Privacy Policy

Controller: Pyxel Bytes (sole proprietor Biel Carpi)
Address: Avinguda de les Nacions Unides 40, Escaldes-Engordany, Andorra
Email: privacy@magiqapp.com
Terms: https://magiqapp.com/terms

Magiq is an AI photo template and editing app. We take privacy seriously. This Policy explains what we collect, how we use it, and your choices.

1) Summary (plain English)

• Local projects. Your projects and versions are stored locally in the app. Uninstalling removes local app data. Exports saved to your device's Photos remain.
• Cloud processing. When you generate, Magiq sends the selected image, prompt, and settings to cloud infrastructure and AI model providers to create and deliver the result.
• Provider handling. Magiq does not sell generation content or use it to train a Magiq-owned model. A provider may temporarily retain, review, or use content for delivery, safety, abuse prevention, or service improvement according to the provider, service, region, and billing tier in use.
• Operational retention. Temporary files, result links, generation job records, and safety or abuse logs may have different retention periods. We minimize retention and delete or de-identify data when it is no longer needed, subject to provider settings and legal obligations.
• No data selling. No cross-app ad profiles. Minimal analytics for reliability.

2) Scope & Who We Are

This Policy applies to the Magiq mobile apps and our websites at magiqapp.com (the “Services”). Controller: Pyxel Bytes (Biel Carpi), Andorra - privacy@magiqapp.com.

3) What We Collect

You Provide

• User Content: photos/videos you choose to edit and the prompts you type, per edit session.
• Contact info (optional): name, email, such as for support or sign-in.
• Authentication (optional): email OTP or third-party providers, including Google, Facebook, and Apple. We receive basic profile info (name, email, user ID) to create/manage your account.
• Purchases: subscription/top-up purchase receipts from Apple or Google.

Collected Automatically

• Usage Data: screens viewed, feature use, timestamps, device and app version, locale.
• Identifiers: an app-instance ID; if you sign in, a Magiq user ID to manage credits and purchases.
• Diagnostics (not linked): crash logs and performance metrics.
• Device tokens: FCM/APNs token for push notifications, if enabled.
• Referral data: your referral codes and relationships when you invite others or sign up via a code.
• Advertising delivery data (Free tier): limited device/interaction data required by ad SDKs to serve and measure interstitial ads. We do not build cross-app ad profiles.

App Store Privacy (indicative)

• Data Linked to You: Purchases; User Content submitted for processing; Usage Data; Contact Info if provided; Identifiers (user/app instance ID); Device tokens; Referral data.
• Data Not Linked to You: Diagnostics.
• Ads: Interstitial ads may use on-device signals to deliver and measure ads. We do not track you across other companies' apps and websites.

4) How We Use Data (Purposes)

• Provide the Service: perform edits, show variants, export results.
• Payments & credits: validate purchases, maintain a minimal credit ledger, restore access.
• Referrals & rewards: track referral codes and credit rewards.
• Push notifications: credits, tips, and feature updates, if enabled; you can opt out.
• Reliability & safety: crash/performance metrics, fraud/abuse prevention.
• Support & notices: respond to requests; inform you about changes.
• Legal compliance: accounting, audits, regulatory obligations.

Legal bases (where applicable): contract, legitimate interests, and legal obligation.

5) How Editing Works & Retention

Face Data & Images

We may use face detection or segmentation to localize effects, such as lighting or skin tones. Magiq does not intentionally create biometric identifiers or perform identity recognition. Images, prompts, and settings are processed by cloud infrastructure and AI model providers. Their handling, including any temporary retention or review for safety or service improvement, depends on the provider, service, region, and billing tier in use.

Magiq deletes app-controlled transient processing copies and delivery links when they are no longer needed. Generation job records and provider safety or abuse logs may be retained for different operational or legal periods. Account deletion covers data Magiq controls, except information that must be retained by law; it cannot remove data a provider is independently required or permitted to retain under its applicable terms.

Processing Flow

• When you tap Generate, we send your selected image, prompt, and options to cloud service providers and return a result.
• We use delivery links and operational records to complete, troubleshoot, secure, and account for the generation.
• Projects and accepted results are saved locally in the app and to Photos if you choose. Cloud providers may retain limited content or logs as described in this Policy and their applicable terms.

6) Storage Locations

• Your device: project files and versions in the app's sandbox; exports in the Photos app if enabled.
• Cloud: generation inputs, outputs, delivery files, and job or safety metadata may be processed or temporarily retained by Magiq infrastructure and service providers according to operational need, provider settings, and legal obligations.

7) Sharing & Service Providers

We do not sell your data. We share data only with service providers acting on our instructions and under contract, such as:

• infrastructure & storage (hosting, short-lived result delivery),
• AI model providers that process generation inputs and outputs under the service and billing tier in use,
• analytics/diagnostics, such as Crashlytics/Performance,
• app store & payment platforms, including Apple App Store and Google Play,
• authentication providers, including Google, Facebook, and Apple, if you choose those sign-ins,
• customer support tools, if used,
• ad delivery, including interstitial ads on Free tier.

A current list of subprocessors is available on request at privacy@magiqapp.com.

8) Cookies, SDKs, Analytics, Ads

We use minimal analytics/diagnostics, such as Firebase/Crashlytics, to understand reliability and performance. Interstitial ads (Free tier): we do not build cross-app advertising profiles.

iOS ATT/IDFA: We do not access the iOS Advertising Identifier (IDFA) and do not serve personalized, cross-app ads. If this ever changes, we will first request App Tracking Transparency permission and update this Policy.

9) Your Choices & Controls

• Photos/Camera permissions: manage in system settings.
• Push notifications: manage in-app or disable in system settings; opt out of categories such as credits, tips, and updates.
• Delete local data: in-app controls to clear cache or delete projects; uninstalling removes local app data.
• Exports: saving to the Photos app keeps results outside Magiq.
• Account deletion (in-app & web): delete your account in-app at Settings -> Account -> Delete account or via https://magiqapp.com/delete-account. We will delete associated data we are not legally required to keep and confirm within required timelines.

10) Security

We use technical and organizational safeguards intended to protect information, including encryption in transit and access controls where applicable. No method is completely secure.

11) Retention

• Local projects: remain on your device until you delete them or uninstall.
• Generation content and delivery files: retained only as needed to process, deliver, troubleshoot, secure, and account for the request, subject to provider-specific settings.
• Generation job, safety, and abuse records: retained for the operational or legal period applicable to the record and provider.
• Purchases & accounting: retained as legally required.
• Diagnostics/analytics: retained per service defaults to observe trends.

12) International Transfers

We may process data in countries outside your own. Where required, we use appropriate safeguards, such as Standard Contractual Clauses or equivalent.

13) Your Rights

Depending on your region, such as Andorra, EU/EEA, UK, or California, you may have rights to access, correct, delete, port, and object/restrict certain processing.

• Andorra: Contact the Agència Andorrana de Protecció de Dades (APDA) or us at privacy@magiqapp.com.
• EU/EEA/UK: You may lodge a complaint with your supervisory authority.
• CCPA/CPRA (California): We do not sell or share personal information for cross-context behavioral advertising.

To exercise rights, email privacy@magiqapp.com. We will verify your request and respond within required timeframes.

14) Children

Magiq is not directed to children under 13, or the minimum age required in your region. Some AI providers or features may require users to be 18 or older and may be unavailable until that requirement can be enforced. If we learn a child provided personal data, we will delete data we control as required.

15) Changes

If we make material changes, we will notify you in-app or on our site and update the “Effective date.”

Contact

Company: Pyxel Bytes
Address: Avinguda de les Nacions Unides 40, Escaldes-Engordany, Andorra
Email: privacy@magiqapp.com

Stores Privacy (summary)

• Linked to you: Purchases; User Content you submit for processing; Usage Data; Contact Info if provided; Identifiers; Device tokens for push; Referral data.
• Not linked: Diagnostics.
• Ads: Interstitial ads (Free tier). No cross-app tracking by us; ad SDKs may process signals to deliver and measure ads.
• No model training on your content.