개인정보 처리방침

Privacy policy — English

Effective October 25, 2026. This policy covers From Photos, its partner App Clip and its invitation website.

Information we process

We store the names you enter, photos you select, wedding details and message, photo analysis, generation requests and results, session identifiers and hashed role credentials on Cloudflare D1 and private R2 storage. This supports two-person collaboration, access control, retries and invitation generation. We do not access photos you have not selected in the system photo picker.

Before upload, we ask for permission to send photos and names to OpenAI for safety checks and analysis. To generate invitations, we also send the resulting subject descriptions, names, wedding date and time, venue and message to OpenAI. Earlier generation methods may send selected photos directly for image generation. Declining permission prevents photo upload and AI generation; selecting photos locally and viewing existing designs remain available.

If you allow notifications, we store an Apple push token with your session for partner-completion notifications. Notifications are optional. We collect a generated usage identifier, app version, interaction events and related session or invitation identifiers for usage analysis. Server error codes and request or job identifiers may be retained in Cloudflare operational logs for security and troubleshooting.

Apple and RevenueCat process the app's product identifiers and purchase or restoration records. RevenueCat uses its own anonymous identifier for entitlement checking and sales analytics; we do not send it your photos, names, email or collaboration session. We send Apple's signed purchase proof to our generation server and retain purchase hashes and usage records to validate access and prevent duplicate or excessive generation. We do not receive payment card or bank details. The App Clip has no purchases or RevenueCat SDK.

Reports include a reason, description, session and photo references, and processing status. Our operator can review reported content and the partner photos needed to resolve a report. The reporting participant's receipt is not shown to the other participant.

Sharing and optional public feed

Your selected photos and name are shared with the partner who joins your private invitation. Finished designs stay private by default. Only if the creator explicitly chooses to feature a design do we publish the selected finished image in the app's inspiration feed. The image may display both names, wedding date and time, venue and message. The 18 original photos, invitation secret and role credentials are not published. Before publication, we send the finished image and its text to OpenAI for a safety check; a failed or rejected check leaves it private. We store publication choices, timestamps and the result reference to manage availability and analyze use.

You can turn off feed visibility in your library to remove the item from our public list and stop public image access. We cannot recall copies other people have already saved or shared. Blocking a collaboration stops further server access, reconnection and generation; photos and finished designs already on a device stay there. Blocking is separate from requesting server deletion.

Each public design has a Report or block menu. A feed report includes your reason, optional description and the reported finished image; it does not attach the 18 source photos. Our operator reviews reports and retains report, blocking and enforcement records. Block creator hides that creator's current and future public designs on this device using a private purchaser-derived identifier. For older results without purchase proof, blocking applies to the creation session. It does not change other users' feeds, your library or your partner collaboration. We store a random viewer secret in Keychain and only its hash and blocking relationships on the server; other users cannot access raw purchase records.

Storage, deletion and your choices

Drafts, photo copies, purchase rights and exported PNG/SVG files may also be stored on your device. AI generation and collaboration require an internet connection. Invitation links and sessions do not expire solely due to elapsed time. We do not run automatic deletion of server records. Deleting the app does not delete server or RevenueCat records.

For access or deletion, email saebom.ai.official@gmail.com. We will explain how to identify the relevant session or purchase and verify your authority before processing deletion with our providers. Do not send passwords, payment card details, original photos or secret invitation tokens. You can delete local exports on your device.

Service providers and security

Apple provides the App Store, payments, photo picker and push service under its own policies. Cloudflare provides hosting, databases, object storage and operational logs. OpenAI performs safety checks, photo analysis and image generation. RevenueCat supports purchase validation, restoration and sales analytics. We use HTTPS and restrict private session data with hard-to-guess role credentials; the server stores credential hashes.

We do not use advertising SDKs, IDFA, personalized advertising, cross-company tracking or sales of personal data. Contact saebom.ai.official@gmail.com for privacy questions, reports, access or deletion requests.