Privacy Policy

Last updated: 2026-09-24

This policy explains what Studio AI does with your information. It covers the Studio AI mobile app and this website, both published by Better Life With Apps.

1. Your account

Studio AI has no email-and-password signup. We do not collect a name or an email address in order to let you use the app. An account is created anonymously from a hash derived from your installation of the app.

Against that account we store:

• a randomly generated user identifier (UUID);
• the installation hash the account was created from;
• your platform (iOS or Android), the app version, and your device's language and region setting (for example en-US);
• session tokens that keep you signed in on that installation;
• if you allow notifications, the push token that lets us tell you when your images are ready.

2. What stays on your device and what you send us

Your library stays on your device. The products you add (their photos, names, prices and previous prices, codes, categories, descriptions, details and stock), the images you save to them, your business profile (store name, phone and WhatsApp number, Instagram, website, email address, postal address and logo) and your catalogs, including the PDFs and page images you export, are kept only in the app's storage on your phone or tablet. None of it is sent to our servers, so we cannot see it and cannot restore it. When you share a catalog, it goes through your device's share sheet to the app and the people you choose.

What a run sends. Only when you start a run with one of the AI tools does the app upload anything: up to four photos of your product, together with the tool, the category, the scene, how strictly the product must be kept, and the number of images you asked for. The photos come from your camera or your photo library, only when you pick them.

Uploads are private by default. They are never publicly listed, and they are served only through short-lived signed links that expire.

3. AI processing

To make your images, the photos of the run and your choices are sent to OpenAI, which acts as a processor on our instructions and generates the images. Before the first photo is uploaded, the app asks for your permission and names OpenAI; nothing is uploaded until you allow it. You can withdraw that permission at any time under Settings → Privacy → AI processing. Under OpenAI's API terms, data sent through the API is not used to train its models, and OpenAI keeps abuse-monitoring logs of image requests for up to 30 days, unless the law requires it to keep them longer (OpenAI: your data).

The images a run produces are stored on our servers for 30 days (section 8), so that the app can fetch them and, once you subscribe, swap a preview for the clean image. The app keeps its own copy with your product on your device.

4. Purchases

Studio AI sells the Studio Pro subscription, weekly or yearly, through the Apple App Store and Google Play. Purchases are verified through RevenueCat. We store a billing identifier for your account, the state of your subscription, your credit balance and the history of credits added and spent.

We never see or store your card number.

5. Diagnostics and analytics

To find crashes, fix problems, deliver notifications and understand how the app is used, we use:

• Firebase Analytics — how the app is used: screens, taps, exports, purchases and a few properties such as which of our apps you are using. The events carry no text you type and none of your photos. Analytics is switched on by default outside the EEA and the UK. In the EEA and the UK it stays off until you switch it on under Settings → Privacy. On Android, while analytics is on, Firebase Analytics also reads the device's advertising ID. On iPhone it does not, and the app never asks for App Tracking Transparency permission. Google Analytics works out an approximate region and city from the connection's IP address; the app never asks for your location;
• Firebase Crashlytics — crash reports, without your user ID;
• Firebase Cloud Messaging — delivering the notification that your images are ready, if you allow notifications. The push token it issues is stored with your account (section 1);
• Firebase Remote Config — remote configuration of the app;
• Sentry — error reports from our servers, without your photos.

While analytics is on, the app also gives RevenueCat its Firebase Analytics instance ID, so that purchases can be matched to app usage in our own reports. When analytics is off, that link is cleared. Your analytics choice is stored only on your device.

In-app feedback (Wiredash)

The feedback form in the app is provided by Wiredash. Each time the app starts, at most once every 30 minutes, it checks in with Wiredash, whether or not you ever send feedback. The check-in carries a random identifier that Wiredash's code creates on your device, the app's version, build number and build commit, its bundle ID, whether it is a production or development build, your device's language setting, and your operating system and its version. The first time it runs, it also sends a one-off first-launch event. None of this includes your user ID, your photos or anything you have written. For this data, Wiredash's documentation says it works out your country from the connection's IP address and does not store the address (Wiredash: analytics privacy). We rely on our legitimate interest in operating the feedback form (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

When you choose Send feedback in the app's settings, the app sends Wiredash your message, your email address if you enter one, and a screenshot if you add one. You can draw on the screenshot before sending it; it shows whatever is on the screen at that moment, including your products, a catalog or your business details if they are on screen. With your feedback go device and app details (platform, operating-system version, device model, screen size, language setting, and the app's version and build) and details we add so that we can follow up: your user ID, the app's name, whether it is the production or development version, your subscription status and, when the app has already loaded it, your credit balance. We read your feedback in Wiredash to answer it and to fix the app. We do this at your request and in our legitimate interest in improving the app (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).

6. Where your data is stored

Our backend runs on a server we rent from Hetzner in Helsinki, Finland, inside the EU. The PostgreSQL database, the Redis queue and the private MinIO object storage that holds your run photos and generated images all run on that server. Your product library, catalogs and business profile are not stored there; they stay on your device.

Feedback you send from the app, and the feedback form's check-ins, are kept by Wiredash, not on our servers. Wiredash GmbH is based in Germany, but its privacy policy says that data may be transferred to the United States, processed there and stored on Google Cloud servers (Wiredash: privacy policy).

7. Who your data reaches

Besides the infrastructure above, your data reaches only the service providers we need to run Studio AI:

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

8. How long we keep things

• The photos of a run are kept until the newest run that uses them expires, 30 days after that run was started, and are then deleted from our storage. A photo that no run uses is deleted after 24 hours.
• The images a run produces are kept for 30 days after the run was started, and are then deleted from our storage. The copies the app saved with your products stay on your device.
• The choices you made for a run (tool, category, scene, how strictly the product is kept, number of images) stay in the record of that run for as long as your account exists. They are removed when you delete your account.
• Your push token is kept until you turn notifications off, the token stops working, or you delete your account.
• Your account record is kept for as long as the account exists.
• Purchase and credit records are kept after you delete your account, so that refunds and store disputes can still be settled. RevenueCat keeps its own record of your purchases.
• Your products, catalogs and business profile are never on our servers. They stay on your device until you remove them, clear the app's data, uninstall the app or use Delete my data.
• Feedback you send stays at Wiredash until it is deleted there. Deleting your account does not remove it; write to us if you want it removed.
• Records of visits to this website's /get page contain no IP address or identifier; the oldest file is deleted as the record grows.

9. Deleting your account

You can delete your account at any time in the app, under Settings → Your data → Delete my data. This also clears the products, catalogs, business profile and images the app keeps on your device. If you can no longer open the app, write to privacy@blwapps.com; the deletion page explains what to include. Deleting revokes your access immediately and queues a deletion request. After a short safety delay, the stored files, run inputs, push tokens, consent records and billing identity attached to your account are removed. What remains is a non-identifying tombstone record, the audit evidence that the deletion happened, records of your runs and files without the inputs or the files themselves, your purchase and credit records, and database backups for about two weeks. A documented legal hold can pause a deletion.

Full instructions, including what to do if you have already uninstalled the app, are on the account and data deletion page.

10. Your rights

Under the GDPR and the Turkish personal data protection law (KVKK), you can ask us to give you access to your personal data, correct it, erase it, restrict how we process it, hand it over in a portable form, or stop processing it altogether. Under the CCPA, we do not sell or share personal information.

To exercise any of these, write to privacy@blwapps.com. Because we do not ask for your name or email address when you use the app, please read the deletion page first — it explains what we need in order to find your record.

11. Children

Studio AI is not directed at children under 13, or under 16 in the European Economic Area, and we do not knowingly create accounts for them.

12. This website

This website is a set of static pages. It sets no cookies, runs no analytics or tracking scripts, and loads nothing from other websites. It is served from the same server in Helsinki as our backend.

When someone shares the app from its settings, the link they send opens this website's /get page and carries a ref tag naming where the link came from, such as app_share. The “Made with Studio AI” line in a free catalog links to the same page with the tag catalog_watermark. The page sends you on to the App Store, Google Play or this website's home page and passes the tag along. When /get is opened, our server records only the time, the website, the page address with its tag, and whether the page loaded: no IP address, no cookies, no device identifiers. We use these records to count how many visits share links bring. The App Store and Google Play may count installs that came through the tag in the statistics they give us.

13. Changes to this policy

When the app changes in a way that affects this policy, we update this page and change the date at the top.

14. Contact

Privacy questions and requests: privacy@blwapps.com
Everything else: support@blwapps.com