Privacy Policy

The data controller is OUTWORX FOR WEB-DESIGN, a sole establishment licensed in the Emirate of Dubai, United Arab Emirates (Trade License No. 1556815), owned by Abdalla Mohamed. Contact: help@toyify.app. See our Legal Notice for full details.

• Photos you upload. The selfie/image you submit to generate a result.
• Generated images. The AI images we create from your upload.
• Email address. Collected by our payment processor (Stripe) when you make a purchase, so we can deliver your image and receipt.
• Payment information. Processed directly by Stripe. We never see or store your full card details.
• Technical data. IP address and a device identifier, used only to enforce usage limits and prevent abuse.
• Consent record. The version of our terms you accepted and the time you accepted them, so we can demonstrate your consent.

Photos you upload may contain your face. We use them only as input to an image-to-image AI model to create your stylized images, and to run an automated safety check before generation. We do not perform facial recognition, we do notcreate or store biometric identifiers or “faceprints”, we do not use your photo to identify you or anyone else, and we do notsell, disclose, trade, or profit from any facial data. By uploading, you confirm you are the person in the photo (or have that person’s explicit consent) and you give your informed, written consent to this processing.

Where the GDPR/UK GDPR applies, we rely on your explicit consent (which you give before uploading and can withdraw at any time) to process your photo and create your images, and on our legitimate interests and the performance of our contract with you to deliver purchases, prevent abuse, and secure the Service. Where the UAE Personal Data Protection Law (PDPL) applies, we process on the basis of your consent and to perform the service you request.

• To run an automated content-safety check on your upload before generating.
• To generate, deliver, and email your images.
• To process your payment and provide support.
• To enforce free-usage limits and prevent fraud or abuse.
• To maintain, secure, and improve the Service.

We do not sell or “share” your personal information, and we do not use your photos to train AI models.

We share data only with providers who help us run the Service, under their own privacy terms and data-processing agreements:

• Replicate — runs the AI image generation and the safety classifier on your uploaded photo.
• Stripe — processes payments and collects your email.
• Cloudflare R2 — stores images and result data.
• Resend — sends your result and receipt emails.
• Render — hosts the application.
• PostHog — product analytics (page views, feature usage, Web Vitals, heatmaps). Cookieless, but processes your IP address (for approximate location) and browser/device data.

• Your uploaded selfie is deleted as soon as it is no longer needed to fulfil your request — immediately after your bonus styles are generated for a Style Pack purchase, and in every case automatically within 30 days.
• Generated images and result data are automatically deleted on a rolling schedule, within 30 days.
• We do not retain any biometric identifiers or faceprints — none are ever created.
• Purchase records (via Stripe) may be retained longer where required for tax, accounting, and legal compliance.

You may request deletion of your data at any time by emailing help@toyify.app, and we will delete it promptly.

Depending on where you live (including under the EU/UK GDPR, California CCPA/CPRA, and the UAE PDPL), you may have the right to access, correct, delete, or export your personal data, to withdraw consent, to object to or restrict processing, and to opt out of any “sale” or “sharing” of personal information (we do neither). To exercise any right, email help@toyify.app and we will respond as required by law. You may also have the right to complain to your local data-protection authority.

The Service is not directed to children and is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. Uploads are screened by an automated safety filter, and we prohibit photos of minors. If you believe a child has used the Service or that an image involves a minor, contact help@toyify.app immediately and we will delete the data and take appropriate action.

We use only a strictly-necessary cookie and cookieless analytics. See our Cookie Policy for details.

We use reasonable technical and organizational measures to protect your data, but no method of transmission or storage is 100% secure. We are based in the UAE and our providers may process data in the United States and other countries. Where required, appropriate safeguards (such as Standard Contractual Clauses) apply to international transfers.

We may update this Policy from time to time; the “Last updated” date reflects the latest version. For any privacy question or request, contact us at help@toyify.app.