Prismy

Privacy Policy

Effective date: August 5, 2026
Last updated: August 5, 2026
App: Prismy (photo & video creation and editing)
Controller: Prismy (“Prismy,” “we,” “us,” or “our”)
Contact: support@moonlenses.com

Important — AI & user data. Prismy may use on-device and/or cloud AI features (including third-party AI products, services, models, SDKs, and APIs) to process content you submit (such as photos, videos, prompts, and related metadata). Even when we use third-party AI technology, we remain responsible for the overall compliance of personal and sensitive user data collected and processed through the app, including Google Play User Data policy requirements (limited use, clear & conspicuous disclosure, and legally required consent) and applicable Apple App Store / Apple privacy requirements.

1. Summary

This Privacy Policy explains what information we collect when you use the Prismy mobile application and related websites/services (the “Services”), how we use it, when we share it, and the choices you have.

  • Prismy offers account login. We collect account information, device data, advertising identifiers, content you upload for processing, prompts, usage analytics, and purchase/subscription data as needed to operate the Service.
  • Photos and videos you submit (including images that may contain faces) may be processed for generation, retouch, fusion, enhance, erase, expand, restore, style, or photo-to-video features.
  • AI processing may use models and APIs from ByteDance, Google, and OpenAI (and related cloud infrastructure). We remain responsible for compliance of data handling in the app.
  • We do not store generated outputs in a content database for long-term retention, and we do not use your content to train our own models.
  • We use Adjust, AppsFlyer, and Firebase for analytics and related measurement. We do not use Apple App Tracking Transparency (ATT) tracking across apps and websites for advertising.
  • We do not collect approximate location derived for profiling, contacts, or your address book.

2. Scope & roles

This Policy applies to Prismy on Google Play, the Apple App Store (when available), and our official website (including this Privacy Policy and Terms of Service pages).

For purposes of this Policy, Prismy is the party responsible for the Services and for personal data processed through the app. Contact us at support@moonlenses.com.

If your developer account or corporate registration uses a different incorporated company name, that registered legal entity should be listed as controller on store listings and this Policy for consistency with Google Play and Apple requirements.

3. Data we collect

Depending on how you use Prismy, we may collect:

3.1 Account & identity data

Prismy supports account login. When you register or sign in, we may collect:

  • Account identifiers (e.g., user ID, email, display name)
  • Authentication credentials or tokens provided by the sign-in method you choose
  • Profile and account settings
  • Customer support messages you send us

3.2 Content you provide (User Content)

  • Photos, videos, and images you upload, capture, or import for a feature
  • Text prompts, style selections, edit parameters, and generation settings
  • Face and likeness information contained in media you submit, when needed for the feature you request (including image fusion / blending of user images with generated or styled results)

3.3 Device, app, and advertising identifiers

  • Device type, OS version, app version, language, time zone
  • Advertising identifiers (e.g., Google Advertising ID / Apple IDFA where available and permitted by the platform), used with our analytics partners as described in Section 8
  • IP address as needed for security, fraud prevention, and service delivery
  • Crash logs, performance metrics, and diagnostics
  • Feature usage events (e.g., which tools you open, success/failure of a job)

3.4 Purchases, credits & subscriptions

  • Purchase history, subscription status, credit balance, and transaction identifiers processed via Apple App Store / Google Play billing
  • We do not receive your full payment card number; payments are handled by the applicable store

3.5 Permissions

Prismy may request access to your photo library or camera to provide features you initiate. You can deny or revoke permissions in system settings; some features will then be unavailable.

4. Data we do not collect

We do not collect or use:

  • Approximate or precise location for profiling or marketing maps
  • Contacts or address-book data
  • App Tracking Transparency (ATT) “tracking” as defined by Apple (i.e., we do not track you across other companies’ apps and websites for advertising purposes under ATT)

5. AI features & third-party AI components

Developer responsibility. All third-party AI components integrated in Prismy (including related products, services, SDKs, APIs, and code) must comply with Google Play User Data policy requirements—including limited use, clear & conspicuous disclosure, and legally required consent. Prismy remains ultimately responsible for the compliance of personal and sensitive data collection and processing in the app, regardless of whether processing is performed by Prismy or a third-party AI provider.

5.1 What AI features may process

When you use AI-powered features (examples):

  • Photo / video generation from prompts and reference images
  • Image fusion / blending using your uploaded images
  • Photo-to-video / animate stills
  • Smart Retouch and beauty/portrait enhancement
  • Erase, Expand, Enhance, Restore, Style / cinematic looks
  • Optional prompt assistance or “AI Enhance” for inputs

These features may process User Content and related metadata on device and/or on servers operated by us or our subprocessors for the duration needed to complete your request.

5.2 AI model providers

To deliver AI features, we may transmit User Content to subprocessors that provide model inference. Our AI model providers include:

  • ByteDance — generative / media model services
  • Google — generative / media model services
  • OpenAI — generative / media model services

We require these providers (and related infrastructure vendors) to process personal data only to provide the requested inference, under appropriate contractual and security terms. We do not authorize use of your User Content to train our own models, and we do not use generated results to build a long-term content library.

5.3 Other service providers

  • Analytics & measurement: Adjust, AppsFlyer, Firebase (Google)
  • Cloud infrastructure that may support job delivery, APIs, or crash/performance telemetry as configured in the app

5.4 Automated decision-making

AI outputs are generative/assistive. They are not used to make legal or similarly significant decisions about you (such as credit, employment, or insurance eligibility).

6. Face imagery & image fusion

Many Prismy features work with portraits and other photos that may include human faces. When you use features such as retouch, enhance, restore, style, photo-to-video, or image fusion (combining your uploaded image with model-generated or styled imagery), we (and our AI providers) may process visual information that relates to faces—for example detecting face regions, landmarks, or appearance cues needed to align, blend, or edit the image.

  • This processing is performed to provide the feature you request, not to identify you across unrelated apps or to build a face recognition identity database.
  • We do not use face imagery to train our own models.
  • We do not keep generated outputs in a long-term content database after processing completes (see Section 11).
  • Where law or platform policy treats certain face-related processing as biometric or sensitive data, we provide in-app disclosure and obtain any required consent before processing begins.

7. How we use data (limited use)

Consistent with Google Play’s User Data policy limited-use requirements for personal and sensitive user data (and analogous Apple expectations), we use collected data to:

  • Provide, operate, maintain, and improve the specific features you request
  • Create and maintain your account and authenticate sign-in
  • Process generations/edits, deliver results to your device, and manage credits
  • Authenticate users, prevent fraud/abuse, enforce Terms, and secure the Services
  • Measure product performance and attribution via Adjust, AppsFlyer, and Firebase
  • Provide customer support and respond to requests
  • Send transactional notices (e.g., purchase receipts, security alerts)
  • Comply with law, platform policies, and lawful requests

We do not sell your personal information. We do not use uploaded photos/videos for third-party display advertising creatives. We do not use User Content to train our own AI models.

8. Analytics & advertising identifiers

We use the following analytics and measurement partners to understand installs, engagement, feature performance, and campaign effectiveness:

  • Adjust
  • AppsFlyer
  • Firebase (including analytics / related Google services as configured)

These partners may receive device information, advertising identifiers, IP address, app events, and attribution data. Their processing is governed by their own privacy policies and our agreements with them.

You can reset or limit advertising identifiers in your device settings (e.g., Android “Delete advertising ID” / limit ad tracking controls; iOS settings related to personalized ads). We do not request Apple ATT permission for cross-app tracking.

Before Prismy accesses or transmits personal/sensitive user data for AI processing (including photos that may contain faces, and image fusion workflows), we provide an in-app disclosure that:

  • Explains what data is accessed/transmitted (e.g., selected photos, prompts)
  • Explains the purpose (e.g., generate video, retouch, fuse images, erase object)
  • Identifies that processing may involve cloud AI providers such as ByteDance, Google, and OpenAI, where material to user understanding
  • Links to this Privacy Policy
  • Requests affirmative consent where required by law or platform policy

You may withdraw consent by stopping use of the relevant feature, adjusting permissions, deleting your account, or contacting support@moonlenses.com. Withdrawal does not affect processing already lawfully completed.

10. Sharing & processors

We may share personal data with:

  • AI model providers: ByteDance, Google, OpenAI (for inference needed to fulfill your request)
  • Analytics partners: Adjust, AppsFlyer, Firebase
  • Platform operators: Apple, Google (distribution, billing, abuse reporting, policy enforcement)
  • Legal & safety: if required by law, to protect rights, safety, or integrity of users/Services, or in connection with a corporate transaction (with notice where required)
  • With your direction: e.g., if you export/share content to another app or social network

We do not share User Content with other users by default. Public sharing only occurs if you choose to post or export content outside Prismy.

11. Retention

  • User Content submitted for AI jobs: retained only as long as needed to complete processing, deliver the result to your device, troubleshoot failures, and prevent abuse—then deleted from our active processing systems according to our job lifecycle.
  • Generated outputs: we do not store generated content in a long-term content database. Results are delivered for you to save locally; we do not keep a permanent cloud library of your creations.
  • Model training: we do not retain or use User Content or outputs to train our own models.
  • Account data: retained while your account is active and for a reasonable period afterward for legal, tax, dispute, and security purposes.
  • Purchase and credit records: retained as required by accounting/tax law and store rules. Credits do not expire under our current product rules (see Terms of Service).
  • Analytics events: retained according to Adjust, AppsFlyer, and Firebase configurations and our operational needs, typically in aggregated or pseudonymous form where feasible.
  • Backups: may persist for a limited period in encrypted backups before deletion cycles complete.

You may request account deletion as described in Section 13.

12. Security

We implement administrative, technical, and organizational measures designed to protect personal data, such as encryption in transit (TLS), access controls, least-privilege internal access, and vendor security review. No method of transmission or storage is 100% secure; residual risk remains.

If we become aware of a data breach affecting your personal data, we will notify you and/or regulators as required by applicable law.

13. Your rights & choices

Depending on your location, you may have rights to:

  • Access / know what personal data we hold
  • Correct inaccurate data
  • Delete personal data / erase account
  • Portability of data you provided
  • Object to or restrict certain processing
  • Withdraw consent
  • Limit use of advertising identifiers via device settings

In-app controls: manage account settings, save or discard results on your device, manage photo/camera permissions in iOS/Android settings, manage subscriptions in the applicable store, and request account deletion via in-app account settings or by emailing support@moonlenses.com.

We will verify requests as required and respond within the timelines set by applicable law (e.g., GDPR/CCPA/CPRA). You may also lodge a complaint with your local supervisory authority.

14. Children

Prismy is not directed to children under 13 (or the minimum age required in your country, which may be 16 in parts of the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact support@moonlenses.com and we will take appropriate steps to delete it. AI generation features must not be used to create sexualized content involving minors; such use is prohibited and may be reported.

15. International transfers

We and our providers (including ByteDance, Google, OpenAI, Adjust, AppsFlyer, and Firebase) may process and store data in the United States, the European Union, and other countries where we or they operate. Where required, we use appropriate transfer mechanisms (such as Standard Contractual Clauses) and supplementary measures.

16. Google Play & Apple disclosures

16.1 Google Play Data safety & User Data policy

Our Google Play Data safety form is intended to accurately reflect collection, sharing, security practices, and deletion pathways described here, including:

  • Account login data
  • Photos/videos and face-containing imagery processed for AI features
  • Advertising ID
  • Analytics via Adjust, AppsFlyer, and Firebase
  • Sharing with AI providers (ByteDance, Google, OpenAI) for inference
  • Limited use; in-app disclosure and consent where required
  • Developer responsibility for third-party AI components

16.2 Apple App Privacy (Nutrition Labels) & App Store Review

Apple App Privacy labels disclose data linked to you / not linked / used for tracking. Prismy does not use ATT tracking across third-party apps for advertising. Permission strings explain why photos/camera access is requested. Account deletion is available where account creation is offered, consistent with App Store requirements.

16.3 Legal bases (EEA/UK/Switzerland)

Where GDPR/UK GDPR applies, we rely on:

  • Contract — to provide the Services you request (including account and purchases)
  • Consent — for certain AI processing of photos/face imagery and where otherwise required
  • Legitimate interests — security, fraud prevention, product analytics with appropriate balancing
  • Legal obligation — compliance with law

17. Changes

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes affecting AI processing or sensitive data uses, provide additional in-app or email notice and obtain renewed consent where required.

18. Contact

Privacy and support requests:
Email: support@moonlenses.com
App: Prismy

For store submission, align this Policy with your Google Play Data safety form and Apple Privacy Nutrition Labels. If you later register a corporate entity name distinct from the Prismy brand, update the controller field to that registered legal name.