Gen AI Studio — Privacy Policy

Effective date: 4 September 2026  ·  Last updated: 4 September 2026

Gen AI Studio turns the text prompts and reference images you provide into AI-generated images and videos. To do that, the content you submit is sent to third-party artificial intelligence providers who run the generation model you choose. This policy explains exactly what we collect, how we collect it, what we do with it, who receives it, and what control you have.

1. Who we are

This policy applies to the Gen AI Studio mobile application for iOS and to the backend service that supports it at genaistudio.showsapp.org.

The service is operated by the Gen AI Studio team ("we", "us", "our"), which is the data controller for the personal data described below.

2. What data we collect and how we collect it

2.1 Content you submit for generation

What: the text prompts you type, the images and videos you select, and the generation settings you choose (model, aspect ratio, duration, and similar parameters).

How: images and videos are only read after you explicitly pick them, one at a time, from your photo library or from the Files app using the standard iOS picker. We never scan, browse or index your photo library. We only receive the specific files you choose.

Important: once you start a generation, the files you selected are uploaded to our object storage and a link to each file is passed to the third-party AI provider that runs your selected model. See section 5.

2.2 Device and app information

Every request the app makes to our backend carries the following technical information in its HTTP headers:

2.3 Account information

Gen AI Studio uses anonymous guest accounts. An account is created automatically from the device identifier described above. We do not ask for and do not collect your name, email address, phone number, date of birth, or any social or Apple sign-in identity.

2.4 Purchase information

When you buy credits or a subscription, the purchase is processed by Apple. Our app sends our backend the App Store transaction identifier and the corresponding order number so that we can verify the purchase with Apple and credit your balance. We never receive or store your payment card details, billing address, or Apple Account credentials.

2.5 Generation history and credit ledger

Your generation tasks, the resulting images and videos, and your credit transactions are stored on our servers so that your library and balance are available when you return to the app.

3. What we do not collect

The app contains no third-party analytics, advertising, attribution or crash-reporting software development kits. Specifically, we do not collect:

• Advertising identifiers (IDFA) — the app does not request App Tracking Transparency permission because it does not track you
• Precise or coarse location data
• Contacts, calendars, reminders, or health and fitness data
• Your browsing or search history outside the app
• Any content from your photo library other than the specific files you pick for a generation

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

4. How we use your data

• To produce what you asked for. Your prompt, your selected files and your chosen settings are sent to the AI provider that runs your selected model, which returns the generated image or video.
• To maintain your account, credits and history, and to show you your past results.
• To process and verify purchases and to apply credits correctly.
• To operate, secure and debug the service, including preventing abuse and fraudulent use of credits.
• To comply with legal obligations and to respond to lawful requests.

We do not use your prompts, uploaded files or generated results to train our own models, and we do not use them for advertising or profiling.

5. Sharing with third-party AI providers

5.1 What is sent

• The text prompt you wrote
• The reference images or videos you selected, in the form of a link to the uploaded file
• The generation parameters you chose (aspect ratio, duration, resolution, and similar)

Your device identifier, device model, purchase information and credit balance are not sent to AI providers.

5.2 Who it is sent to

Your content is sent, through official commercial application programming interfaces, to the provider that operates the model you selected. Depending on which model you choose, that provider may be:

The model catalogue is managed on our servers and changes over time. The name of the model that will process your request is always shown in the app before you generate, and the current, complete list of models and their providers is available in the app's model picker. If we add a provider that is not listed above, we will update this policy before that provider becomes selectable.

5.3 Your permission

Before your content is sent to a third-party AI provider for the first time, the app tells you what will be sent and to whom, and asks you to agree. You can withdraw that agreement at any time in the app's settings; if you do, generation will stop working, because the service cannot produce results without sending your input to a model provider. Declining does not affect any other part of the app, and it does not delete content you have already created.

5.4 Protection at the provider

We only use providers that offer their models under commercial or enterprise API terms. We contractually require every AI provider we send your content to:

• to process it only to fulfil the generation request, and for no other purpose;
• not to use it to train or improve their models;
• to retain it only as long as needed to return the result and to meet their own abuse-monitoring obligations, and then delete it;
• to apply confidentiality, security and data-protection safeguards that are equivalent to those described in this policy.

Providers remain independent controllers for their own abuse detection and legal compliance. Their own policies are linked in the table above.

6. Other recipients

We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety and property of our users or of us. We do not otherwise sell, rent or share your data with third parties.

7. Storage, retention and deletion

• Uploaded reference files are retained for 7 days after the generation completes, then permanently deleted.
• Generated images and videos and their prompts are retained in your library until you delete them, or until your account is deleted.
• Account records, credit balance and purchase records are retained while your account exists. Purchase records may be kept longer where tax or accounting law requires it.
• Technical logs containing the device and app information in section 2.2 are retained for 7 days.

You can discard individual results in the app at any time. To delete your account and all data associated with it, contact us through the channel in section 13; we will complete the deletion within 30 days and confirm it to you.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict our processing of it, and to withdraw consent. You can exercise these rights by contacting us through the channel in section 13. We will not discriminate against you for exercising them.

Because accounts are anonymous, we may need you to make the request from the device holding the account in order to verify it. If we cannot identify your account, we may be unable to act on the request.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract with you (providing generation, accounts and purchases), your consent (sending your content to third-party AI providers), and our legitimate interests (security, abuse prevention, and service improvement). You may lodge a complaint with your local supervisory authority.

9. International transfers

Our servers, our storage provider and the AI providers listed in section 5.2 operate in several countries, including the United States, Singapore and China. When we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with additional technical and organisational measures.

10. Security

All communication between the app, our backend and our storage provider is encrypted in transit using TLS. Uploads use short-lived signed links that expire shortly after they are issued. Authentication tokens and the device identifier are stored in the iOS Keychain. Access to production systems is restricted to personnel who need it. No system can be guaranteed to be completely secure, but we work to protect your data using measures appropriate to its sensitivity.

11. Children

Gen AI Studio is not directed to children under 13 (or the higher minimum age that applies where you live), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us through the channel in section 13 and we will delete it.

12. Changes to this policy

We may update this policy as the service changes. When we make a material change — including adding a new category of recipient for your content — we will update the "Last updated" date above and notify you in the app before the change takes effect. Continuing to use the app after that means you accept the updated policy.

13. Contact us

For privacy questions, data requests or account deletion, use the support link on the Gen AI Studio product page on the App Store.

Because accounts are anonymous, please send your request from the device that holds the account, and include the date and approximate time of a recent generation so that we can locate it. We aim to respond to every request within 30 days.