Privacy Policy
Last updated September 29, 2026
This is the Privacy Policy for Expression Editor: Reshot AI (the “App”), the iOS app developed by MD Shaha Jalal.
Introduction
This Privacy Policy explains how we collect, use, share and protect your information when you use the App, which edits facial expressions in photos.
If you have any question about this policy, contact us at [email protected].
If you do not agree with this policy, please do not use the App.
Summary
The short version. The detail is in the sections that follow.
- We process the photos you choose to upload so the App can edit facial expressions. Editing happens on our servers and on the servers of the AI providers listed below.
- Your photos are deleted within 30 days. We do not sell them, and we do not use them to train AI models.
- We collect usage and device data to run the App, to measure our advertising, and to understand which features people use.
- We use advertising measurement partners, including AppsFlyer and Google. On iOS this requires your permission, which we request through Apple's App Tracking Transparency prompt. You can decline, and the App works exactly the same.
- You can ask us to delete your data at any time by emailing [email protected].
Information you give us
- Photos and images. When you choose a photo, it is uploaded to our servers and to the AI providers listed below so that the requested edit can be produced. You choose every image. The App does not scan your photo library in the background.
- Camera. If you take a photo inside the App rather than choosing an existing one, the App asks for camera access. The camera is used only to capture the still image you are about to edit. The App does not record video or audio.
- Support messages. If you email us, we receive your email address and whatever you write to us.
Face data
To edit an expression, our AI providers analyse the position, orientation and shape of facial features in the image you upload. We call this “face data”.
Please read this section carefully:
- Depending on where you live, face data may be treated as biometric data under laws such as the Illinois Biometric Information Privacy Act (BIPA) or the Texas Capture or Use of Biometric Identifier Act (CUBI). See the biometric information section below.
- Face data is used only to produce the edit you requested.
- We do not use face data to identify or authenticate anyone, and we do not match it against any database of people.
- We do not sell, lease, trade or otherwise profit from face data.
- We do not use your images or your face data to train AI models.
- Face data, and the images it is derived from, are deleted within 30 days.
- By uploading a photo you consent to this processing. You may withdraw your consent by ceasing to use the App and emailing [email protected] to request deletion.
Information collected automatically
- Device data, such as device model, iOS version, language, region and time zone. Used to operate the App and fix problems.
- Usage data, such as which screens you view, which features you use, and which edits you start and complete. Used to improve the App.
- Purchase data, such as subscription status, trial status, purchase and renewal events, and which product was bought. Used to deliver and restore your purchases.
- Identifiers, including an app-generated user ID, Apple's Identifier for Vendor (IDFV), the AppsFlyer ID, the Firebase installation ID, and your IP address. Used to link your purchases to your device and to measure advertising.
- Advertising identifier (IDFA). Collected only if you grant permission through Apple's App Tracking Transparency prompt.
- Approximate location, meaning your country, derived from your IP address. Used for pricing and regional legal requirements.
- We do not collect precise GPS location, your contacts, microphone audio, or health data.
Your identity in the App
The App has no username or password, but it is not anonymous in the strictest sense, and the difference is worth knowing.
On first launch the App creates a random identifier and stores it in your device's keychain. We use it to recognise your subscription and your purchases. Because the keychain persists, this identifier survives deleting and reinstalling the App, so a reinstall restores your subscription rather than starting fresh. It is not linked to your name, email address or Apple ID, and we cannot use it to identify you personally.
Log data
If the App encounters an error, we and our third-party providers may collect log data. This may include your device IP address, device name, operating system version, the configuration of the App, and the date and time of your use.
Who we share information with
We share only what each provider needs in order to do its job. We do not sell personal information for money.
AI image processing. These providers receive the image you upload. Depending on which feature you use, an image may be sent to them by our own servers, or directly by the App.
- fal.ai, which also provides temporary storage for images being processed
- Deep-Image.ai, for the AI photo enhancer
We also use the following, which do not receive your photos:
- Analytics and app infrastructure. Google Firebase, covering Analytics, anonymous Authentication and Remote Config.
- Content delivery. Cloudflare and Google Firebase Storage serve the App's own template and sample images to your device. Your photos are not stored there.
- Subscriptions and payments. RevenueCat, and Apple, which processes App Store payments. We never see your card details.
- Advertising measurement and attribution. AppsFlyer, Google, and Apple Search Ads and SKAdNetwork.
- Sharing features. Meta (Facebook). The Facebook SDK is used only when you choose to share an image to Facebook. Note that when you share, we record that a share happened, and to which destination, as an analytics event — the image itself is not sent to our analytics partners.
- We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of our users. If we are ever involved in a merger, acquisition or sale of assets, we will notify you before your information is transferred.
Advertising, tracking and your choices
We advertise the App on platforms such as Google Ads and Apple Search Ads. To understand which campaigns work, we use AppsFlyer to measure installs and in-app events.
Apple defines “tracking” as linking data from our App with data collected by other companies for targeted advertising or advertising measurement. What we do meets that definition.
We ask for your permission first. iOS shows Apple's App Tracking Transparency prompt. Until you allow it, we do not access your advertising identifier (IDFA) and we do not track you as described above.
Declining costs you nothing. Every feature works the same whether you allow tracking or not. We will not pay you or reward you for allowing it.
You can change your mind at any time, in Settings, then Privacy and Security, then Tracking, on your device.
- You can opt out of AppsFlyer directly at appsflyer.com/optout.
- Measurement still happens without identifying you. Even if you decline, Apple's SKAdNetwork reports anonymous, aggregated campaign results to us. This does not identify you.
- We do not use device fingerprinting, and we do not attempt to identify you through any substitute identifier if you decline tracking.
Why we process your information
If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract, to produce the edits you request and to deliver subscriptions; consent, for processing face data and for tracking for advertising measurement, which you may withdraw at any time; legitimate interests, to keep the App secure, to prevent fraud and abuse, and to understand aggregate feature usage; and legal obligation, for tax and accounting, and to respond to lawful requests.
How long we keep information
- Uploaded images and face data are deleted within 30 days.
- Purchase and subscription records are kept while your subscription is active, and for as long as tax and accounting rules require.
- Analytics and attribution data are retained according to our analytics provider settings, and no longer than needed for the purposes described in this policy.
- Support emails are kept for up to 24 months.
- Edits you save to your device remain on your device until you delete them. We cannot delete those for you.
Your rights
Wherever you live, you may ask us to access the personal data we hold about you, correct it if it is wrong, delete it, object to or restrict how we use it, receive a copy in a portable format, or withdraw consent that you previously gave.
How to ask: email [email protected]. Please write from the address you contacted us with, or include enough detail for us to find your records. We respond within 30 days. We will never treat you differently for exercising these rights.
One thing to be aware of, because it is easy to assume otherwise: deleting an edit from your history in the App removes it from your device. It does not delete the copy held by us or by an AI provider during the retention period above. To have those deleted sooner, email us as described.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your national data protection authority.
Biometric information (Illinois, Texas and Washington)
This section applies if you live in a state with a biometric privacy law.
- What we collect: face data, meaning measurements of the location and shape of facial features, derived from photos that you upload.
- Why we collect it: solely to generate the expression edit that you request.
- Consent: by uploading a photo after being shown this policy, you consent to the collection and processing of that face data.
- No identification, no profit. We never use face data to identify or authenticate you, and we never sell, lease, trade or otherwise profit from it.
- Disclosure: only to the AI processing providers listed above, which act on our instructions and are contractually limited to that purpose.
- Retention schedule: face data is permanently destroyed within 30 days of upload, or sooner once the edit is complete, and in all cases within one year, which satisfies the destruction requirements of BIPA and CUBI.
- Storage: we protect face data using a reasonable standard of care, and at least as well as we protect other confidential information.
Users in California
Under the CCPA and CPRA we disclose the following.
Categories of personal information collected: identifiers; commercial information, meaning purchases; internet and app activity; approximate location; and visual information, meaning the photos you upload, including face data, which is sensitive personal information.
Sharing for cross-context behavioural advertising. We share identifiers and app activity with advertising partners, namely AppsFlyer and Google, for advertising measurement. Under California law this counts as “sharing”.
We do not sell personal information for money, and we do not share the photos you upload or your face data with advertising partners.
To opt out of sharing, decline the App Tracking Transparency prompt, or turn tracking off in Settings, then Privacy and Security, then Tracking. You may also email [email protected].
Sensitive personal information is used only to provide the feature you asked for. We do not use it to infer characteristics about you. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Children
The App is not intended for children under the age of 13, and we do not knowingly collect their personal information. In the European Economic Area and the United Kingdom, the App is not intended for anyone under the age of 16. If you believe that a child has provided us with personal information, email [email protected] and we will delete it.
International transfers
Our service providers operate in the United States and elsewhere. Where we transfer data out of the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
Cookies
The App does not use cookies itself. However, third-party code and libraries used by the App may use cookies or similar technologies to collect information and improve their services.
Security
We use encryption in transit, access controls and limited retention periods to protect your information. However, no method of transmission over the internet, and no method of electronic storage, is completely secure, so we cannot guarantee absolute security.
Links to other sites
The App may contain links to other sites. If you click a third-party link, you will be taken to that site. These sites are not operated by us, and we have no control over their content, privacy policies or practices. We encourage you to review the privacy policy of every site you visit.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will update this page and change the “Last updated” date. If a change significantly affects your rights, we will give notice in the App before the change takes effect.
Contact us
Email: [email protected]