Privacy Policy
The short version
- Your photos are only visible in your account. BackPix has no public gallery or feed.
- We do not sell your data, and we do not use your photos to train AI.
- BackPix does not ask for your location.
- The photo of each place is deleted after 30 days. The rest stays until you delete it or your account.
- We keep basic usage statistics to run and improve BackPix. Cookies, session replays and ad measurement only run if you say yes.
The short version helps you read the rest; the full policy below is what applies.
Who is responsible
The data controller is BackPix. Contact: support@backpix.app.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address, and your name if you sign in with Google | Your account; confirming it is yours; receipts and service messages | Contract |
| Photos of your face, and of people you add | To create photographs that look like you. We do not use them to recognise or identify anyone. | Contract; for people you add, you confirm they agreed |
| The photo of the place you frame, and the time it was taken | To place you in that scene with the right light and perspective | Contract |
| The photos BackPix makes for you, and any instructions you type for a shot | So you can see, save and share them, and ask for changes | Contract |
| Purchases: what you bought, when, the amount and your country | Granting credits, handling payment problems, tax and accounting | Contract; legal obligation |
| A random device id, and a one-way hash of your IP address and email | Stopping the free credits being claimed over and over | Legitimate interest |
| Technical logs: IP address, browser and times of requests | Keeping the service secure and fixing errors | Legitimate interest |
| A push notification address, if you turn notifications on | Telling you when your photos are ready | Consent |
| Messages you send us | Answering you, and handling payment problems and reports | Contract; legitimate interest |
| Basic usage statistics: screens and buttons used, shots made, credits used and purchases, linked to a random account id and never to your name, email or photos | Understanding how BackPix is used, fixing what is confusing or broken, planning costs | Legitimate interest (you can object at any time) |
| Recognising your visits on this device over time, and anonymised session replays with photos and typing hidden | Finding what is confusing or broken | Consent (cookie choices) |
| Which ad brought you, and whether you signed up or bought | Measuring our advertising | Consent (cookie choices) |
We only receive the photos you take in BackPix or pick yourself; we do not browse your photo library. Your email and photos are needed to provide BackPix; notifications, analytics cookies and ad measurement are optional, and BackPix works without them. Our front page counts visits without cookies and without identifying you.
How the AI uses your photos
To make a shot, your selfies and the photo of the place are sent to image-generation models run by our providers, and a description of the scene is planned by language models. Your name and email address are not sent with them. An AI also checks each result for quality before it reaches you. Under their terms, our providers may use your photos only to return the result to us and, for a limited time, to guard their service against abuse, and not to train their models.
Who can see your photos
Your photos are only visible in your account. Apart from our providers processing them as described above, they leave your account only when you save or share them yourself. We look at an account's content only when you ask us to, for example to solve a problem you reported, or when we must investigate a report of illegal content or a legal request.
Automated decisions
An automated check decides whether a new account receives free credits, based on signs of repeat claims. It affects nothing else. If you think it got it wrong, write to us.
Who processes it for us
- Google Firebase / Google Cloud: accounts, database, storage and servers, in the EU (Belgium).
- fal.ai (USA): runs the image-generation models.
- OpenRouter (USA) and the AI model providers it routes to: plans each photograph from the scene, and checks the results.
- Stripe and Link (Ireland / USA): payments. They are also independent controllers for fraud prevention and, when Link acts as the reseller of your payment, for the sale, its receipt and its tax.
- Your browser's push service (Apple, Google or Mozilla): delivers notifications, if you turn them on.
- PostHog (EU): usage statistics; cookies and session replays only with your consent.
- Meta Platforms Ireland: ad measurement, only with your consent.
Each works under a contract that limits it to providing its service to us. Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. We do not sell your data or share it with anyone for their own marketing.
We may disclose data where the law requires it, for example to a court or the police on a valid legal request. If BackPix is transferred to another company, for example one we set up to run it, your data moves with it under this policy, and we will tell you.
How long we keep it
- The photo of the place: 30 days, then deleted automatically.
- Your selfies, the people you added, and the photos BackPix made: until you delete them or your account.
- Your account: until you delete it (Settings → Delete my account).
- The hashes used to stop free-credit abuse: 12 months.
- Technical logs: about 30 days.
- Messages you send us: as long as needed to deal with them and any follow-up.
- Payment records: as long as Italian tax law requires (currently 10 years).
- Usage statistics: up to 12 months.
Security
Data travels encrypted over HTTPS and is stored by Google Cloud in the EU. Access rules let each account reach only its own data, and card details are handled by Stripe alone. No system is perfectly secure; if a breach put your data at risk, we would tell you and the authority as the law requires.
Emails and notifications
We email you about your account and purchases: confirming your address, receipts and important changes to BackPix or these policies. We may occasionally tell you about new BackPix features or offers, as the law allows; every such email lets you unsubscribe. Notifications only arrive if you turn them on, and you can turn them off in your phone's settings.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to how we use it, and withdraw consent at any time (Settings → Cookie choices). Deleting your account in Settings deletes your photos and account data, except the records the law requires us to keep. Write to support@backpix.app from your account's email address for anything else; we may ask you to confirm it is you, and we answer within the time the law sets. You can also complain to the Italian data protection authority, Garante per la protezione dei dati personali, or the authority where you live.
Age
BackPix is for people aged 18 and over. If you believe someone younger has an account, write to us and we will delete it.
Cookies
What we store on your device, and your choices, are explained in our Cookie Policy.
Changes
We may update this policy when BackPix, our providers or the law change. If a change matters, we will tell you in the app or by email before it takes effect.