Privacy Policy • Stentoo AI

Introduction

Stentoo AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Stentoo AI app, you agree to the collection and use of information as described in this policy.

Data We Collect

We collect only what is necessary to provide the service.

Category	What	Why
Account	Email address, encrypted password	Authentication and account management
Photos	Images you upload for stencil generation	Processed by AI to generate your stencil, then deleted after 30 days
Generated stencils	AI-generated output images	Stored for 30 days so you can access and download them
Usage data	Credit balance, generation history, app preferences	Service operation and subscription management
Subscription	Plan type, renewal status (via RevenueCat)	Access control and billing management
Device	iOS version, device model (anonymous)	Crash reporting and compatibility

        We never collect: payment card numbers, government IDs, location data, contacts, or browsing history. Payment processing is handled entirely by Apple.
      

How We Use Your Data

Service delivery — generating stencils, managing your credits, and storing your outputs.
Account management — authentication, password recovery, and subscription status.
Service improvement — aggregate, anonymised usage analytics to understand how features are used.
Communication — transactional emails (account confirmation, password reset). We do not send unsolicited marketing emails.
Security — detecting and preventing abuse, fraud, or unauthorised access.

We do not sell, rent, or share your personal data with third parties for advertising purposes.

Third-Party Services

We use the following trusted sub-processors to operate the service:

Supabase

Database, authentication, and file storage. Your account data and generated images are stored on Supabase infrastructure (AWS).

Google Gemini

AI image generation. Uploaded photos are transmitted to Google's API to produce stencil outputs. Google's data processing terms apply.

RevenueCat

Subscription and entitlement management. RevenueCat receives your Apple-assigned anonymous subscriber ID — not your email or payment details.

Apple App Store

All payments are processed by Apple. We receive only confirmation of your subscription status — never your card details.

Each sub-processor is bound by data processing agreements and applicable privacy law. We do not engage any sub-processors beyond those listed above for processing your personal data.

Data Retention

Uploaded photos: Deleted immediately after stencil generation is complete.
Generated stencils: Stored for 30 days from creation, then permanently deleted.
Account data: Retained for the lifetime of your account. Deleted within 30 days of account deletion.
Usage logs: Anonymised and aggregated after 90 days.

You can delete your account at any time from the App's settings. Upon deletion, all your personal data is scheduled for permanent removal within 30 days.

Security

We implement industry-standard security measures including:

TLS encryption for all data in transit.
Encrypted storage for account credentials (bcrypt hashing via Supabase Auth).
Row-level security policies ensuring users can only access their own data.
Regular dependency updates and security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the data we hold about you.
Correction — request correction of inaccurate data.
Deletion — request deletion of your account and associated data.
Portability — request your data in a machine-readable format.
Objection — object to certain processing activities.

To exercise any of these rights, contact us at hello@stentoo.com. We will respond within 30 days.

Children's Privacy

Stentoo AI is not directed at children under the age of 17. We do not knowingly collect personal information from anyone under 17. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Policy Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notice or email at least 7 days before the change takes effect. Your continued use of the App after that date constitutes acceptance of the revised policy.

The date of the most recent revision is shown at the top of this page.

Contact

For privacy-related questions, requests, or concerns:

Email: hello@stentoo.com
App: Stentoo AI (iOS)

We aim to respond to all privacy inquiries within 5 business days.