1. Introduction
Welcome to Viviq ("we", "our", or "us"). We operate the Viviq mobile application and website at viviq.co (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
By using Viviq, you agree to the collection and use of information in accordance with this policy.
Data Controller: Burak (individual developer, based in Turkey). For any privacy-related request — including GDPR access, deletion, or portability — contact support@viviq.co.
2. Information We Collect
2.1 Information You Provide
- Account information: Email address and authentication credentials (passwords are hashed by Supabase Auth before storage — we never receive, store, or have access to your plaintext password).
- Photos: Images you upload for analysis. Photos are processed in real-time and are not stored permanently on our servers.
- Payment information: Handled entirely by Apple App Store and Google Play. We do not store credit card numbers or payment details.
- Communications: Messages you send us via email or support channels.
2.2 Automatically Collected Information
- Device type, operating system, and app version
- Usage data (features used, screens visited, actions taken within the app)
- Crash reports and performance data
- IP address (used for geographic region detection and security)
3. How We Use Your Information
- Provide, operate, and improve the Service
- Process and analyze photos you upload using our AI systems
- Manage your account and subscription
- Track and manage your credit balance
- Send service-related communications (not marketing, unless opted in)
- Detect fraud and ensure the security of the Service
- Comply with legal obligations
4. Photo Processing and AI Training
Photos you upload are transmitted securely over HTTPS, processed by our AI models, and the results are returned to you. We do not retain your photos after processing is complete (typically within seconds).
We will never use your photos to train our AI models without your explicit, informed, and separate consent.
5. Data Sharing and Sub-Processors
We do not sell your personal data. To operate the Service, we share certain data with the following third-party sub-processors. Each is bound by a Data Processing Agreement (DPA) and appropriate transfer safeguards.
5.1 Core Sub-Processors
| Company | Role | Data Shared | Country | Safeguard |
|---|---|---|---|---|
| Anthropic | AI photo analysis (Claude API) | Photo content (not stored after processing) | USA | DPA + SCCs |
| OpenAI | AI image editing — image-to-image (Pro feature) | Photo content (not stored after processing; not used for model training per OpenAI API policy) | USA | DPA + SCCs |
| fal.ai | AI visual generation — text-to-image (Pro feature, alternate engine) | Generated prompt only (no source photo transmitted) | USA | DPA + SCCs |
| Supabase | Database, authentication, and backend functions | Account data, usage data, credit balance | EU / USA | DPA + SCCs |
| RevenueCat | Subscription and in-app purchase management | Subscription status, purchase history (no payment card data) | USA | DPA + SCCs |
SCCs = EU Standard Contractual Clauses (Commission Decision 2021/914), which provide an approved transfer mechanism for data leaving the European Economic Area.
5.2 In-App Purchase Platforms
Payments are processed directly by Apple App Store and Google Play. We do not receive or store your payment card details. Their privacy policies govern payment data: Apple · Google.
5.3 Legal Disclosure
We may disclose data when required by law, court order, or governmental authority. In the event of a merger or acquisition, affected users will be notified in advance.
6. Data Retention
We retain account data for as long as your account is active. You may request deletion at any time by contacting support@viviq.co. Photos are not retained beyond the processing session.
7. Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your personal data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to certain types of processing.
Contact us at support@viviq.co. We will respond within 30 days.
8. Children's Privacy
Viviq is not directed to children under 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children.
9. Security
We implement industry-standard security measures including HTTPS encryption, secure data storage, and access controls. No method of transmission is 100% secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email.
11. Contact Us
Email: support@viviq.co · Website: viviq.co