Privacy Policy

1. Who we are

This policy covers the Lifoto iPhone app and the website at lifoto.app (together, the “Service”). “We”, “us” and “our” mean STORIES AR LLC, a Wyoming limited liability company and the developer of Lifoto. We are the data controller for the limited data described below.

STORIES AR LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States
evdodima@gmail.com

Lifoto does not require an account. There is no sign-up, no login, no password, and we never ask for your name, email address, phone number or postal address.

2. What we collect

Data you provide

• The photo you choose to animate. A single cropped image of the print you pointed the camera at, plus an optional text prompt if you write one. See §3.
• Support correspondence. If you email us, we have your email address and whatever you write in it.

Data collected automatically

• An anonymous install ID — a random UUID generated on first launch and stored on your device. It is not your Apple ID, not your device ID, and not the IDFA. Deleting the app destroys it; reinstalling mints a new one.
• Product analytics — which features you use and when: app opened, a photo detected, a video generated, a purchase screen shown. Events carry the install ID, your subscription tier, how many free generations remain, and technical measurements of each video generation (duration in milliseconds, success or failure stage, our estimated provider cost).
• Crash and performance diagnostics — stack traces, app hangs, device model, OS version, and a sample of performance traces when something goes wrong.
• Purchase state — whether a subscription is active, which duration, and trial eligibility.
• Website logs — our web server records IP address, user agent and requested page in standard access logs. The website sets no cookies and runs no analytics or advertising scripts.

We do not collect: your name, email (unless you write to us), phone number, address, contacts, precise or coarse location, health data, the advertising identifier (IDFA), or a list of your installed apps. Lifoto does not present the App Tracking Transparency prompt because it does not track you across other companies' apps or websites.

3. Your photos and videos — the part that matters

This is the section worth reading closely, because it is the one place where an image leaves your phone.

• Detection is on-device. The live camera feed is analysed by a machine-learning model that runs entirely on your iPhone's Neural Engine. Camera frames are processed in memory and discarded. No video stream, and no frame you did not act on, is ever uploaded.
• Generation is not. When a print is recognised and a video is generated for it, the single cropped, deskewed image of that print — plus your text prompt, if you wrote one — is sent over an encrypted connection to Pruna AI, our AI video provider, which returns the generated video. This is the entire purpose of the app and it cannot be done on-device today.
• We do not run servers that store your photos. We have no photo database. The image is held by the provider only for as long as it takes to run the job and serve the result, under the provider's own policy.
• Everything else stays local. Captured marker images, generated videos, your gallery, screen recordings and any video you attach from your photo library are stored in the app's private container on your device. They are not backed up to us. They are removed when you delete the marker or delete the app.
• Training. We do not use your photos to train models, and we do not license or sell them to anyone for that purpose.

If you would rather no image ever left your device, do not generate a video: detection, the camera view and your existing gallery all work without it.

4. Third parties we share data with

We use a small number of processors. Each receives only what its job requires.

Lifoto also contains an optional, currently disabled integration with xAI that, if we switch it on in a future release, would send the cropped image to xAI to write a better motion description. It is off in the shipping build; if that changes, this policy will be updated before the release goes out.

We may disclose information if we are legally required to by a valid legal process, or to protect our rights, safety or property. If the app is ever sold or merged, data may transfer to the acquirer under this same policy. We do not sell personal information, and we do not share it for cross-context behavioural advertising — as those terms are defined under the CCPA/CPRA.

5. Device permissions

• Camera — required. It is how Lifoto finds prints. Denying it leaves the app unable to function; you can change your mind in iOS Settings.
• Photo library (add) — optional. Used only when you save a generated video or a screen recording to Photos.
• Photo library (read) — optional. Used only when you pick your own video to pair with a print. We read the item you pick and nothing else.
• Network — required to generate videos and to sync your subscription.

6. Legal bases for processing (UK/EU GDPR)

• Performance of a contract — processing the image you asked us to animate, and managing your subscription.
• Legitimate interests — anonymous analytics and crash diagnostics, to keep the app working and to understand which features are used. We use no directly identifying data for this.
• Consent — the camera and photo-library permissions you grant in iOS, which you can withdraw at any time in Settings.
• Legal obligation — where we must retain or disclose information by law.

7. How long we keep things

• On your device — until you delete the marker or the app. We cannot delete these for you; they are not ours to reach.
• Analytics and crash data — retained by our processors on their standard schedules, generally no more than 12 months for event data.
• Generation images at the provider — retained only as long as needed to run and deliver the job, per the provider's policy.
• Subscription records — kept for as long as the subscription is active and afterwards as required for tax, accounting and dispute purposes.
• Support email — kept while the conversation is open and for a reasonable period afterwards.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. Residents of California, and of other US states with comparable laws, additionally have the right to know what is collected, to delete it, to correct it, and not to be discriminated against for exercising those rights.

Because Lifoto has no accounts, the fastest exercise of most of these rights is practical rather than legal:

• Delete everything on device — delete the app. Markers, videos and the install ID go with it.
• Delete analytics history — email evdodima@gmail.com with your install ID and we will delete the matching profile and events. You can find the install ID by contacting us before deleting the app; once deleted, we have no way to link a request to a record.
• Any other request — email us. We respond within 30 days.

If you are in the EEA or UK and are unhappy with our response, you may complain to your local data protection authority.

9. Children

Lifoto is rated 4+ but is not directed at children, and we do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). If you believe a child has provided us with personal information, email us and we will delete it.

10. Security

All network traffic uses TLS. API keys are held in the app binary's configuration rather than transmitted by you. Content on your device sits in the app's private, sandboxed container. That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International transfers

STORIES AR LLC is established in the United States, and our providers operate servers in the United States and the European Union, so the data described above may be processed outside your country — including in the US. If you are in the EEA, the UK or Switzerland, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard, and by using the Service you acknowledge this transfer.

12. Changes and contact

If we change this policy we will update the “last updated” date above, and for material changes we will say so in the app's release notes. Continued use after a change means you accept the updated policy.

Questions, requests or complaints: evdodima@gmail.com.

See also our Terms of Use.