Privacy Policy
Effective October 30, 2026
The short version: there's no account, your photo is never saved, your render is deleted within 24 hours, and no one trains AI on your pictures.
This policy explains what the Digibae iPhone app and this website collect, why, who else handles it, and how long we keep it. "Digibae", "we" and "us" mean Digibae, which makes the app. If you have a question, email support@getdigibae.com.
What Digibae does with your photo
When you ask for an AI render, this is what happens to the selfie you chose:
- The app sends the photo to our server, which runs on Cloudflare. The server holds it in memory only for the length of the request. It's never written to disk, a database or our logs.
- Our server sends the photo, with instructions for the look you picked, to Google's Gemini API, which creates the render. Google is the only AI provider that receives your photo. We also use Gemini to check photos and renders for nudity, sexual content and gore, and Google's own safety filters check every request.
- The finished render is stored in private Cloudflare storage so the app can download it through a link that works for 10 minutes. It's deleted automatically within 24 hours.
- Once the app has the render, it's on your phone, and you decide whether to save or share it.
No training. We never use your photos or renders to train or improve AI models. We use Gemini under Google's paid service terms, which say Google doesn't use what we send to improve its products. Google may keep requests for a limited time to detect abuse, as described in Gemini API terms.
No face recognition. We don't create face prints or any biometric identifiers, and we don't try to identify who is in a photo.
The free photo editor (grain, flash, date stamp and crop) works entirely on your phone. Photos you edit there aren't sent anywhere.
Information we collect
| What | Why | How long |
|---|---|---|
| An install ID: a random code the app creates the first time it opens | To keep track of your free renders, credits and subscription without an account | As long as you use Digibae. It stays in your phone's Keychain |
| A record of each render: render ID, install ID, look, status, attempt number and times. Never the image | To make sure you're charged once per render and refunded when a render fails | About 31 days |
| Render outcome statistics: look, model, success or failure, reason and time taken | To find and fix looks that fail. These records don't include your install ID or any image | Up to 90 days |
| A scrambled form of your IP address (a one-way hash) | To limit how many requests one network can make in a minute and stop abuse | About 1 hour. We never store the IP address itself |
| Apple App Attest data | To confirm requests come from a genuine copy of the app on a real iPhone | As long as you use Digibae |
| Purchases and credit balances | To unlock what you paid for and restore it | As long as you use Digibae, and longer where tax or accounting law requires |
We don't ask for your name, email, phone number, contacts or location. We don't show ads, sell your information or share it for advertising, and we don't track you across other companies' apps or websites.
The app doesn't include third-party analytics today. If we add usage analytics, we'll update this policy first and won't include photos or renders in it.
Companies that handle information for us
- Google (Gemini API) creates renders and checks images for unsafe content. It receives your photo and the render.
- Cloudflare runs our server, stores renders for up to 24 hours, keeps the render records above, and hosts this website.
- Apple processes payments and provides App Attest. We never see your payment card details.
- RevenueCat keeps track of your subscription and credit balance. It receives your install ID and your App Store purchase history for Digibae. SeeRevenueCat's privacy policy.
These companies may only use the information to provide their service to us. We may also disclose information if the law requires it, to protect people's safety, or as part of selling or reorganizing the business, in which case this policy will still apply to it.
This website
This website doesn't use cookies, analytics or ad trackers, and the fonts are served from our own domain. Cloudflare processes visitors' IP addresses and request details to deliver the site and protect it from attacks. If you follow a link with campaign tags (for example from TikTok), the website passes the campaign name to the App Store link so Apple can count downloads from that campaign.
Your choices and rights
- Photos. Digibae uses Apple's photo picker, so it only ever sees the photos you pick, not your library. It asks for camera access to take a selfie and for permission to add photos when you save a render. You can change both any time in Settings › Privacy & Security.
- Deleting your data. Renders delete themselves within 24 hours. To delete the rest, emailsupport@getdigibae.com. Because Digibae has no accounts, we can only find your records by your install ID or an App Store order ID, so we'll reply with how to send us one. Deleting the app doesn't remove the install ID from your phone's Keychain, so your free render count stays the same if you reinstall.
- Access and correction. Depending on where you live (for example the EU, UK or California), you may have the right to ask for a copy of your data, to correct or delete it, to object to how we use it, or to complain to your data protection authority. Email us and we'll answer within 30 days. We don't sell or share personal information as those laws define it.
Where the GDPR applies, we process photos to perform our contract with you (making the render you asked for), and the other information above for our legitimate interests in running, securing and preventing abuse of the service. Our providers may process data outside your country, including in the United States, under safeguards such as the EU Standard Contractual Clauses.
Age requirements
Digibae is for people aged 18 and over. Anyone under 18 may not use the app, even with a parent's or guardian's permission. We don't knowingly collect personal information from users under18.
Security
Everything between the app and our server is encrypted. Render links are signed and expire after 10 minutes, and our storage isn't public. No system is perfectly secure, but we keep as little as possible for as short a time as possible.
Changes
If we change this policy, we'll post the new version here with a new effective date. If a change affects how we handle your photos, we'll also tell you in the app or on this site before it takes effect.
Contact
Questions, requests or complaints: support@getdigibae.com.