Privacy Policy

The data controller is Emmanuele Santo, who publishes Narciso.

For any privacy question or to exercise your rights, write to privacy@narciso.app.

Photos for PRO looks. When you apply a PRO look, the chosen photo (downscaled to 2048 pixels at most) is sent to our processing service in the EU and to OpenAI, which creates the result. The photo and the result are stored in Supabase Storage, in Frankfurt (EU), for 30 days to prevent abuse and for moderation checks; then they are deleted automatically. We do not use them for anything else.

Photos edited on your phone. Face, Shape, Retouch, films, adjustments and text run entirely on your device: those photos are never sent to us or to anyone else.

Device identifier. The app creates a random identifier, not linked to your name, to recognise your plan, your credits and your purchases and to limit abuse of the PRO look service.

Account (optional). If you choose to sign in, we process your email address, or the identity Apple or Google passes to us (an identifier and, if you share it, your email address), through Supabase Auth (Frankfurt, EU). It lets you find your plan and credits on any device. You can use Narciso without an account.

Purchases. Subscriptions and credit packs are paid through the App Store or Google Play: the store handles your payment details and we never see them. RevenueCat receives the transaction receipts from the store, linked to the app identifier, to activate PRO and your credits.

Usage analytics (PostHog, EU). Only if you consent: events about how the app is used (for example app opened, look created, photo saved, PRO screen viewed), linked to the app identifier. Never photos, names or contacts.

Crash reports (Sentry, EU). When the app crashes we collect technical data about the error: device model, system and app version, the error trace and the app identifier.

Install count. On first launch the app sends our EU service, once, the install date, the system (Android or iOS), the app version and the phone’s language, to count installs. It sends no identifier: the data is not linked to you or your device and we do not keep it with your IP address.

Ad measurement (AppsFlyer and Meta). Only with your consent, which we ask for on a screen in the app and, on iPhone, with the App Tracking Transparency system prompt. To learn which campaign led to an install or a purchase we use the device advertising identifier and the install and purchase events, which RevenueCat forwards to both partners. If you do not consent, the advertising identifier is not collected and both SDKs are told you declined (Limited Data Use mode for Meta).

Emails you send us. If you contact us we use your address and your message to reply.

This website. narciso.app uses no cookies and no tracking tools. Our hosting provider (Vercel) records technical data, such as your IP address, in server logs for security and operation.

Photos may show your face, but we do not use them to identify you: we do not build biometric templates and we do not compare the faces of different people.

We use providers that process data on our behalf as processors (Art. 28 GDPR), bound by contract and only for the tasks listed.

Apple and Google process purchase data as independent controllers, under their own privacy policies.

Some providers (OpenAI, Railway, RevenueCat, Vercel and, if you consent, AppsFlyer and Meta) may process data in the United States or in other countries outside the European Economic Area. In those cases the transfer relies on the EU-U.S. Data Privacy Framework adequacy decision for certified providers, or on the Standard Contractual Clauses approved by the European Commission. You can ask us for a copy of the safeguards at privacy@narciso.app.

• PRO look photos and results: 30 days, then deleted automatically; sooner if you use “Delete my data” or delete your account.
• Account: until you delete it.
• App identifier, plan and credits: while you use the app; deleted when you delete your account or on request, except data the law requires us to keep.
• Usage analytics: 12 months at most.
• Crash reports: 90 days at most.
• Transaction records: as long as the law requires, up to 10 years for tax and accounting obligations.
• Support emails: up to 24 months after our last reply.
• Website logs: briefly, 30 days at most.

You can access your data, ask us to correct or erase it, restrict its processing, object to processing based on legitimate interest, receive the data you gave us in a readable format (portability) and withdraw your consent at any time, without affecting what happened before.

• In the app: Settings → Delete my data erases recent photos and settings on your phone and the photos stored on our servers. Settings → Account → Delete account erases your account, stored photos and credit history. All the steps are on the Delete account page.
• Analytics and ads: Settings → Ads and statistics. On iPhone you can also change the tracking permission in Settings → Privacy & Security → Tracking.
• By email: write to privacy@narciso.app. We reply within one month; to make sure the request comes from you we may ask for some information.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.

Photos sent for PRO looks go through the model’s automated safety checks. If an image breaks the rules (for example illegal content or minors), the generation is blocked and no credit is used. We make no automated decisions that have legal effects on you; if you think a block is a mistake, write to us.

Narciso is not meant for anyone under 16 and we do not knowingly collect data from children under 16. Photos of minors may not be used with Narciso. If you believe a child has given us data, write to us and we will delete it.

Data travels encrypted (HTTPS/TLS), photos are stored in a private space with restricted access and are deleted when the 30 days are up. No system is one hundred percent secure: if a breach ever affects you, we will tell you as the law requires.

If we change this policy we update the date at the top. If the changes are important we also tell you in the app before they take effect.

Emmanuele Santo · privacy@narciso.app