```html Privacy Policy — Lumpix

Privacy Policy

Last updated: April 30, 2026

1. Introduction

Lumpix ("Lumpix", "we", "us", or "our"), operated by Anton Karavaev, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (the "Services").

By using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.

2. Personal Data We Collect

2.1 Face Data Collection and Processing

Lumpix allows users to upload photos of their face to generate AI-powered personalized images. When you upload a photo, we process facial features, including biometric identifiers, solely to provide the functionality of the Services.

Purpose of Processing:

Generating AI-powered personalized images;
Allowing regeneration of images without re-uploading photos;
Providing access to previously generated images and history;
Improving personalization of results.

Face data is not used to identify individuals outside of the app functionality.

We do not use face data to train machine learning models.

Data Retention:

Face photos and associated biometric data are stored securely on our servers for a limited period of up to 30 days from upload. This retention period is necessary to provide core functionality such as regeneration, history access, and personalization.

Users may delete their face photos at any time within the app. Deleted data is removed from active systems immediately and permanently erased from our servers within a period not exceeding 30 days.

We do not retain face data indefinitely.

Data Sharing:

We do not sell, share, transfer, or disclose face data to any third parties. Face data is processed exclusively on our own servers.

We do not use third-party APIs or external services to process face data.

Third-party services used by the app (such as payment providers or analytics tools) do not receive access to face photos or biometric data.

2.2 Information You Provide Directly

Account information (name, email address, password);
Profile information (if provided);
Photos and selfies you upload;
Style preferences and prompts;
Customer support communications;
Payment information (processed by third-party providers).

2.3 Information Collected Automatically

Device information (IP address, device type, OS, app version).

2.4 Information from Third Parties

Authentication providers (Google, Apple);
Payment processors (e.g., RevenueCat);
Analytics tools (e.g., AppMetrica).

3. How We Use Your Information

To provide and maintain the Services;
To generate AI-powered images;
To personalize user experience;
To process payments and subscriptions;
To provide support;
To improve functionality;
To ensure security and prevent fraud;
To comply with legal obligations.

4. Data Retention

Account data is retained while your account is active;
Face data is retained for up to 30 days as described above;
Generated images are stored while your account is active;
Users may delete their data at any time.

After account deletion, all personal data is permanently deleted within 30 days unless required by law.

5. Data Security

We implement appropriate technical and organizational measures to protect your data. However, no system is completely secure.

6. Legal Bases for Processing (GDPR)

Contractual necessity;
User consent (for face data);
Legitimate interests;
Legal obligations.

7. Your Rights

Access your data;
Request deletion;
Correct inaccuracies;
Withdraw consent;
Object to processing;
Data portability.

8. Data Sharing

We do not sell your data. We do not share face data or biometric data with any third parties under any circumstances.

9. International Transfers

Data may be processed outside your country with appropriate safeguards.

10. Changes

We may update this policy. Continued use means acceptance.

11. Contact

Email: anton.dev363@gmail.com

Owner: Anton Karavaev

```