The photo and options are used only to create the requested formal portrait.

Consent records demonstrate guardian authorization, and limited task and transaction records support delivery, refunds, duplicate-credit prevention and security. Child mode disables beauty retouching and does not intentionally change age or identity traits.

After guardian consent, the photo and options are sent to Alibaba Cloud Model Studio's pay-as-you-go API in North China 2 (Beijing) for generation and result review.

Apple handles the purchase and does not receive the child's photo.

Our service does not persist source photos.

Encrypted results remain for up to 24 hours and can be deleted early. The device stores up to three results for seven days. Generation requests and guardian-consent records remain for no more than 180 days after the task ends; purchase and refund records follow applicable legal and transaction needs.

A guardian can refuse upload, withdraw future consent, delete device caches and online recovery results, and request access, correction or lawful deletion through support.

We verify matching in-app task information or an Apple purchase receipt before disclosing records.

Photos use encrypted transport, recovery files are independently encrypted, and access uses short sessions, replay protection and permission checks.

If an incident may affect a child, we will take remedial and notification steps required by applicable law.

Questions? Email support@codeverything.cn.