Introduction
This Privacy Policy explains how Umax AI, a mobile application by Mehmet Sancaktutan & Burak Taş, handles your information. We built Umax AI to respect you: we don't sell your data, we don't show ads, and we don't track you across other companies' apps.
By using Umax AI, you agree to the practices described here. If you do not agree, please discontinue use of the app.
Information We Collect
We collect only what the app needs to work well for you. This falls into two groups: information you provide, and information collected automatically.
Information You Provide
This is the information you enter or submit directly while using the app:
- Photos you submit: Photos you explicitly upload for AI analysis, and the images generated from them. No biometric templates are created.
- Results & preferences: Analysis results, scores and tips, plus your onboarding preferences.
- Account & purchases: User ID, email if you sign in, purchase history and credit balance.
Automatically Collected Information
To keep the app secure and reliable, limited technical information — such as your subscription and entitlement status and basic device information necessary for the app to function — may be processed. We do not use advertising identifiers and we do not build advertising profiles.
How AI Processing Works
Photos and prompts you submit travel over an encrypted connection to our backend and are forwarded to OpenAI solely to generate the result you requested. Per OpenAI's API policy, this data is not used to train their models and images are not retained beyond short abuse-prevention windows.
Purchases and Subscriptions
All purchases are processed by Apple through the App Store. RevenueCat helps us validate and manage subscription status. We never receive or store your payment card details — Apple handles billing.
Analytics
Umax AI does not use third-party advertising or cross-app tracking analytics. Any analysis we perform is limited to aggregate, privacy-respecting diagnostics used to keep the app stable and improve reliability. We do not sell analytics data.
Authentication
If you sign in, authentication is handled securely through Supabase and, where you choose it, Sign in with Apple or Google. We receive a user identifier and, optionally, your name or email. Each account can only access its own data, enforced by row-level security.
Backend Services
Your data is stored using Supabase, which provides our database, authentication, and secure file storage. Data is transmitted over encrypted connections (HTTPS/TLS), and access is restricted so that each account can reach only its own records.
Third-Party Services
We rely on a small number of trusted providers to operate the app. Each processes data only as needed to deliver its function:
- Supabase — Secure storage, authentication, and per-user data isolation.
- OpenAI — AI analysis and image generation for the results you request.
- RevenueCat & Apple — Subscriptions, credits, and billing validation.
These providers may process data outside your country. We choose providers that maintain appropriate security and data-protection standards.
Data Retention
We keep your data for as long as your account is active and you continue to use the app, so your history and settings remain available to you. When you delete your data or account, the associated records are removed as described below.
Data Deletion Requests
You can permanently delete your data at any time from within the app: Profile → Delete My Data. This removes your profile and associated content from our systems.
Deleting the app from your device does not cancel any active subscription. If you need help, contact us at support@aurelionlabs.digital and we will assist with your request.
Children's Privacy
Umax AI is not directed to children under 17 (or the minimum age required in your region). We do not knowingly collect personal information from anyone under that age. If you believe a child has provided us data, contact us and we will delete it.
International Users
You can use the app from anywhere in the world. Because we work with international providers, your information may be processed in countries other than your own. Where applicable law (such as the GDPR or Turkey's KVKK) grants you rights to access, correct, export, or erase your data, we honor those rights — most can be exercised directly in the app, and the rest by contacting us.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated within the app where appropriate.
Contact
If you have questions about this policy or your data, contact us at support@aurelionlabs.digital.