Effective date: August 4, 2026

Privacy, with
intention.

This policy applies to Prismy’s website, mobile applications, and related online services (the “Services”). It explains the information we collect, why we collect it, and the choices you have.

Our privacy principles

We identify the information we collect and seek consent where required. We limit collection to what is reasonably needed, use and disclose it only for identified purposes, protect it with appropriate safeguards, and aim to be transparent and responsive when you exercise your rights.

1. Where this Privacy Policy applies

This policy covers our websites, mobile apps, cloud-hosted features, marketing pages, support interactions, and other Services we operate.

2. Information we collect

We collect information you provide, information generated through use of the Services, and limited information from third parties.

2.1 Information you provide directly

This includes contact and account details; subscription and billing references; prompts; uploaded images, video, audio, documents, attachments, and related metadata; and preferences such as language, notifications, and feature settings.

2.2 Information we collect automatically

We collect usage information such as features used, clicks, session duration, referral URLs, and error reports; device and environment information such as device type, operating system, browser, IP address, and diagnostic data; and identifiers such as cookies, local-storage tokens, and software identifiers.

2.3 Information from your device with permission

With your permission, Prismy may access your camera or photo library for images you choose to submit, files or storage for selected imports and exports, and the microphone only when you use a voice feature that needs it. You may revoke permissions in your device settings.

2.4 Information from third parties

We may receive transaction status, limited billing details, and fraud signals from payment processors, or basic profile information from an identity provider if you choose to use one.

3. Cookies and similar technologies

We use cookies, pixels, local storage, session tokens, and similar technologies to authenticate sessions, remember preferences, measure traffic and feature use, and support security. Aggregate analytics may be used to understand product trends.

4. Payments and billing data

Payments are handled by PCI-compliant third-party processors, including app-store billing where applicable. Prismy does not store full card numbers or CVV/CVC codes. We may retain transaction references, subscription status, billing history, and tax information where needed.

5. How we use information

5.1 Provide and improve the Services

We create and maintain accounts, deliver image and video creation features, process submitted content through our AI and media pipelines, manage purchases, provide transactional messages, troubleshoot reliability, and develop new features.

5.2 Safety, security, and integrity

We use information to detect and address fraud, abuse, spam, malware, credential attacks, and violations of our Terms or policies.

5.3 Photos, media, and sensitive processing

Where photos or videos contain faces or similar characteristics, we process them only to deliver the feature you choose, such as styling, retouching, segmentation, or animation. We apply minimization and retention limits and do not sell biometric templates derived from uploads.

5.4 AI processing and model improvement

We do not use private prompts or confidential uploads to train unrelated public-facing models in a way that links output to your identity unless we clearly disclose it and obtain any required consent. We may use aggregated, de-identified, or anonymized information to assess quality and reliability.

6. How we share information

6.1 Third-party AI services

To provide requested AI generation and media features, Prismy may send the minimum necessary prompts, selected uploads, and relevant metadata to third-party AI providers. We request affirmative permission in the app where required and require appropriate privacy and security protections from providers.

6.2 Service providers (processors)

We use vendors for hosting, content delivery, databases, security, email, analytics, payments, support, and AI infrastructure. They act on our instructions and under confidentiality and security obligations.

6.3 Business transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

6.4 Legal and safety

We may disclose information where reasonably necessary to comply with law, protect safety, investigate fraud, or protect our rights. We do not sell personal information for monetary consideration.

7. Cross-border data transfers

We may process and store information in the United States and other countries where Prismy or its providers operate, using safeguards required by applicable law.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal information. To submit a request, contact us below.

9. How we protect your information

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

10. Data retention

Retention varies by data category and legal requirement. Account information is generally kept while an account remains active; content submitted for AI processing is retained only as long as needed to provide the relevant feature.

11. Children’s privacy

Prismy is not directed to children under 13, or the minimum age required in your jurisdiction. We do not knowingly collect personal information from children without appropriate consent where required.

12. Changes to this Privacy Policy

We may update this policy from time to time. When we do, we will revise the effective date and provide additional notice where required.

13. How to contact us

For questions about this policy or our privacy practices, email support@moonlenses.com.