Your photos stay yours

Privacy, made clear.

This policy explains what Lensy collects, why it is needed, who processes it, how long it is kept, and the choices available to you.

Effective and last updated: 22 August 2026

1. Who is responsible

Lensy is operated by Visiontechhub (referred to as “Lensy”, “we”, “us”, or “our”). For privacy questions or requests, email [email protected].

2. Information we process

Account information

When you use Sign in with Apple, we receive an Apple account identifier and, if you choose to share them, your name and email address. Apple may provide a private relay email address instead of your personal email.

Photos and generated images

We process photos you intentionally select, the editing look you choose, and the resulting image. We do not scan your photo library or upload photos you did not select.

Subscription information

Apple processes payment details. Lensy receives product and transaction identifiers, subscription status, environment, and expiry information so we can unlock paid features and respond to renewals, billing failures, refunds, and revocations. We do not receive your full payment-card details.

Usage and technical information

We collect limited product analytics such as onboarding steps, selected looks, purchases, successful or failed generations, saves, app lifecycle events, app version, and basic device information. Photos and generated image contents are not sent to our analytics provider.

Support messages

If you contact support, we process the contact details and information you include in the message.

3. How we use information

• Authenticate your account and keep it secure.
• Process the selected photo and deliver the requested result.
• Verify and maintain subscription access.
• Prevent fraud, automated abuse, and excessive infrastructure use.
• Diagnose failures, provide support, and improve Lensy.
• Meet legal, accounting, security, and App Store obligations.

4. Service providers

We use providers that process information on our behalf:

• Apple — Sign in with Apple, App Store subscriptions, purchase verification, and device services.
• Supabase — authentication, private file storage, database, and server functions.
• fal.ai — temporary AI image processing. Lensy disables fal request-payload history and requests one-hour expiry for temporary generated media.
• PostHog — product analytics. Lensy sends deliberate usage events, not photo content, and does not enable session replay.

These providers may process data in countries outside your own. Where required, transfers rely on contractual and legal safeguards.

5. Retention

Lensy retention period: selected originals are removed after success or within 24 hours after a failed/stuck job. Finished images and generation records are automatically deleted after 30 days.

Authentication and subscription records remain while your account exists and for any additional period legally required. Support messages may be retained as reasonably necessary to resolve the request. Analytics is retained according to our configured PostHog retention and is deleted or anonymized when no longer needed.

Deleting your Lensy account removes the account, stored Lensy media, generation history, and linked authentication credentials. Copies you saved to your own Photos library remain under your control.

6. Legal bases in the EEA, UK, and Switzerland

We process information as necessary to perform our contract with you, comply with law, and pursue legitimate interests such as security, fraud prevention, reliability, and product improvement. Where consent is legally required, you may withdraw it at any time without affecting earlier lawful processing.

7. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection. You may delete your account in Lensy under Settings → Delete account and data. You can manage or cancel your subscription through Apple’s subscription settings.

To make another privacy request, email [email protected]. We may need to verify your identity. You may also complain to your local data-protection authority.

8. Security

Lensy uses private storage, short-lived access links, server-side authorization, signed StoreKit transaction verification, signed webhook verification, and access controls intended to protect information. No internet service can guarantee absolute security.

9. Children

Lensy is not directed to children under 13. If local law requires parental consent for a person under the applicable digital-consent age, that person should use Lensy only with valid parental or guardian authorization.

10. Changes

We may update this policy as Lensy changes. We will revise the date above and provide additional notice when required.

11. Contact

Email: [email protected]