Privacy Policy for Era Portrait: AI Avatar

Overview

Era Portrait: AI Avatar (by Tugrul Works) explains its data practices when you use our mobile application. By using the app, you agree to the terms of this policy.

Era Portrait is an AI photo app: you provide a photo, we process it through AI infrastructure, and you get a generated portrait back. This policy describes exactly what we collect, who processes it, and how long we keep it.

No Accounts

Era Portrait has no login and no user accounts. We do not ask for your name, email, or any sign-up credentials to use the app.

Instead, your device is identified by anonymous identifiers:

• A RevenueCat anonymous app user ID, generated by our purchases provider.
• A per-install UUID generated on your device the first time the app runs.

These identifiers are not linked to your real-world identity. If you delete and reinstall the app, new identifiers are generated — the app treats a reinstall as a fresh device. Your credit balance is held on our backend against the identifiers of that install, so a balance left over from a previous install does not carry over automatically (see Purchases and Credits below).

Photo and Face Data Handling

When you generate a portrait, your photo is uploaded to our backend (Supabase storage) and then processed by Google's image-generation model (Gemini family), hosted on the third-party AI infrastructure provider Replicate, to produce the generated result.

Before generation, your uploaded photo is checked by an automated content-safety screening model (also hosted on Replicate) to detect and block unsafe or explicit content.

• Uploaded photos are automatically deleted from our backend within 48 hours. An automated sweeper enforces this — an original upload never remains on our servers beyond that window. Generation jobs finish in minutes, so the 48-hour limit is well beyond the time your photo is actually needed.
• We do not perform facial recognition and do not create faceprints, biometric templates, or other biometric identifiers.
• We do not sell your photos or share them with advertising networks.
• We do not use your photos to train public AI models without consent.

Generated results you choose to keep are saved to your own device. Because we have no account system, we do not maintain a personal photo library for you on our servers beyond the temporary processing window described above.

Purchases and Credits

Era Portrait runs on credits: generating a portrait spends credits, and credits are bought as one-time in-app purchases (credit packs) through Apple, managed with RevenueCat. There are no subscriptions — nothing auto-renews and there is nothing to cancel.

When you buy a credit pack, we receive — via RevenueCat — your purchase receipt, your anonymous app user ID, and the purchase status.

• We never see or store your payment details (card number, billing address, etc.). Those are handled entirely by Apple.
• Your credit balance and credit ledger (credits purchased and credits spent on generations) are stored on our backend (Supabase) against your anonymous identifiers. The ledger holds no photos and no personal details — only counts, timestamps, and those identifiers.
• Because a reinstall generates new identifiers, credits remaining under a previous install are not restored automatically. Consumable purchases are not recoverable through the App Store the way a subscription is; if you lose a balance you paid for, contact us and we will help.

Usage Analytics

We use PostHog to understand how the app is used and to improve it. This includes:

• Usage events (which screens and features you interact with).
• Device information such as operating system, app version, and locale.
• Anonymous identifiers.

We do not send your advertising identifier (IDFA) to PostHog.

Advertising and Attribution

We use the Meta (Facebook) SDK to measure the performance of our advertising and understand where installs come from. This includes:

• Install and app-launch events.
• Upper-funnel product events such as onboarding completed, paywall viewed, and checkout started.

Your device's advertising identifier (IDFA) is only accessed with your consent through Apple's App Tracking Transparency (ATT) prompt, which appears after onboarding. If you decline, the app remains fully functional — you simply are not tracked with the advertising identifier.

We also use Apple's AdServices framework for Apple Search Ads attribution. This does not require the ATT prompt.

Additionally, RevenueCat forwards purchase revenue events server-side to Meta so that our advertising can be measured. This happens on our servers, not on your device.

Third-Party Subprocessors

The following third parties process data on our behalf, each under their own privacy policy:

Data Protection

Data is encrypted in transit and stored securely with access controls. Uploaded photos are held only for the temporary processing window described above (deleted within 48 hours). Credit balance and ledger records are kept as long as needed to operate the service and to meet legal (e.g. billing) obligations.

Your Rights and Contact

You may request access to, correction of, erasure of, or portability of your personal data under GDPR, CCPA, and similar laws.

Because Era Portrait has no accounts, any data we hold is tied to your anonymous identifiers rather than to a personal profile:

• Uploaded photos are deleted automatically within 48 hours, so no manual deletion request is needed for them.
• For other data (such as analytics, credit ledger entries, or purchase records) tied to your anonymous identifiers, contact us and we will help you exercise your rights. Please note that because these identifiers are anonymous, we may need information from you to locate the relevant records.

Contact: hello@tugrul.works

Children

The app is not intended for children under 13.

Changes to This Policy

Policy updates are posted on this page, with notification through the app for significant changes.