Privacy Policy

Who we are

Wedding Shot Studio (“the app”) is made by semihsoft, an independent developer based in Türkiye (“we”, “us”). semihsoft is the data controller for the personal data described in this policy.

Contact for anything about privacy: semihbilir33@gmail.com

This policy covers the Wedding Shot Studio apps for iPhone and Android and the website weddingshotstudio.app. For users in Türkiye, it is also our information notice under Article 10 of the Personal Data Protection Law No. 6698 (KVKK).

What we collect and how long we keep it

Your album on our server

Every image we create for you is saved in a private storage area on our server (Supabase, Frankfurt, Germany), linked to your account. When you sign in on a new phone, the app downloads your album again. Only you can open these images through the app. Our team can view an image only when it has been reported, or within 2 days of its creation to fix a problem. Deleting an image from the album deletes it from our server too, and deleting your account deletes all of them.

Kept only on your device

Some data never leaves your phone: a copy of your original photo used for the before/after comparison, the couple profile (names, dates of birth and wedding date, if you fill it in) and your settings. We can't see this data. Your phone's own backups (iCloud or Google) may include it, depending on your settings. “Download my data” in the app exports it.

What we never do

We never share your photos, the images you create or the instructions sent to the AI model with ad or analytics partners. We never use them for advertising or to train AI models. We don't collect your contacts or your precise (GPS) location.

How an AI creation works

1. You pick a photo. Before your first creation, the app explains what happens and asks for your consent.
2. The app shrinks the photo and sends it over an encrypted connection to our server, hosted by Supabase in Frankfurt, Germany. Our server doesn't save it to disk, the database or logs.
3. Our server passes the photo and the model instructions to fal.ai, which runs the image models (including FLUX.1 Kontext by Black Forest Labs) and an upscaler. We tell fal.ai not to store the request and to delete the finished image within 24 hours.
4. Our server saves a copy of the finished image in your private album. Your phone downloads the image directly from fal.ai's servers, so fal.ai sees your IP address, and saves it in the app.

An automatic safety filter blocks images it flags as unsafe. You can report any image with the flag button on the result screen.

Face photos

Your photos show your face. We use them only so the AI model can keep your likeness in the new image. We don't use them to identify you, and we don't create face templates, face prints or other biometric identifiers.

Only upload photos of yourself, or of people who agreed. Don't upload photos that show anyone under 18. The baby studio creates a fictional child from the parents' photos; it never needs a photo of a real child.

Ads, analytics and your choices

The free version of the app shows ads from Google AdMob: small banners, full-screen ads between some steps, and rewarded ads that you choose to watch in exchange for credits or other rewards. Premium plans and the Remove Ads purchase turn off banner and full-screen ads.

We also use:

• Firebase (Google): Analytics for usage statistics, Crashlytics for crash reports, and Remote Config to adjust settings such as rewards without an app update.
• Meta SDK (Facebook and Instagram) and TikTok SDK: to measure whether our ads on those platforms lead to installs and purchases, and to show our ads to people likely to be interested.

These partners receive device identifiers, app events (such as install, app open, purchase or rewarded ad watched), device information and your IP address. They never receive your photos, the images you create or the instructions sent to the AI model. Each partner uses this data under its own privacy policy and may combine it with data it already has about you.

Your choices

• iPhone: the app asks for permission to track you. If you don't allow it, partners don't receive your advertising ID and ads aren't personalized based on tracking. You can change this any time in Settings → Privacy & Security → Tracking.
• EU, UK and Switzerland: before we show personalized ads or share data with ad and measurement partners, the app asks for your consent with Google's consent tool. You can change your choices any time from the app's settings.
• Android: you can delete or reset your advertising ID in Settings → Google → Ads.
• If you say no, you still see ads, but they aren't personalized. They may be based on the app's content and your approximate location.

Legal bases

We collect data electronically, through the app, the website and email. Under the EU and UK General Data Protection Regulation (GDPR) and KVKK, we rely on:

• Contract: running the app, your account, credits and purchases (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• Your explicit consent: sending your photos to our AI provider and transferring them abroad; and, where the law requires consent, personalized ads, tracking, analytics and sharing data with ad and measurement partners (GDPR Art. 6(1)(a); KVKK Art. 5(1) and Art. 9). You can withdraw consent at any time: for photos by not creating images and deleting your account, for ads and tracking in the app or your device settings. Withdrawal doesn't affect processing that already happened.
• Legitimate interests: security, preventing abuse of free credits and rewards, reviewing reports, fixing crashes and showing non-personalized ads where the law allows (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• Legal obligations: keeping or disclosing data when the law requires it (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).

Who we share data with

We work with the companies below. Supabase, fal.ai, RevenueCat and Cloudflare process data only on our behalf. Google, Meta and TikTok also use the data they receive under their own privacy policies, for example to show and measure ads.

We may also disclose data when the law requires it, or to protect the rights and safety of people. If the app is ever transferred to a new owner, your data would move with it under this policy, and we would tell you first.

International transfers

Some providers process data outside Türkiye and the European Economic Area, mainly in the United States. For these transfers we rely on the safeguards in the providers' data processing terms, such as the EU Standard Contractual Clauses, and on your explicit consent for sending photos to our AI provider.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you and send you a copy;
• correct it;
• delete it;
• stop or limit certain uses, or object to them;
• give you your data in a portable format.

Under KVKK Article 11 you can also ask who we transferred your data to, and ask us to notify them of corrections or deletion. Under GDPR you can withdraw consent at any time.

Write to semihbilir33@gmail.com. We may ask for details to confirm the account is yours, such as the email you registered with. We answer within 30 days.

You can complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU the authority in your country.

California residents

You have the right to know, delete and correct personal information, and not to be discriminated against for using these rights. We don't sell personal information for money. Sharing device identifiers and app events with ad partners for targeted advertising may count as “sharing” under California law. You can opt out by not allowing tracking on iPhone, by deleting your advertising ID on Android, or by writing to us. We never share your photos or images, and we don't use sensitive personal information to infer characteristics about you.

Children

Wedding Shot Studio is not for children. You must be at least 13 years old to use it. If the law of your country sets a higher age for consenting to data processing (for example 16 in some EU countries), you need permission from a parent or guardian below that age. If we learn that a child under 13 has used the app, we delete the account. Ads in the app are limited to content suitable for ages 13 and up.

Security

All connections use encryption (HTTPS). Each user can reach only their own records on our server, and our secret keys stay on the server. We store as little as we can and delete it on a schedule. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach when the law requires it.

This website

weddingshotstudio.app uses no cookies and no analytics. It saves your language choice in your browser. Cloudflare hosts the site and processes your IP address to deliver it.

Changes to this policy

If we change this policy, we update the date at the top. If a change is significant, we also tell you in the app before it applies.

Contact

semihsoft, Türkiye. Email: semihbilir33@gmail.com