Pixel Potion · Privacy
Privacy policy
Pixel Potion turns your photos and ideas into images and short videos with AI. This policy explains what we collect, why, who processes it, how long we keep it and how to delete it. There's no account, no tracking and no advertising.
In short
- We process the photos and prompts you send, an anonymous app user ID and your credit purchases, only to run the app.
- Photos and prompts are sent to third-party AI providers to create your results. You're asked to agree before your first one.
- Uploaded photos and results are deleted after 1 year (365 days).
- You can delete everything at any time in the app: Me → Account → Delete my data.
- No ads, no tracking, no analytics SDKs, no selling of data.
Who we are
Pixel Potion is operated by Midego, the Netherlands ("we", "us"). We are the controller of the personal data described here. Contact: support@midego.net.
What we collect and why
| Data | Why |
|---|---|
| Photos you upload (resized to at most 2048 px; photo metadata such as location is removed in the app before upload) | To create the result you asked for. |
| Prompts and settings (the text you type, the tool, style and format you choose) | To create the result and to show your history. |
| Results (the images and videos created for you) | To deliver them to you and keep your history. |
| Anonymous app user ID created by RevenueCat on your device (no name, email or phone number) | To link your credits and history to your device, and to check that requests come from a real installation. |
| Purchases and credits (which credit pack you bought, the store transaction ID, credits spent, refunded and remaining) | To add the credits you paid for, keep your balance correct, refund failed creations, and for our accounting. |
| Technical data (IP address, request times, error details) | To deliver and secure the service and to limit abuse (rate limits). We don't store IP addresses in our database. |
We don't ask for your name, email address, contacts or location, and we don't build profiles. Notifications that tell you a result is ready are created on your device; we don't collect push tokens. If you email us, we use your email only to answer you.
Legal bases (GDPR): performing our agreement with you (creating results, credits), our legitimate interests (security, preventing fraud and abuse) and legal obligations (accounting records).
Who processes your data
We use these service providers ("processors"). They receive only what they need for their task:
- Cloudflare runs our servers and stores your photos, results and history (Workers, D1, R2).
- RevenueCat handles in-app purchases and creates the anonymous app user ID. Payments themselves are processed by Apple.
- Replicate and KieAI run the AI models. Depending on the tool you pick, they pass your photo and prompt to the company that makes the model: Google (Nano Banana, Veo), Black Forest Labs (FLUX), ByteDance (Seedream), Kuaishou (Kling) and Topaz Labs (Upscale Pro). Background removal and Upscale run on open-source models hosted by Replicate.
- Anthropic powers Magic Prompt: when you use it, the text you typed (and, for "describe", the photo) is sent to Anthropic to suggest a better prompt. We don't store Magic Prompt requests.
These providers process data under their own terms and may keep it for a limited time for safety and abuse monitoring. Some of them process data outside the European Economic Area, including in the United States and Asia; where required, transfers rely on safeguards such as the EU Standard Contractual Clauses.
Safety
Prompts are checked automatically before they are sent, and the AI providers apply their own safety filters to photos, prompts and results. Prompts asking for sexual content, nudity, sexual content involving minors or graphic violence are refused. You can report a result from its menu in the app (Report result); we review reports sent to support@midego.net.
Authorized staff may review generations, including uploaded photos, for quality and abuse handling. Access is limited to named staff accounts and every staff action is logged. Copies made to test the quality of our AI tools are deleted together with the original, when you delete it or your data, or when it expires.
How long we keep it
| Data | Kept |
|---|---|
| Uploaded photos | Deleted automatically 1 year (365 days) after you create a result with them. |
| Results (images, videos) | Deleted from our servers automatically 1 year (365 days) after they were created. The app keeps its own copy on your device until you delete it or clear it in Me → Storage. |
| History (tool, prompt, settings, status, dates) | Until you delete the item, or delete your data. |
| Anonymous app user ID | Until you delete your data. |
| Credit records (purchases, credits spent and refunded, balance) | Kept after "Delete my data" for as long as we need them for accounting and tax obligations (in the Netherlands generally 7 years) and to prevent abuse of refunds. |
| Magic Prompt daily usage counter | Removed automatically after two days. |
| Technical logs | A short period (currently up to 7 days). |
Deleting your data
In the app, go to Me → Account → Delete my data. This permanently deletes your uploaded photos, results, prompts, history and your anonymous user record from our servers, and clears the app's data on your device. (A new user record is created only if you use the app again.) It's available once nothing is still being created. Files are removed from our storage right away; a background job re-checks and removes anything left over within an hour. What stays: the credit records described above, so your remaining credits and purchase history stay correct. Purchase records held by Apple and RevenueCat are governed by their own privacy policies.
You can also email support@midego.net with your user ID (Me → Account → Copy user ID) and we'll delete it for you, including asking RevenueCat to delete its customer record. Deleting the app alone does not delete data on our servers.
Your rights
You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing it, and ask for a copy in a portable format. Email support@midego.net with your user ID. You can also complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
Children
Pixel Potion is not meant for children under 13. If you are under 16 (or the age of digital consent in your country), use it only with permission from a parent or guardian. Only upload photos of other people, and especially of children, if you have the right to do so.
Security
All traffic is encrypted (HTTPS). Files are stored under a pseudonymous key, never under your user ID, and are only reachable through short-lived signed links. Access to our systems is limited to what is needed to run the service.
Changes
We'll update this page when our practices change and show the date below. Important changes will also be announced in the app.