Quick summary
| Topic | Highlights |
|---|---|
| Data we collect | Firebase Authentication IDs, optional emails, board details, uploaded/selfie photos, AI prompts and outputs, subscription metadata, analytics and diagnostics, notification preferences, and any feedback you submit. |
| Why we collect it | To create and sync boards, run AI transformations via our Cloudflare → Fal.ai proxy, verify subscriptions, secure the service, improve product quality, and comply with legal requirements. |
| How we share it | With processors that keep VisionBoard AI running: Google Firebase (auth, Firestore, Storage, analytics), Cloudflare (secure routing), Fal.ai (AI inference), Apple (payments), and limited support tooling. We never sell personal data or use your content for advertising or training unrelated AI models. |
| Your choices | Manage boards and media inside the app, revoke camera/photo permissions, control notifications, cancel purchases through Apple, delete your account in Settings → Delete Account, or email visionboardai@livegreen.io with privacy requests. |
| Regional rights | We honor GDPR/UK GDPR, PIPEDA, the Australian Privacy Principles, CCPA/CPRA, and similar laws. You can access, correct, delete, restrict, object to, or port your data. |
1. Data we collect
Account and identifiers
- Anonymous Firebase Authentication UID (created automatically on first launch).
- Linked provider metadata if you connect Apple or email later (provider ID, hashed identifiers, optional email).
- Subscription state stored in Firestore (tier, renewal status, App Store transaction IDs, expiration dates, App Account Token, environment).
Vision board content
- Category metadata (names, icons, colors, ordering, public/private flags) stored in Firestore.
- Board stats (image counts, generated image counts) associated with your UID.
- Optional captions you add to board images.
Photos, wardrobe items, and AI prompts
- Images and selfies you upload from the camera or photo library, stored in Firebase Storage under user-scoped folders.
- Upload metadata (resolution, size, storage path) stored alongside the board image entry.
- AI prompts, persona references, wardrobe selections, and generated image URLs saved so you can revisit creations.
- Temporary cached copies kept on-device to keep scrolling smooth.
AI processing telemetry
When you request an AI task, our Cloudflare Worker verifies your Firebase token, strips sensitive parameters from logs, and forwards the prompt plus signed download URLs to Fal.ai. We log request IDs, model choice, and non-sensitive status data to debug failures. Fal.ai receives only the assets required to fulfill your request.
Device and usage data
- App version, build number, OS version, device model, locale, and feature interaction analytics via Firebase Analytics (when enabled).
- Limited per-user event logs stored in Firestore (event name, timestamps, app/device metadata, and optional sanitized parameters) to help debug issues and improve reliability.
- Structured OSLog diagnostics (AppLogger) stored locally on your device for troubleshooting.
- Notification authorization status so we know whether to schedule local reminders.
Feedback & support
- Feedback forms and rating-prompt messages (including selected reasons, timestamps, app version).
- Emails you send to visionboardai@livegreen.io.
Compliance records
- Account-deletion audit logs (request timestamps, deletion counts) retained for limited periods.
- Subscription receipts and tax documentation required by law.
We do not collect precise GPS location, contacts, calendars, SMS, microphone audio, or motion sensor data.
2. How we use your data
| Purpose | Details | Legal basis* |
|---|---|---|
| Provide and maintain the app | Authenticate you, sync boards, store uploads, run AI tasks, show history, and send local completion notifications. | Contractual necessity / legitimate interests |
| Subscription management | Verify App Store receipts, maintain entitlement status, and assist with support tickets or refunds. | Contractual necessity / legitimate interests |
| Safety and security | Detect abuse, enforce usage limits, prevent fraud, and comply with law-enforcement requests. | Legitimate interests / legal obligation |
| Product analytics and quality | Measure feature adoption, paywall conversions, and generation reliability to improve the experience. | Legitimate interests; consent where required |
| Customer support & communications | Respond to feedback, notify you of policy changes, and process privacy rights requests. | Legitimate interests / legal obligation |
*For EU/UK users, lawful bases follow GDPR Article 6. For Canada (PIPEDA) and Australia (APPs), we collect only what is reasonably necessary and rely on consent where required.
We never use your personal photos or prompts to train unrelated AI models and we do not run advertising trackers.
3. How we share information
- Google Firebase / Google Cloud – Authentication, Firestore, Storage, Hosting, and Analytics store your data in the United States under strong encryption and access controls.
- Cloudflare & Fal.ai – A Cloudflare Worker proxies AI tasks to Fal.ai. Fal.ai receives your prompt and signed image URLs solely to create the requested output and returns the result.
- Apple – Manages billing, renewals, refunds, and fraud checks. We receive transaction IDs and renewal states from Apple’s APIs.
- Support tooling – Email you send to us is processed by Google Workspace and any ticketing system we may use in the future.
- Regulators or law enforcement – Only when required to comply with applicable law or protect rights.
We may publish aggregated, de-identified statistics (e.g., “total boards created”) that cannot be tied back to you.
4. International transfers
VisionBoard AI operates from the United States. When transferring data from the EU/EEA, UK, Switzerland, Canada, or Australia to the U.S. or other jurisdictions, we rely on contractual transfer safeguards (such as the EU Standard Contractual Clauses and the UK Addendum/IDTA, as applicable), encryption in transit and at rest, and strict access controls. You can contact us for copies of the relevant safeguards.
5. Data retention
- Boards, photos, wardrobe items, prompts, and generated images – stored until you delete them or close your account.
- Account data – kept while your account is active; deleted immediately when you trigger the in-app Delete Account control.
- Subscription and tax records – retained for up to 7 years to satisfy financial laws.
- Analytics/diagnostics – pseudonymized and aggregated within 24 months.
- Support and feedback – retained up to 24 months unless you request earlier deletion, except where required for legal claims.
6. Your rights and choices
In-app controls
- Delete any board, photo, wardrobe item, or generated image directly inside the app.
- Use Settings → Actions → Delete Account to remove all Firestore data, Storage objects, and the Firebase Auth record.
- Manage notifications in iOS Settings → Notifications → VisionBoard AI.
- Change camera/photo permissions in iOS Settings → Privacy & Security.
Privacy requests
Email visionboardai@livegreen.io with “Privacy Request” to access, correct, delete, restrict, object to, or export your data, or to opt out of analytics collection.
We verify your identity via your Firebase UID or the Apple ID tied to your subscription. Authorized agents for California residents must provide written permission.
Regional specifics
- EU/EEA & UK – Rights under GDPR Articles 15–22. Contact your local supervisory authority if unresolved (in the UK, the Information Commissioner’s Office).
- Canada (PIPEDA) – Request access or correction at any time; escalate to the Office of the Privacy Commissioner if needed.
- Australia (APPs) – Contact the Office of the Australian Information Commissioner (OAIC) for unresolved complaints.
- United States / California – We do not sell or share personal information. Exercise CCPA/CPRA rights to know, access, delete, or correct via the contact above.
7. Security
- TLS for all network traffic plus Firebase-managed encryption at rest.
- Role-based access controls and least-privilege Firebase rules.
- Automated monitoring for abuse and anomalous API access.
- Content moderation and abuse throttles to protect the platform.
- Documented incident response plans and regular dependency updates.
No system is perfect. If a breach risks your rights, we will notify affected users and regulators as required.
8. Children’s privacy
VisionBoard AI is not directed to children under 13 (or the age of digital consent in your region). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it.
9. Changes to this policy
We will update this page when our practices change. Material updates will be announced in-app or via email before they take effect. Continuing to use VisionBoard AI after an update means you accept the revised policy.
10. Contact us
VisionBoard AI (Brian De Souza)
United States
Email: visionboardai@livegreen.io