Privacy Policy

Last updated 12 June 2026

This policy covers what WonderLens ("we", "us") collects when you use the WonderLens app, and what we do with it. Using the app means you're okay with what's described here.

What we collect

• Photos you upload. When you make a portrait, the photo you choose is processed to create the result. That's the only thing it's used for.
• Account details. If you sign in with Apple or Google, we get a unique ID and, if you allow it, your email. We never see your password.
• Usage and device data. We use analytics (Google Firebase) to see which features get used and where things break, along with basic device identifiers.
• Purchases. Apple handles payment. We're told whether your subscription is active, but we don't see your card details.
• Notification tokens. If you turn on notifications, we keep a device token so we can let you know when a portrait is ready.

What we do with it

• Make and deliver your portraits.
• Keep the app running and improve it over time.
• Handle your account, credits, and subscription.
• Send the notifications you asked for.
• Spot and stop fraud, abuse, or technical problems.

Who processes your images

Your portraits are generated by our AI provider (OpenAI) and stored on our backend (Supabase). They handle this data for us so the app can do its job. We don't sell your personal data, and your photos are not used to train AI models.

Keeping and deleting data

We hold on to your creations and account details while your account is active, so your gallery is there when you come back. You can delete your account and its data anytime from inside the app, or by writing to [email protected]. Once you delete, your data is removed from our active systems within a reasonable time, apart from anything we're legally required to keep.

Your choices

• Turn notifications on or off in your device settings.
• Ask to see, correct, or delete your data.
• Depending on where you live, you may have rights under the GDPR, CCPA, or similar laws.

Children

WonderLens isn't meant for children under 13, or under whatever the minimum age is where you live. We don't knowingly collect data from children. If you think a child has sent us something, let us know and we'll remove it.

Security

We use encrypted connections (HTTPS) and access controls to protect your data. No system is perfectly secure, so we can't promise it's impossible for anything to go wrong, but we take it seriously.

Updates

This policy can change. When it does, the date at the top changes too, and we'll flag anything significant in the app.

Get in touch

Questions about your data or this policy? Email [email protected].