Privacy Policy
Effective: November 30, 2025
Introduction
PlaceX ("we", "us", "our") provides an app that helps users create stylized images of themselves placed in locations around the world. This policy explains what personal data we collect, why, how we use it, and who we share it with.
Data we collect
Account information: When you sign in with Apple, we receive your Apple ID identifier and optionally your name and email. Purpose: create and manage your account, link your purchases and credits.
App Transaction ID: We collect your device's unique App Transaction ID (generated by Apple's StoreKit) to link your account and purchases to your device credentials. Purpose: authenticate users, track subscriptions, restore purchases, and prevent fraud.
Photos: Images you select/upload for "Place Me Here!" and image generation. Purpose: to perform person extraction and generate AI-enhanced images.
Location (Precise): If you grant permission, we use your device location locally to show nearby places and center the map. We do not store your precise location data on our servers.
Device token (APNs): Stored to send you push notifications (e.g., credits, generation status).
Device attestation data: We use Apple's App Attest framework to create a cryptographic attestation of your device. Purpose: fraud prevention, enforce device limits, and distribute welcome credits fairly.
Support ID: A unique support identifier stored in your iCloud Key-Value Storage. Purpose: help our support team assist you efficiently.
iCloud Key-Value Storage: We store certain preferences and identifiers (Support ID, Adapty profile ID, App Transaction ID) in your iCloud account to sync your account status across devices.
Usage and analytics: We collect usage metrics and crash diagnostics to improve the app (third-party analytics via Adapty).
Purchases & subscription data: We record subscription status, purchase events, and credit grants with metadata to manage your account and credits properly (Adapty).
How we use and share data
Photos you upload are sent to our secure backend (Supabase Edge Function) and forwarded to external image generation services (FAL.ai) to create the final images. Input images may be temporarily retained by our AI provider for up to 1 hour, after which they are permanently deleted. We do not publish your original photos publicly.
Device tokens are stored to provide push notifications. You can disable notifications in your device settings.
We share necessary account and event data with: Supabase (backend), Adapty (subscriptions/analytics), FAL.ai (image generation).
We do not sell your personal data.
On-device processing
Person segmentation and image composition are done on-device using Apple Vision/CoreImage. The processed image is only uploaded when you explicitly request AI generation by tapping "Generate Image".
Retention and deletion
Local: Generated images are stored locally in the app's Core Data store until you manually delete them or delete your account.
iCloud: Support ID and preferences persist in your iCloud account even after app deletion. To remove, go to Settings → [Your Name] → iCloud → Manage Storage → PlaceX.
Server: We store profile data, device attestation keys, and device tokens in Supabase.
To delete your account and data, use the account deletion option in the app or contact help@mbefe.com.
Security
We use TLS for network transport. Server-side services are protected by Supabase authorization; edge functions validate device attestation using Apple's certificate chain.
Your rights
Access, correction, deletion: Contact help@mbefe.com.
Opt-out: You can disable push notifications from system settings.
Third-Party Depicted Individuals: If you believe your image has been uploaded without your consent, contact help@mbefe.com.
Children
Our service is not intended for children under 16, and we do not knowingly collect personal information from children under 16.
Changes to this policy
We may update this policy; material changes will be posted and, where required, you will be notified.
Contact
For privacy questions: help@mbefe.com
Operated by: Mustafa Batin Efe