This privacy policy applies to the Aesthiq app for mobile devices, together with any related services operated by Dineth Panagoda (collectively, the "Application"). Dineth Panagoda is hereby referred to as the "Service Provider".
Information Collection and Use
The Application collects information when you download and use it. This information may include:
- Your device's Internet Protocol (IP) address
- The screens of the Application you view, the features you use, and the time, date, and duration of your activity
- Your mobile device type and the operating system you use
- A randomly generated, anonymous user identifier used to associate your activity, subscription status, and edits with your installation of the Application. This identifier is not linked to your name or email address.
- Your subscription and purchase status
- Crash reports and performance diagnostics
- Photographs that you choose to upload, and any style reference images you select, in order to generate edited images
The Application uses anonymous authentication. It does not require you to create an account or to provide your name or email address in order to use its core features.
Cookies and tracking technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. The Application uses first-party analytics tied to the anonymous user identifier described above; it does not track you across other companies' apps or websites and does not use the device advertising identifier (IDFA). Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at dineth@aesthiq.app.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell your personal information. To exercise your CCPA/CPRA rights, contact the Service Provider at dineth@aesthiq.app.
Artificial Intelligence
The Application uses artificial intelligence (AI) to create edited versions of your photographs. When you request an edit, the photograph you provide — together with any style reference image and processing instructions — is transmitted to Google's Gemini API, which generates the edited image and returns it to the Application. This processing is necessary to provide the core functionality of the Application.
Your photographs are sent to Google solely to perform the requested edit. The Service Provider does not retain your original photographs on its servers beyond what is necessary to process your request, and does not use your photographs to train its own models. Google's handling of images and data sent to the Gemini API is governed by Google's terms and privacy policy, linked in the Third Party Access section below. Edited images are stored locally on your device so that you can access your recent edits, and remain under your control; deleting the Application removes them.
The Service Provider may use the information you provide to send important information and required notices. The Application can also send push notifications, including, where permitted by law, occasional notifications about new features or content. You can turn push notifications off at any time within the Application's settings or in your device settings.
For a better experience while using the Application, the Service Provider may process certain personally identifiable information, including but not limited to an anonymous user identifier and the photographs you choose to upload. The information the Service Provider processes will be retained and used as described in this privacy policy.
Third Party Access
To provide and improve the Application, the Service Provider shares certain information with the third-party service providers listed below. These providers process data on the Service Provider's behalf under their own privacy policies. Depending on the provider, the data shared may be associated with your anonymous user identifier rather than being fully anonymized. The Service Provider does not sell your personal information.
The Application utilizes the following third-party services, each of which has its own Privacy Policy governing how it handles data:
- RevenueCat — subscription and purchase management
- PostHog — product and usage analytics (data hosted in the United States)
- Supabase — anonymous authentication, backend services, and data storage
- Google Gemini API — AI image processing (see also the Google Privacy Policy)
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or other legally recognized transfer mechanisms
- Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at dineth@aesthiq.app.
Data Retention Policy
The Service Provider retains personal data based on its necessity for the stated purposes:
- User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
- Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
- Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
- Data required for legal compliance: Retained as long as required by applicable law
You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete data submitted through the Application, please contact them at dineth@aesthiq.app. Please note that some data may be required for the Application to function properly.
Children
The Application is not intended for children under 13 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (dineth@aesthiq.app) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at dineth@aesthiq.app.
This privacy policy is effective as of 2026-07-22
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at dineth@aesthiq.app.
This privacy policy was last updated on 2026-07-22.