ViralPix

Privacy Policy

Effective date: October 7, 2026 · Last updated: October 7, 2026

In short:

We don't ask you to create an account, and we don't collect your email, phone number or location. If you choose to share your name, we keep it only to greet you.
The photo you choose is processed only to create the image and is not stored on our server.
The images you create stay on your device.
We don't show ads, don't use the advertising identifier and don't use third-party tracking or analytics tools.
We send notifications only if you allow them, and you can delete your profile data from the App at any time.
We don't sell your data.

1. Who we are

This policy applies to the ViralPix mobile app (the "App") and related services provided by ViralPix Team ("we", "us"). ViralPix Team is the data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"). You can reach us at info@viralpixapp.com.

2. What data we process

a) The photo you choose

When you create an image with a template, the photo you choose is resized on your device and sent to our server over an encrypted connection. Our server forwards the photo, together with the template's instructions, to Google's Gemini AI service to generate the image. The photo is held temporarily in memory while it is being processed and is not saved on our server. Your photo may contain a face, but we do not perform facial recognition or biometric identification and do not create biometric templates from it.

b) The images you create

The generated image is sent straight to your device and kept only on your device in the App's "Gallery". We don't keep a copy on our server. If you tap Save, the image is added to your photo library with your permission.

c) Anonymous device identifier

When the App first opens, it creates a random identifier and stores it in your device's secure keychain. We use it to count your daily free credits and to link your Pro subscription to your device. It is not the advertising identifier (IDFA) and does not identify you personally.

d) Usage records

For each image request we record the device identifier, the template used, the time and whether it succeeded. We use these records to enforce daily limits, fix errors and prevent abuse.

e) Subscription information

Purchases and payments are handled entirely by Apple; your card details never reach us. To activate Pro, we verify the transaction information signed by Apple (such as the product, transaction ID and subscription expiry date) and store the expiry date together with your device identifier.

f) Profile and preferences

The information you share on the welcome screens (your optional name, the style categories you're interested in and what you plan to use the App for), together with your language, time zone and app version, is stored on our server with your anonymous device identifier. We use it to greet you by name, highlight styles that suit you and choose notifications you may find interesting.

g) Notifications

If you allow notifications, Google's Firebase Cloud Messaging creates a notification identifier (token) so we can deliver notifications to your device. We store this token and whether notifications are enabled with your device identifier. To send notifications by language and interest, your device is also subscribed to Firebase topics that reflect your language and interests (e.g. "lang_en", "interest_trend"). You can turn notifications off at any time in your iPhone Settings.

h) Technical data

Our server and hosting provider may keep standard server logs such as IP address and request time to operate the service securely. The App also sends your device's language preference so content is shown in the right language.

What we don't collect

We don't collect your email address, phone number, location, contacts or advertising identifier. The App contains no ads and no third-party analytics or tracking tools, and we don't track you across apps or websites.

3. Why we process data

To provide the service (creating images from your photo, managing daily credits and subscriptions): performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).
Processing your photo with the AI service: the explicit consent you give in the App before your first creation (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can withdraw consent by stopping use of the App and asking us to delete your records.
Personalization (greeting you by name, ordering styles by your interests): performance of a contract and legitimate interests (KVKK Art. 5/2-c, f; GDPR Art. 6(1)(b), (f)). Sharing your name is entirely optional.
Notifications: the explicit consent you give on the iOS notification permission prompt (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can withdraw it at any time in your iPhone Settings.
Security and abuse prevention (blocking fraudulent purchases, protecting limits): legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
Legal obligations: retention and reporting duties required by law (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)).

Google (Gemini API): Your photo and the template instructions are sent to Google to generate the image. Google processes this content under the Gemini API Additional Terms of Service and the Google Privacy Policy. For paid Gemini API services, Google states that it does not use submitted content to improve its products and may retain it only for a limited period to detect abuse and meet legal requirements. Generated images include Google's invisible SynthID watermark.
Google (Firebase Cloud Messaging): If you allow notifications, your notification token and topic subscriptions are processed by Google Firebase to deliver notifications to your device, under the Firebase privacy and security terms. Notification content may include your name.
Our hosting provider: The infrastructure provider that runs our server may technically access the data needed to operate the service.
Apple: Subscriptions are managed by Apple, which processes purchase data under its own privacy policy.
Authorities: Only when legally required.

We don't sell, rent or share your personal data for advertising.

5. International transfers

Servers operated by Google and our service providers may be located outside Turkey and outside your country. Your photo is transferred to these servers to generate the image. This transfer relies on the explicit consent you give on the App's consent screen and on the safeguards provided under KVKK Art. 9 and the relevant provisions of the GDPR.

6. Retention

Your photo: Not stored on our server; it exists only in temporary memory while being processed.
Images you create: Only on your device; delete them in Gallery or delete the App to remove them all.
Profile information and notification token: Until you delete them with "Delete my data" in the App or ask us to delete them. The notification token is removed automatically when the App is deleted or the token becomes invalid.
Device identifier, usage records and subscription expiry: Kept for as long as needed to provide the service, enforce limits and prevent abuse; then deleted or anonymized.
Server logs: For a limited period in line with our hosting provider's security practices.

7. Your rights

Under KVKK Art. 11 and, where applicable, the GDPR, you have the right to know whether your data is processed, to request information, rectification and erasure, to object to processing, to learn who your data has been transferred to and to seek compensation for damages. If the GDPR applies to you, you also have the right to data portability and to lodge a complaint with your supervisory authority.

Send your requests to info@viralpixapp.com. Because we don't use accounts, we may ask for some additional information to match your request to the right records. We respond within 30 days. You can delete your profile information (your name, interests and notification registration) yourself at any time in the App under Settings → Delete my data. You can delete the images and Gallery on your device at any time by deleting the App.

8. Security

All communication between the App and our server uses encrypted (HTTPS) connections. Purchases are activated only after verifying Apple's digital signature. No system is completely risk-free, but we take reasonable technical and organizational measures to protect your data.

9. Children

The App is not directed to children under 13, and we do not knowingly process data of children under 13. If you are under 18, use the App with the permission of a parent or legal guardian. If you believe we have processed a child's data, please contact us.

10. Changes

We may update this policy from time to time. The current version is always published on this page and the date at the top will change. We will also announce significant changes in the App.

11. Contact

For any privacy questions or requests: info@viralpixapp.com
ViralPix Team