ImgAI
Privacy Policy
Effective 24 October 2026
ImgAI is an iOS app developed and operated by 42pixels FZ-LLC, a company registered in Abu Dhabi, United Arab Emirates. In this policy, "ImgAI", "we" and "us" mean that company. The policy covers the app "ImgAI" on the App Store (listed as "ImgAI: AI Photo Editor & Maker", App Store ID 1384198347) and its pages on 42pixels.co. It explains what we collect, what stays on your iPhone, who processes your data, how long we keep it and how you can delete it. It takes effect on 24 October 2026 and replaces the privacy policy previously published on the xrlab.ai website. Where earlier versions of the app worked differently, this policy says so.
The promise in one sentence: removing a background happens on your iPhone. When you use an AI tool, the app asks you first, then sends your photo or words to our servers and our AI partners only to make your result.
What stays on your iPhone
These features run on your device, and nothing is sent to us or anyone else:
- removing the background from a photo (Apple's on-device subject detection. In versions before 5.91, background removal ran on our servers and Replicate)
- colours, the built-in photo backdrops, shadows, sizes, text and the rest of the editor
- prompt ideas suggested on the device.
What we collect
Your app identity
ImgAI needs no account, and you never give us your name, email address or password. When you open the app, an anonymous Firebase user ID is created on your device. It identifies the installation, keeps your projects together and lets us apply the free limits and your ImgAI Pro subscription. It is not linked to your name or email address.
Photos, words and results
When you use an AI tool (for example AI Backgrounds, Retake, Edit with AI, Styles, Retouch, Expand, Enhance, Video, Create from text, Drawing or Future Baby), the app first asks for your permission and names our AI partners. Then it uploads the photo, sketch or words you chose to ImgAI's backend, which runs on Google Cloud Storage and Firebase Firestore in the us-central1 region in the United States. ImgAI's Cloud Functions send them to the providers listed under "Who processes your data" to make the result, and the result is stored with your app identity so that you can open it in Projects.
- Text you type, such as a prompt or "Your words" in Retake, is first checked and, if needed, translated into English by OpenAI.
- The photos and sketches you upload for an AI tool are needed only while the tool works. They are deleted automatically 30 days after upload. Your results stay in Projects until you delete them.
- Retake can use reference photos of the person in the picture. They are stored with your app identity until you delete them.
- Your photos, words and results are used only to make your results. We do not use them to train AI models. The providers' own terms apply while they process the data.
- Our AI partners, OpenAI, Google and Replicate, receive only what the feature you use needs. They process it on our behalf to return the result, may not use it to train their models, and protect it with safeguards equal to those described in this policy.
Purchases
ImgAI Pro is billed by Apple through your Apple Account. We do not receive your payment details. To check what you are entitled to, the app sends the App Store receipt and your ImgAI user ID to RevenueCat, which manages subscriptions for us. RevenueCat also receives a token from Apple's AdServices framework that tells us whether an Apple Search Ads campaign led to the install. This works without tracking and without the advertising identifier. Earlier versions also sold video coins, one-time purchases handled the same way.
Analytics and crash reports
We use Firebase Analytics to understand how ImgAI is used, for example which tools are opened and where people stop. These events are keyed by your ImgAI user ID, not by an advertising identifier. Firebase Analytics derives a general location, such as your country or city, from your IP address. Crash reports are collected with Firebase Crashlytics, without your user ID, so that we can find and fix bugs.
From version 5.91, ImgAI does not use any advertising identifier, does not show the iOS tracking prompt and does not track you across other companies' apps or websites. Versions before 5.91 also used Amplitude for analytics and Adjust to measure installs. If you allowed tracking in the iOS prompt, Adjust could use your device's advertising identifier. Updating to 5.91 removes both.
Notifications
If you allow notifications, the app registers a Firebase Cloud Messaging push token, stored with your app identity, so that we can send you news about ImgAI. Notifications are optional. You can turn them off at any time in iOS Settings.
The website
ImgAI's pages are part of 42pixels.co, which sets no cookies and runs no analytics or advertising. See the 42pixels privacy policy for the website.
Support requests
If you email support@42pixels.co, we keep your message and our replies so that we can answer you and follow up if needed. We keep support emails for a reasonable period after the request is closed and then delete them.
Who processes your data
ImgAI runs on services from the providers below. Each receives only what it needs for its task.
| Provider | What it does for ImgAI | What it receives | Where |
|---|---|---|---|
| Google (Firebase and Google Cloud) | App identity, database, file storage, Cloud Functions, analytics, crash reports, push notifications | Your app identity, the photos, sketches and words you send to AI tools, your results, entitlement state, push token, usage events, crash reports | United States (region us-central1) |
| Replicate | Runs the image and video AI models, made by Black Forest Labs, Pruna AI, Bria, Google and others | The photo, sketch or words for the tool you use | United States |
| Google (image models through Replicate) | Retake uses Google's image models | The photo, reference photos and fix you chose | United States |
| OpenAI | Checks and translates your words, reads sketches, and makes Styles results when the main model fails | Your words, sketches, and the photo for a Styles result | United States |
| RevenueCat | Subscription entitlements and Apple Search Ads attribution | App Store receipt, your ImgAI user ID, the AdServices token | United States |
| Apple | App Store billing, on-device background removal and prompt ideas | Billing is handled by Apple under Apple's own terms. The on-device features send nothing to us | On your iPhone, and Apple's systems for billing |
| Amplitude and Adjust (versions before 5.91 only) | Product analytics and install measurement | Usage events, and for Adjust, the advertising identifier if you allowed tracking | United States and the European Union |
These providers process data only to provide their service to ImgAI. We do not use your photos or words to train AI models. While a provider processes your data, its own terms apply to that processing.
How we use your data
We use your data to:
- provide the service: edit your photos, make AI results and keep them in Projects
- check your ImgAI Pro subscription and apply the free limits
- keep the service safe and prevent abuse, for example too many requests from one installation
- understand how ImgAI is used and fix crashes
- send you notifications if you allowed them
- answer your support requests.
We do not sell your data.
Legal bases
Where the law requires a legal basis for processing, for example in the EU and the UK, we rely on the following.
- Contract. Providing the service you asked for, keeping your projects and billing ImgAI Pro.
- Legitimate interests. Understanding how ImgAI is used, fixing crashes, keeping the service secure and preventing abuse. We keep this processing to what a user would reasonably expect.
- Consent. Sending photos to our AI partners (the app asks before the first AI action), push notifications and, in versions before 5.91, tracking. You can withdraw consent at any time. Withdrawing it does not affect processing that happened before.
Retention and deletion
- Your AI results and Retake reference photos are kept with your app identity until you delete them.
- The photos and sketches you upload for an AI tool are deleted automatically 30 days after upload.
- To delete a result, delete it in Projects: the result and its files are deleted from our servers.
- ImgAI has no account. Deleting the app does not delete what is stored on our servers. To delete everything, email us from the app's Contact us, which includes your app ID, and we delete all data linked to it.
- Server logs are kept for about 30 days, the standard Google Cloud logging retention.
- Analytics and crash data are kept for the default retention period of each provider.
- Support emails are kept for a reasonable period after the request is closed.
International transfers
ImgAI's backend and the providers above process data in the United States. If you live in the EU, the UK or another place whose law restricts transfers abroad, we rely on standard contractual clauses or equivalent safeguards where the law requires them.
Security
- From version 5.91, every request to ImgAI's backend carries your Firebase identity token, so the backend knows which installation is asking.
- Storage and database rules restrict each installation to its own data. One user cannot read another user's photos or results.
- Firebase App Check attests that requests come from the genuine ImgAI app.
- Data travels over TLS. Google Cloud encrypts it at rest.
No system is completely secure. If you have found a security problem, email support@42pixels.co.
Children
ImgAI is not directed at children under 13, or under 16 where the law sets that age, for example in the EU. We do not knowingly collect personal data from children below that age. If you believe a child has given us personal data, email us and we will delete it.
Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you
- correct it if it is wrong
- delete it
- receive a copy in a portable form
- object to, or ask us to restrict, certain processing
- withdraw consent you have given
- complain to a supervisory authority.
You can do much of this yourself in the app: save or share any result from Projects, delete results in Projects, and turn notifications off in iOS Settings. In versions before 5.91, change your tracking choice in iOS Settings under Privacy and Security, then Tracking.
For anything else, email support@42pixels.co. We may ask you to confirm that the data is yours before we act. We respond within the time the applicable law requires.
If you live in the European Economic Area or the United Kingdom, you have these rights under the GDPR and the UK GDPR, and you can complain to your national data protection authority. If you live in California, you have the rights to know, delete and correct your personal information and not to be discriminated against for exercising them. We do not sell or share your personal information as those terms are defined in California law. If you live in the United Arab Emirates, you have rights under the UAE Personal Data Protection Law, including access, correction, deletion and objection. Residents of other places may have similar rights under their own laws. Wherever you live, write to the same address and we will apply the rights that your law gives you.
We do not sell personal data.
Changes to this policy
We will update this policy when ImgAI changes, for example when we add a feature or change a provider. The date at the top of this page shows when the current version took effect. If a change is significant, we will tell you in the app before it takes effect.
Contact
ImgAI is developed and operated by 42pixels FZ-LLC, Abu Dhabi, United Arab Emirates. For questions about this policy or your data, email support@42pixels.co. Our Terms of Use are at /p/imgai/terms.