Privacy policy

Last updated 28 September 2026

Product Photo Studio Pro (the app) turns photos of the things you sell into listing images. It is made by Tensor Interactive (we, us). This policy explains what the app and our servers collect, why, who else handles it, how long we keep it and how you can delete it. If you have a question, email [email protected].

What we collect and why

Your email address

You sign in with a one-time 6-digit code that we email to you. There are no passwords. We use your email address to send those codes and to identify your account.

We store each code only as a hash, and it expires after 10 minutes. When you ask for a code, we also record the IP address the request came from and any wrong codes entered, so we can stop abuse. Codes and these records are deleted within a day.

Your photos

When you add a photo, from the app's camera or from your library, the app makes a copy on your phone: at most 3000 pixels on its long edge, re-encoded as a JPEG, without the location and camera details stored in the original. Only that copy is uploaded. You choose library photos with the iOS photo picker, so the app sees only the photos you pick, not the rest of your library.

On our servers we make the cutout (the mask that separates your item from its background). We store the photo, its cutout, your touch-up edits, results, previews and exports so that you can come back to them. Cutouts are made on our own servers; no other company sees your photos for this.

AI settings and backdrops you describe

AI settings are optional. Only when you choose one for a photo, we send OpenAI a reduced copy of that photo (at most 1024 pixels on its long edge, with metadata removed) and any notes you type, so it can plan a background that matches the photo's angle and light. The request that then creates the background is text only and does not include your photo. Your item in the finished image is made of your own pixels, not generated ones.

If you create your own backdrop in Looks, the name and description you type are sent to OpenAI to generate it. No photo is sent for this.

We send these requests with OpenAI's response storage turned off. OpenAI processes this data as our service provider under its API terms. The backgrounds it returns are stored with your other studio files.

Purchases and credits

If you buy a subscription or credits, Apple handles the payment. We never see your card or payment details. We keep a record of the credits granted to you and spent, and of your subscription status, so the app can show your balance and apply what you bought.

Limits on free use

Each sign-in identity gets a small number of free AI settings. So that this allowance cannot be claimed again by deleting and recreating an account, we keep a one-way keyed code derived from your sign-in identity, together with a count of the free AI settings used. We keep this after you delete your account. We also keep AI setting usage counters, keyed the same way, for 31 days to apply daily and monthly limits. Neither contains your email address, your photos or your notes.

Server logs

Our servers record requests, including the IP address, the time and the address requested, for security and troubleshooting. These logs are kept for a limited period, normally no more than 30 days.

On your phone

The app keeps the shots you take, uploads that have not been sent yet, unfinished edits and a cache of images on your phone, so your work survives closing the app or losing your connection. Your sign-in is kept in the iOS Keychain.

• Camera: used only to take product photos in the app.
• Photos (add only): used only to save the exports you ask to save. This permission does not let the app read your library.

What we do not do

• No advertising, and no analytics or tracking tools in the app.
• We do not sell or rent your data, or share it for advertising.
• We do not track you across other companies' apps or websites.
• The app does not ask for your location.

Who else handles your data

We share data only with the service providers below, only for the purpose shown, or where the law requires it.

• Cloudflare (R2 storage)Stores your photos, cutouts, results, backgrounds and exports privately. The app reaches them through short-lived signed links.
• OpenAIPlans and creates AI settings and backdrops you describe, only when you ask. Receives the reduced photo copy and your notes, or your backdrop description.
• Twilio SendGridDelivers the sign-in code emails. Receives your email address and the code.
• AppleDistributes the app and processes purchases and subscriptions under Apple's own terms.

Where your data is processed

Our servers are in Germany. The service providers above are based in the United States, so your data may also be processed there and in other countries where they operate.

How long we keep it

• Your account and email address: until you delete your account.
• Photos, cutouts, results, backgrounds and exports: until you delete them, their shoot or your account.
• Credit and subscription records: until you delete your account.
• Sign-in codes, request addresses and wrong-code records: deleted within a day.
• AI setting usage counters: 31 days.
• The free-allowance code: kept after your account is deleted, so the free allowance is not granted again.
• Server logs: a limited period, as described above.

OpenAI may keep API request data for a limited time for abuse monitoring, under its own policies.

Deleting your data

• A photo or a shoot: press and hold it, or use the trash button while reviewing a photo. This removes the photo with its results, exports and files.
• Your account: go to Account, then Delete account. This removes your account, photos, results, exports and stored files straight away, together with the drafts kept on this device.
• Credits already used are not returned when you delete photos or your account.
• Deleting your account does not cancel an App Store subscription. Cancel it in the Settings app under your Apple Account, then Subscriptions.
• You can also ask us by email to delete your data.

Your rights

Depending on where you live, for example under the GDPR, the UK GDPR or Thailand's Personal Data Protection Act, you can ask to access, correct or delete your data, to receive a copy of it, and to object to or restrict how we use it. Email [email protected]. You also have the right to complain to your data protection authority.

We rely on these legal bases: providing the service you asked for (your account, photos, AI settings and purchases); our legitimate interests in keeping the service secure and preventing abuse (sign-in limits, server logs and the free-allowance code); and your consent where iOS asks for it (camera and Photos).

Security

Data travels between the app and our servers over HTTPS. Stored files are private and can be reached only through short-lived signed links, and every request is limited to your own account.

Children

The app is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes

When our practices change, we update this page and the date at the top.

Contact

Tensor Interactive, [email protected]