated sticker images (which may depict a likeness of the subject) in your private pack history so you can reopen, export, or delete them.

We do not use reference photos or generated likenesses for advertising, analytics profiling, user identification, Face ID-style authentication, training our own AI models, or any purpose other than creating and delivering your sticker packs.

Sharing with third parties

Original reference photos are shared only as needed to complete a generation request you start:

• Our generation backend — a secure server we operate. The photo is sent over HTTPS as part of the authenticated request and is held in memory only for that request.
• Google Vertex AI (Gemini) — Google’s third-party AI image generation service. It receives your text prompt and, if you attached one, the reference photo, solely to produce the sticker sheet for that request. Google processes this as a service provider to fulfill generation. We do not sell photos, and we do not share them for advertising. Google is expected to provide the same or equal protection of this data as described in this Privacy Policy. See Section 3 and the Google Cloud Privacy Notice.
• Supabase — stores your account and the generated sticker-pack images (not the original camera/library photo) in private, access-controlled storage associated with your user ID.
• WhatsApp — only if you tap export. Then the generated sticker images you approve (not the original reference photo, unless you separately share it yourself) are passed to WhatsApp’s sticker import mechanism.

We do not sell face data or photos. RevenueCat, Apple, and Google Play receive purchase metadata only — not photos. Sign-in providers (Google and Apple) are not sent your reference photos.

Where this information is stored

• Original reference photo: processed in memory on our generation backend and by Google Vertex AI during the generation request. We do not write the original photo to our databases or object storage. A copy may remain in the app’s private documents folder on your device until you remove it or uninstall the app.
• Generated sticker images (which may show a person’s face in photorealistic or stylized form): stored in private Supabase Storage (cloud infrastructure operated by Supabase / underlying cloud providers) under your account path, and may also be cached on your device for preview and export.

How long face data is retained

• Original reference photos on our servers: not retained after the generation request completes. They exist on the server only for the seconds or minutes needed to complete generation and return the result.
• Original reference photos on your device: until you remove the photo in the app, clear app data, or uninstall.
• Generated sticker images in pack history: until you delete that pack in the app or delete your account.

Deletion

• Remove the reference photo in Photo mode to delete the on-device copy.
• Delete individual packs from history to remove those generated images from your account storage.
• Delete your account in Settings → Delete account (see Delete Account). That removes your profile and associated sticker-pack history records. Original reference photos are not kept on our servers.
• Email mstudiothoughts@gmail.com to request deletion if you cannot use the in-app controls.

5. How we share information

We share information only as needed to operate the Service:

• Service providers — Supabase (authentication, account data, and generated pack history); our generation backend and Google Vertex AI / Gemini (generation: text prompts and optional reference photos for the current request only); RevenueCat, the Apple App Store, and Google Play (purchases); and our website hosting provider.
• WhatsApp export — When you choose “Send to WhatsApp,” sticker images and pack metadata you approve are shared with WhatsApp via the platform’s sticker import mechanism.
• Legal — If required by law, regulation, or valid legal process, or to protect the rights, safety, and integrity of users and Mahendra.

We do not sell your personal information.

6. Data retention

We retain account and credit information while your account is active and as needed for billing, support, and legal compliance. Generated packs stored in your account history (and any copies cached on your device) remain until you delete them or uninstall the app. Original reference photos are not stored on our servers after generation; see Section 4 for photo and face-data retention. Server-side logs and generation request metadata (without the photo itself) are retained only as long as reasonably necessary for security and operations.

If you delete your account, we remove your auth user and profile-linked data as described on our Delete Account page. We may retain a limited record of a deleted account’s email solely to prevent reuse of free signup credits.

7. Security

We use industry-standard safeguards including encrypted transport (HTTPS/TLS), authenticated API access for generation, and Supabase Authentication for sign-in. No method of transmission or storage is 100% secure; please protect your device and account credentials.

8. Children’s privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

9. Your choices and rights

• Sign out from the app at any time
• Clear recent pack history from Settings (where available)
• Permanently delete your account from Settings → Delete account (see Delete Account for steps and what is removed)
• Request access, correction, or deletion of account-related data by emailing support
• Manage App Store / Play Store purchases and subscription-adjacent billing settings in your store account

Depending on where you live, you may have additional rights under applicable privacy laws. Contact us to exercise them.

10. International transfers

We may process information in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

11. Third-party services

The Service links to or integrates with third parties (Google Sign-In, Google Vertex AI / Gemini, Apple, WhatsApp, RevenueCat, Supabase). Their privacy practices are governed by their own policies. For Google Vertex AI, see the Google Cloud Privacy Notice. Please review those policies before using their services.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.

13. Contact

Questions about privacy?
Email: mstudiothoughts@gmail.com
Website: https://ai-sticker-maker-firebase.web.app