This Privacy Policy explains how the Fofoto app ("app") handles your personal data, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and other applicable laws.
By using the app, you confirm that you have read and understood this policy.
1Who controls your data
The app is developed and operated by Redarock (57.227.642 RODRIGO AUGUSTO FERREIRA FERNANDES, CNPJ 57.227.642/0001-45, Rio de Janeiro, Brazil), which is responsible for decisions about the processing of your personal data.
For any privacy matter, including contacting our data protection officer, use the email below.
Contact: redarock.apps@gmail.com
2Data we collect and why
- Anonymous identifier created by the app, device platform and usage dates: used to keep your access and subscription without asking you to sign up. It contains no name, email or phone number.
- Photos you upload and the images and videos generated from them: used to create the images and videos you ask for and show your history. Photos sent for each creation are deleted automatically within 72 hours; results are kept until you delete them or your account.
- Saved people (a name or nickname you choose, such as "my mom", and up to 5 reference photos each): used to reuse those photos in new themes with one tap. They are kept until you delete them or your account.
- Text and files you submit to artificial intelligence features: used to generate the responses you requested.
- Purchase history and subscription status: used to unlock purchased features. Payment details (such as cards) are handled by Google or Apple and never reach us.
- Content reports you submit: used to review and fix incorrect or inappropriate content.
- Device identifier for notifications: used to send notifications you have allowed.
- Technical data and crash reports (device model, OS, app version): used to find and fix errors.
- Technical usage records (creations requested, failures, purchases, reports and errors, without photo content), tied to your identifier: used to investigate and fix problems and prevent abuse. They are kept for 30 days and then deleted automatically.
We do not collect precise location, contacts, photos, microphone or camera data unless listed above.
3No sign-up
The app does not ask for your name, email or phone number. Your account is an anonymous identifier created automatically on your device.
4Legal bases
- Performance of a contract: to provide the app features.
- Legitimate interests: for security, fraud prevention and improving the app, always respecting your rights.
- Legal obligations: to keep records required by law.
- Consent: to send your photos to Google’s artificial intelligence (Gemini) and, as a result, transfer them outside Brazil. Consent is requested on a dedicated screen before the first upload and can be withdrawn in Settings at any time.
5Who we share data with
We do not sell your data. We only share it with service providers that operate the app on our behalf, under contract and with data protection obligations:
6Photos, artificial intelligence and consent
- Before the first upload, the app shows a screen asking for your consent to send photos to Google’s artificial intelligence (Gemini) and for your confirmation that you are 18 or older. Without it, no photo is sent for generation. We store the version of the accepted text and the date. You can withdraw consent in Settings; after that the app stops generating images until you accept again.
- Photos go from our server to the Gemini API, on the paid tier. On that tier, under the Gemini API terms, Google does not use the photos or the results to train its models and keeps logs for up to 55 days only to detect abuse.
- In the Custom feature, the uploaded photo and the result also go through an automatic safety check (Google Cloud Vision) that blocks adult or violent content.
- We do not run facial recognition or build biometric templates from your face: the photo is used only to generate the image you asked for.
- Every generated image carries the visible "Made with AI" mark and the invisible SynthID watermark that Google embeds in images created by Gemini.
7Photos of other people, children and deceased people
When you upload a photo of someone else, you confirm that they authorized it. For photos of children and teenagers, you confirm that you are their parent or legal guardian, or have their permission, and we handle those photos in the best interest of the child. For photos of a deceased person, you confirm that you are their spouse or relative, or have their permission.
If you appear in an image created by someone else without your permission, write to the email below: we will remove the content and may block the responsible account.
Contact: redarock.apps@gmail.com
8Reports and moderation
When you report a result, it disappears from your history immediately and we keep a copy, with the reason you gave, for up to 90 days for review. We review reports within 48 hours. Child sexual abuse material is blocked, the account is banned and the case is preserved for reporting to the authorities.
9International transfers
Our providers may store and process data on servers outside Brazil, such as in the United States. In those cases, transfers are made with appropriate safeguards as required by articles 33 to 36 of the LGPD.
10How long we keep data
- Photos sent for each creation: deleted automatically within 72 hours.
- Saved people photos and generated images and videos: while the account exists, or until you delete them in the app.
- Reports and the copy of the reported content: up to 90 days.
- Technical usage records: 30 days.
- When you delete the account in the app, data is erased immediately; email requests are completed within 30 days.
- App access logs are kept for 6 months, as required by the Brazilian Internet Civil Framework (Law No. 12,965/2014, art. 15).
- Data may be kept longer only when required by law, to defend legal claims, or in anonymized form.
11Your rights
You may request at any time:
- Confirmation that we process your data and access to it.
- Correction of incomplete, inaccurate or outdated data.
- Anonymization, blocking or deletion of unnecessary or unlawfully processed data.
- Data portability.
- Deletion of your data and account.
- Information about who we share your data with.
- Withdrawal of consent, where applicable.
12How to delete your data
See how to erase the data on your device and request deletion of the data we keep at: https://redarock.com.br/en/apps/fofoto/delete-account
13Security
We use technical and organizational measures to protect your data, such as encrypted connections (HTTPS), access control and database security rules. No system is completely secure, but we work to reduce risks and will report relevant incidents as required by law.
14Children
The app is not directed to children under 18, and we do not knowingly collect data from people under that age. If you are a parent or guardian and believe a child has given us data, contact us so we can delete it.
15Changes to this policy
We may update this policy. The last update date is shown at the top of this page, and material changes will be communicated in the app.
16Contact and complaints
Contact us at the email below. You also have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD): https://www.gov.br/anpd
Contact: redarock.apps@gmail.com