This Privacy Policy describes how WizCraft collects, uses, stores, and discloses information in connection with our mobile application and related services (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Policy.
We will not sell your photos, prompts, or generated content to third parties.
We will not enroll your face in any recognition or identification database.
We will not collect data beyond what is necessary to operate the Service.
When you upload an image to use a face-related feature, the Service analyzes the facial geometry required to render the requested effect. This analysis is performed only during processing of your request, and the working data is discarded immediately upon delivery of the result.
Facial analysis is performed only within the scope of a generative request initiated by you, and only to produce the visual output you have requested — such as a portrait restyle, video animation, or likeness-based edit. We do not retain facial data or carry it over between sessions.
If a feature does not require facial data, no such data is collected for that feature. Collection is limited to what is strictly necessary for the specific feature you choose to use.
Working data is held in encrypted memory and short-lived storage on reputable cloud infrastructure subject to access controls and audit logging. We do not operate our own data centers; we engage third-party providers selected for their mature security practices.
We do not sell, rent, or share your uploads, facial data, or generated images with third parties for advertising or profiling purposes. The only parties that may receive your data are (i) infrastructure providers that operate components of the Service on our behalf, and (ii) the platform store that processed your purchase.
The Service is a mobile application and does not use browser-based cookies. It does integrate a limited number of third-party SDKs for analytics, attribution, and crash reporting, which assist us in understanding feature usage, measuring how users discover the application, and diagnosing technical errors.
Each SDK provider operates under its own privacy policy. We select providers with clear data-minimization commitments and limit the information transmitted to what is necessary for the stated function.
We engage a limited number of contracted service providers — including model hosting, content delivery, error monitoring, and email delivery — to operate the Service. These providers process data on our behalf under written agreements that require confidentiality and restrict use of the data to the services we have engaged them to perform.
When an error occurs, the application transmits a diagnostic report containing the device model, operating system version, application version, request identifier of the failing job, and a stack trace. This information is used to identify and resolve technical issues; it is not used to construct user profiles.
We implement technical and organizational measures appropriate to the nature of the data we process, including transport encryption, least-privilege access controls, periodic key rotation, vendor security reviews, and vulnerability monitoring. No system is entirely secure; we treat security as a continuous practice rather than a final state.
The Service may contain links to third-party websites or services — including platform stores, help articles, and partner sites. We do not control these destinations and are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party services you access.
The Service is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13, and we do not direct the Service to children. If a parent or guardian believes that a child under 13 has provided personal information to us, please contact us and we will promptly delete the account and any associated data.
Subject to applicable law, you have the right to access the personal information we hold about you, request correction of inaccurate data, request deletion of your account and associated data, and object to or restrict certain processing activities. To exercise these rights, please submit a request from the email address associated with your account. We will respond within a reasonable timeframe.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. The effective date at the top of this document indicates the current version. Material changes will be communicated within the application prior to taking effect. Your continued use of the Service following such changes constitutes acceptance of the updated Policy.