Privacy policy
Last updated: 14 November 2026
Who is responsible
Camella is operated by VB Tech Labs (Veysel Bilici), Türkiye ("we"). Contact: bilicisoftwaree@gmail.com.
What we process and why
| Data | Why | Kept |
|---|---|---|
| The photo you choose and the look you picked | To create your print. The photo may show your face. | Not stored by Camella. It is held in memory while the print is made, then discarded. |
| Your finished prints | So you can see them again in the app. | Only on your phone, until you delete them or the app. |
| An anonymous account ID | To remember your remaining prints and your subscription status. No name, email or phone number is collected. | Until you delete your data. |
| A one-way hash of a device identifier | To give the free welcome print once per device and to limit abuse. It is not an advertising identifier and is not used for tracking. | Kept after account deletion, as a hash only, so the free print cannot be claimed repeatedly. |
| A record of each print request: look, time, whether it succeeded | To enforce daily limits, refund failed attempts and understand which looks are used. The record contains no image. | Until you delete your data. |
| Purchase history | To unlock what you bought and to restore purchases. | As required for accounting and by the stores. |
| Language, your answer to "who sent you?" and the date you agreed to AI processing | To show the app in your language, to learn where users come from, and to prove your consent. | Until you delete your data. |
We do not use your photos to train AI models and we do not sell or rent personal data.
Who receives data
| Recipient | What | Where |
|---|---|---|
| Google (Gemini API) | Your photo and a text description of the look, to generate the print. We use a paid service tier whose terms state that content is not used to train the provider's models. | May be processed outside your country, including in the United States. |
| Supabase | Hosts our database and server functions (account ID, print counts, consent record). | European Union (Frankfurt). |
| RevenueCat | Anonymous account ID and purchase records, to manage subscriptions. | United States. |
| Apple App Store / Google Play | Process your payment. We never see your card details. | Per their own policies. |
Your consent to AI processing
Before your first print, the app shows what will be sent and to whom, and asks for permission. Nothing is sent before you agree. If you decline, the photo is dropped. You can withdraw consent at any time by deleting your data in the app; this does not affect processing that already happened.
Because a photo of a face can be sensitive, please only upload photos of yourself or of people who have agreed.
Legal bases (EU / EEA / UK)
- Your consent for sending your photo to the AI service.
- Performance of a contract for providing the app, prints and purchases.
- Legitimate interests for preventing abuse and understanding basic usage.
- Legal obligations for purchase records.
Türkiye (KVKK)
For users in Türkiye, the data controller is VB Tech Labs (Veysel Bilici), Türkiye. Photos are processed on the basis of your explicit consent. Data is transferred abroad to the recipients listed above, on the basis of your explicit consent given in the app. You have the rights listed in Article 11 of Law No. 6698, including to learn whether your data is processed, to request its correction or deletion, and to object. Send requests to bilicisoftwaree@gmail.com.
Your rights
You can delete your account data at any time in the app under Settings, "Delete my data", or follow the steps on the data deletion page. Depending on where you live, you may also have the right to access, correct, restrict or object to processing, to data portability, and to complain to your data protection authority. Write to bilicisoftwaree@gmail.com and we will answer within 30 days.
Age
Camella is not for children. You must be at least 13 years old, or 16 in the European Economic Area and the United Kingdom, or older if your country requires it.
Security
Data travels over encrypted connections. Keys for the AI service never leave our servers. Database access is restricted so that each anonymous account can read only its own records.
Changes
If this policy changes in a way that affects how your photo is handled, the app will ask for your consent again before your next print.