Privacy · PhotoGPT 2.0
Privacy Policy for PhotoGPT
Last updated: October 28, 2026 · PhotoGPT 2.0
Kaspar Media · support@kasparmedia.de · Provider details
1. Core app and local content
PhotoGPT's core image creation, photo studio and gallery do not require a Kaspar Media account. Image computation uses resources on your device. Prompts and reference photos are not included in the app's model-download requests or uploaded to a cloud image generator.
The app stores images, prompts, drafts, editing choices, favorites, settings, purchase-access state and the daily free-use count locally as needed for these features. Optional model downloads and provider webpages are separate online activities, described below.
2. Photos, files and exports
You choose the photos or files to import and when to save or share an output. Photos permission can be managed in iOS Settings. Exporting to Photos or using a chosen sharing app may transfer an image through iCloud or that recipient service. Device backups and iCloud photo imports also follow your Apple settings. Local computation is not a promise that user-directed imports, backups or sharing never use a network.
3. Purchases and provided Premium access
Apple processes App Store subscriptions and payments. The app uses StoreKit purchase and entitlement status to unlock access, restore purchases and distinguish your own subscription from access assigned through Apple. Kaspar Media does not receive payment-card details from this flow. The app's local content is not included in a StoreKit purchase request.
4. Optional model downloads and provider access
If you choose an additional model, PhotoGPT connects to its file provider over the internet. The current model sources are hosted on Hugging Face and its delivery infrastructure. The service necessarily receives the requested file or webpage and normal connection information. These requests do not contain your image prompt or reference photo.
For FLUX.3, Hugging Face may require your own provider sign-in and model-access approval in a webpage inside the app. Hugging Face can process account inputs, website cookies, session records, IP addresses and browser/device information under its privacy policy. Model access can share your provider username and email address with the model author, Black Forest Labs; any additional fields are shown by the provider. Its policy describes retention and possible processing in the United States and other countries. These are provider activities, even though native PhotoGPT code does not extract your password, cookies or tokens.
Provider records can include your account name and email, identifiers, approximate connection location, download/page activity and technical connection information. Hugging Face describes service operation, security and usage analysis. Its download documentation states that CDN usage metering is kept for 90 days; this is not a deletion period for all account, access or security records. Provider correspondence can include marketing with its own unsubscribe controls. Black Forest Labs describes its handling of model-user contact information in its privacy policy. These providers control their own account records and processing; clearing PhotoGPT's local session does not erase those records.
The current host is displayed in the provider view. If you choose a provider's external sign-in route or follow another website, that service's notices also apply. You can continue using the core app without opening this provider flow. Optional model terms and eligibility are separate from a PhotoGPT Premium subscription.
5. Persistent provider session and your controls
The provider webpage uses this app's separate persistent browser profile. Cookies and website storage can retain your provider sign-in across app launches. In the provider view's menu, choose Forget provider sign-in to clear this local browser profile. Verified installed model files remain available. This control does not delete your provider account or records held by the provider; use its account controls or privacy contact for those records.
6. Feedback and diagnostics
The production feedback-send service is disabled in this version. A local feedback draft is not sent automatically. If you choose to contact support through your email app, you control the content you send; private prompts or photos are not needed for an initial issue description.
Apple's diagnostics, TestFlight reports and App Store services follow Apple's settings and privacy practices. The native app has no enabled Kaspar Media advertising or analytics transfer in the configuration reviewed for this version. Provider website processing is described separately above.
7. Retention and deletion
Local creative content and settings remain until you delete them, clear the relevant app data, or remove the app, subject to backups you control. Optional model files can be removed through their model controls. Clearing a provider session and removing a model are separate actions. Provider-held records follow the provider's retention and account-deletion policy.
8. Questions and rights
For questions about PhotoGPT or information sent to Kaspar Media, contact support@kasparmedia.de. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of your personal information. Most native app content is under your local control. Provider-account requests should also be directed to the relevant provider.
Material changes will be explained on this page. PhotoGPT terms · PhotoGPT support