Privacy Policy
This Privacy Policy explains what information Duskflash collects, why, who processes it, how long we keep it and the choices you have. It applies to the Duskflash apps for iOS and Android, the website at duskflash.com and our related services (together, the "Service").
The short version
- The camera, film and digicam looks, the editor, the photobooth and film rolls run entirely on your phone. Photos you take or edit with them are not uploaded to us.
- AI Studio is optional. When you use it, we upload only the photo you choose, delete that upload within 24 hours, and delete AI results after 30 days unless you back them up.
- Identity Lock analyzes faces on your phone only. Face measurements are used for a single comparison and then discarded. We never store or receive face templates or other biometric identifiers.
- Images are never sent to DeepSeek. DeepSeek only receives short text (for example a look description you type).
- We do not sell your personal information, do not use third-party advertising or analytics SDKs, and do not train AI models on your photos.
1. Who we are
The Service is provided by Duskflash (legal entity TBD) ("Duskflash", "we", "us"). For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described in this policy. You can contact us at [email protected].
2. What stays on your phone
The following is processed on your device and is not sent to us:
- The live camera feed, and photos and videos you capture or edit with local looks, tools, the photobooth and film rolls.
- Your in-app Library, unless you turn on cloud backup (section 3.8).
- Face analysis for Identity Lock and input checks. Before and after an AI generation, the app detects faces and computes facial landmarks and a numeric face signature to (a) check that the photo is suitable, (b) blend your original face back into the AI result, and (c) measure how closely the result resembles you. These measurements exist only in memory on your phone for the duration of the check and are then discarded. They are never written to storage, never uploaded and never used to identify you. The only thing the app reports to us is the outcome: whether each result passed and its similarity score (a number between 0 and 1), so we can refund credits automatically.
- Scene analysis used for look suggestions (for example "night" or "beach").
3. Information we process
3.1 Account and device information
Duskflash works without a sign-up. On first launch the app creates an anonymous account. We process:
- a random account ID and a random device ID generated by the app;
- platform, app version, operating system version, device model, language and time zone;
- device integrity signals from Apple App Attest or Google Play Integrity, used to prevent fraud and trial abuse;
- a push notification token, if you allow notifications;
- if you choose to sign in with Apple or Google: the account identifier those services give us and, if shared, your email address (Apple may give us a private relay address).
3.2 Purchases and subscriptions
Payments are handled by Apple (App Store) or Google (Google Play). We never receive your card or bank details. We receive and store the transaction and subscription information the stores send us: product, transaction and original transaction identifiers, purchase and renewal dates, status (for example trial, active, grace period, expired or refunded), store country and environment. We link purchases to your account using an anonymous token (Apple appAccountToken, Google obfuscated account ID).
3.3 AI credits and generation records
For Pro subscribers we keep a credits ledger (grants, spends, refunds, expiries, with dates and amounts) and a record of each AI generation: the style used, options (such as number of variants and quality), status, cost in credits, timings, the AI provider and model that handled it, and the Identity Lock outcome reported by your phone.
3.4 Photos you send to AI Studio
When you start an AI Studio generation:
- Your phone resizes the photo (2048 pixels on the long edge or less) and removes EXIF metadata, including GPS location, before upload.
- The photo is stored temporarily in our storage on Cloudflare R2 and sent to one AI provider (section 5) to create the result. Before that, every photo goes through an automated safety check (moderation) by OpenAI or Google.
- The uploaded photo is deleted within 24 hours after the job finishes.
- AI results are stored so your phone can download them and are deleted 30 days after creation, unless you add them to cloud backup.
We use your photo only to produce the result you asked for, to keep the Service safe (for example blocking prohibited content) and to handle a report you or someone else files about a result. We do not use your photos, or AI results made from them, to train or improve AI models, and we instruct our providers not to.
3.5 Text you send to AI features
Describe a look, AI captions, the photo-dump planner and the stylist send short text or tags to a text model: the words you type, scene tags computed on your phone (for example "beach, sunset, 2 people") and look names. These features never send images. The text is processed by DeepSeek (section 5).
When you type a request for an AI Studio photo (for example "Ask for an edit", or what to add when reframing), the text is checked by an automated safety check (moderation) by OpenAI or Google, may be tidied up by DeepSeek (text only, never the photo), and is then sent with your photo to the image model. It is stored with the generation record and deleted with it.
3.6 Shares, the recipe gallery and referrals
If you create a share or recipe link, we store the look or recipe and, only if you choose to include it, the exported image, plus your referral code, so the link can be shown at duskflash.com/s/... or /r/... . Share links are kept for 90 days, or for as long as they are listed in the gallery, unless you delete them sooner.
If you publish a recipe to the public gallery, we show it at duskflash.com/g/... with the before and after images you chose, your public creator handle and how many times it has been used. Gallery items are reviewed before they appear and stay public until you unpublish them or we remove them. Your handle is public; don't use your real name if you'd rather not.
When someone starts Pro with your referral code, we record the referral to grant both of you bonus credits.
3.7 Shared rolls and party booths
If you create or join a shared roll or party booth, the photos you take in it are uploaded to the group and shown to its members (and nobody else), together with your creator handle if you have one, when you joined and how many exposures you used. Anyone with the group's invite code or link can join until it is full or closed, so share the code only with people you want in. The host can remove members and delete any photo. On a shared roll, other members only see the photos once the roll develops. Group photos and membership are deleted 30 days after the roll develops or the party ends; you can delete your own photos sooner. The live party connection (remote shutter, "ready" signals) is not stored. Location data is stripped from group photos before upload.
3.8 Cloud backup (optional, Pro)
If you sign in and turn on backup, we store the originals, edits and recipes you choose to back up so you can restore them on a new device. Backups stay until you delete them, turn backup off and delete cloud data, or delete your account.
3.9 Product analytics
The app sends first-party usage events to our own servers (for example "app opened", "look switched", "photo saved", "paywall shown", "AI result viewed") with basic context such as app version, platform, language and experiment group. We use them to understand which features work, find bugs and measure pricing and onboarding experiments. We do not use third-party analytics, advertising or attribution SDKs, and we do not track you across other companies' apps or websites. You can turn analytics off in Settings → Privacy; billing records (section 3.2) are still kept because we need them to provide what you paid for.
3.10 Support, reports and safety
If you email us or file a report about content, we keep the message, your contact details and any attachments. If you report an AI result, we keep the report and a copy of the reported image until the report is resolved, then for up to 90 days as a record.
3.11 Crash and hang reports
When the app crashes or freezes, the next launch sends a technical report to our own servers: device model, system and app version, the kind of problem and the program state at that moment (call stack). Reports contain no photos, no text you typed and no file names from your library, and we store them without your user ID, so they are not linked to you. We keep them for 90 days to find and fix bugs. Turning off Share usage data in Settings → Privacy also stops crash reports.
3.12 Website
duskflash.com does not use analytics or advertising cookies. We set one functional cookie, fr_locale, to remember your language. Campaign parameters in the link you opened (for example utm_source) are kept in your browser session and added to app store links so the store can tell us which campaign led to an install; they are not linked to your identity. Cloudflare, our hosting provider, processes IP addresses and request data to deliver and secure the site.
4. Why we use information (legal bases)
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Provide the app, your account, purchases, credits, backups, shares and groups | 3.1, 3.2, 3.3, 3.6, 3.7, 3.8 | Performance of a contract |
| Create AI Studio results you request | 3.4, 3.5 | Performance of a contract and your consent given in the app before first use |
| On-device face comparison (Identity Lock) | Processed only on device (section 2) | Your explicit consent, given in the AI Studio consent screen |
| Prevent fraud, trial abuse and prohibited content; keep the Service secure | 3.1, 3.3, 3.4, 3.10 | Legitimate interests (a safe, fair service) and, where applicable, legal obligation |
| Product analytics, experiments and crash reports | 3.9, 3.11 | Legitimate interests (improving the product), with an opt-out |
| Push notifications (trial reminders, results ready, drops) | 3.1 | Consent (system permission), withdrawable at any time |
| Tax, accounting and legal requirements | 3.2 | Legal obligation |
5. Who processes your information
We share information only with service providers that process it on our behalf under written contracts (data processing agreements), and with the app stores that handle your purchases.
| Provider | What they do | Data involved |
|---|---|---|
| Cloudflare, Inc. | Hosting, API, storage (R2, D1), queues, AI Gateway logging of metadata, website delivery and security; Workers AI as a fallback image model | All server-side data; the AI Studio photo only when Workers AI handles a fallback |
| Google LLC (Gemini API) | Default model for AI Studio image results; automated safety (moderation) checks on photos and typed text | The AI Studio photo, the style prompt and text you type |
| OpenAI, L.L.C. | Fallback image model; automated safety (moderation) checks on photos, prompts and results | The AI Studio photo, prompt and result |
| Kie.ai and APIMart | Image processing services that route AI Studio requests to image models | The AI Studio photo, edit mask and style prompt |
| fal.ai | Fallback image model when the default is unavailable | The AI Studio photo and the style prompt |
| DeepSeek | Text features only (look descriptions, captions, planning) | Text and tags only. Never images. Processed in the People's Republic of China |
| Apple Inc. and Google LLC | App stores, payments, Sign in with Apple / Google, push notifications (APNs / FCM) | Purchase and sign-in information, push tokens |
We use paid API tiers that do not use customer content to train models, and we never use your photos or results for training ourselves. Some providers may keep inputs and outputs for a limited period (for example up to 30 days) solely to detect abuse, under their own terms. We disable request body logging for image routes in our AI gateway. We will update this list before adding a provider that receives your photos.
We may also disclose information if required by law, to protect the rights and safety of users and others, or as part of a merger or acquisition (with notice to you). We do not sell personal information and do not share it for cross-context behavioral advertising.
6. How long we keep information
| Data | Retention |
|---|---|
| AI Studio uploads | Deleted within 24 hours after the job finishes |
| AI results | Deleted 30 days after creation, unless backed up |
| On-device face measurements | Discarded immediately after each check; never stored |
| Cloud backup | Until you delete it or your account |
| Shares | 90 days, or while listed in the gallery; sooner if you delete them |
| Creator handle and gallery items | Until you unpublish them, we remove them, or you delete your account |
| Shared roll and party booth photos | 30 days after the roll develops or the party ends; sooner if you or the host delete them |
| Account, credits ledger, generation records | While your account exists; deleted within 30 days of account deletion |
| Purchase and tax records | As long as required by law (typically up to 7 years), then deleted |
| Analytics events | 90 days |
| Crash and hang reports (not linked to you) | 90 days |
| Reports and support emails | Up to 90 days after resolution (longer only if needed for a legal claim) |
7. International transfers
We and our providers process data in the United States and other countries, and DeepSeek processes text in China. Where GDPR or UK law applies, we rely on adequacy decisions, the EU-U.S. Data Privacy Framework where a provider is certified, or Standard Contractual Clauses with supplementary measures.
8. Your rights and choices
Everyone can, in the app:
- delete your account and data (Settings → Privacy → Delete account, see Delete your account);
- export your data (Settings → Privacy → Export data);
- withdraw AI consent, delete cloud data and turn off analytics or notifications.
EU, EEA and UK residents have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting earlier processing. You can lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA) have the right to know what personal information we collect, use and disclose; to delete and correct it; to opt out of sale or sharing (we do neither); to limit the use of sensitive personal information (we only use it as permitted, for example account sign-in); and not to be discriminated against for exercising these rights. You may use an authorized agent. Categories collected in the last 12 months: identifiers (3.1), commercial information (3.2, 3.3), photos you submit to AI Studio (3.4) or share in a group (3.7), internet or electronic activity (3.9), and inferences limited to product personalization (look suggestions). Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other US states with similar laws have comparable rights.
Biometric privacy laws (for example Illinois BIPA, Texas CUBI and Washington law): we do not collect, capture, store or receive biometric identifiers or biometric information. Face analysis happens on your device, is temporary and is never transmitted.
To exercise a right, use the in-app options or email [email protected] from the device or account concerned. We may need to verify the request (for example by asking for the user ID shown in Settings → About). We respond within 30 days (45 days where US state law allows), and you can appeal a decision by replying to our response.
9. Children
Duskflash is for people aged 13 and older and is not directed to children under 13. In the EU and UK, if you are below your country's age of digital consent (between 13 and 16), you need a parent's or guardian's permission to use AI Studio. If the app learns that a user is under 13, AI Studio uploads are blocked. If you believe a child under 13 has given us personal information, contact us and we will delete it.
10. Security
Data is encrypted in transit (TLS) and at rest by our storage providers. Access to production systems is limited to staff who need it and protected with single sign-on and multi-factor authentication. Uploads use short-lived, single-use URLs. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.
11. Changes
We will post any change here and update the date at the top. For material changes we will tell you in the app before the change takes effect.
12. Contact
Privacy questions and requests: [email protected]. General support: [email protected].