Privacy Policy

1. Who we are

SensePose is developed and operated by Profazia, the trading name of an independent solo developer based in India. We are an individual rather than a registered company, which is why you will not find a company registration number here.

For the purposes of the GDPR and equivalent laws, that individual is the data controller for the personal information described in this policy, and the Data Fiduciary under India's DPDP Act. Payment data is the exception: Dodo Payments acts as Merchant of Record and is the controller of your payment details, under its own privacy policy.

This policy explains what we collect when you use the SensePose mobile app and this website, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

2. Information We Collect

Account information

• Email address and name, when you create an account
• Your Google account identifier, if you sign in with Google (we receive your email and name, not your Google password)
• Subscription status and billing country
• Support messages you send us

We do not receive or store your card number. Payment details are entered directly with our payment provider — see section 6.

Photos, videos and camera data

Most SensePose processing happens on your device. Pro Mode, RAW HDR+ burst capture and merging, exposure fusion and local tone grading all run on your phone's own hardware, and those images are never transmitted to us.

When you use cloud enhancement, the frames for that specific photo are uploaded to our processing storage over an encrypted connection, enhanced on a GPU, and returned to your device. We upload only the images you choose to enhance.

The app also records video with audio when you use video mode. Video and audio are processed on your device and are not uploaded to us.

We do not use your photos, videos or audio to train machine-learning models, and we do not use them for advertising.

Device and usage data

• Device model, manufacturer, chipset, Android version and app version — used for device-compatibility checks and to diagnose quality problems on specific hardware
• An app install identifier, used to license on-device AI models to your install
• Feature-usage events (for example, that an enhancement was started or completed) and how much of your monthly allowance you have used
• Crash and performance diagnostics
• A push notification token, if you allow notifications, so we can tell you when a photo finishes processing
• Feedback you submit on an enhancement (thumbs up/down and any comment), along with your device model

We do not collect your location, contacts, or browsing activity on other apps or sites. SensePose contains no advertising SDKs and no third-party trackers.

3. How We Use Your Information

• To provide the app and process the photos you ask us to enhance
• To create and maintain your account and keep you signed in
• To process payments, manage subscriptions and apply your usage allowance
• To check whether your device supports the app's capture features
• To send you technical notices, processing notifications and support replies
• To diagnose crashes, fix bugs and improve image quality on specific devices
• To detect and prevent fraud, abuse and unauthorised use of paid features
• To comply with legal obligations, including tax and accounting rules

4. Legal Bases for Processing (EU / EEA / UK)

If you are in the EU, EEA or UK, we rely on the following legal bases under the GDPR:

• Performance of a contract — providing the app, your account, cloud enhancement and your subscription
• Legitimate interests — security, fraud and abuse prevention, crash diagnostics, and improving image quality, balanced against your rights
• Consent — camera access, storage access and push notifications, each of which you grant on the device and can withdraw in Android settings at any time
• Legal obligation — retaining transaction records for tax and accounting purposes

5. Data Storage, Security and Retention

Data is stored on servers operated by the providers listed in section 6. Data in transit is encrypted with TLS, and data at rest is encrypted by those providers. Access to production systems is limited to personnel who need it.

We keep data for the following periods:

6. Service Providers and Subprocessors

We share personal information with the providers below, only so they can perform services for us. They are contractually bound to protect it and may not use it for their own purposes.

• Clerk — account creation, sign-in and session management (email, name, authentication events)
• Supabase — our application database (account records, subscription status, usage counters, feedback)
• Cloudflare R2 — storage for images being processed and for enhanced results
• Modal — GPU compute that runs the cloud enhancement models on your uploaded frames
• Dodo Payments — Merchant of Record for subscriptions; collects and processes your payment details and issues invoices
• Vercel — hosting for this website and our API
• Google (Firebase Cloud Messaging) — delivery of push notifications
• Google (Play Integrity API) — verifying that requests come from a genuine, unmodified copy of the app, to prevent abuse of paid features

We may also disclose information to legal or regulatory authorities where we are legally required to, and to a successor entity in the event of a merger or acquisition. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. International Data Transfers

We operate from India and our providers process data in the United States, the European Union and other countries. This means your personal information may be transferred outside the country where you live, including to countries that have not been found to provide an equivalent level of data protection.

Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with additional safeguards where needed. You can request a copy of the relevant safeguards using the contact details in section 14.

8. Your Rights

Depending on where you live, you have the right to:

• Access and receive a copy of your personal data
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time, without affecting processing already carried out

To exercise any of these rights, email support@profazia.com. We respond within 30 days and will not charge you or degrade your service for asking.

If you are in the EU, EEA or UK and you think we have handled your data improperly, you also have the right to complain to your local data protection supervisory authority.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and why, to request its deletion or correction, and to not be discriminated against for exercising those rights. The categories we collect are described in section 2 and the categories of recipients in section 6.

We do not sell personal information and we do not share it for cross-context behavioural advertising, including the personal information of users we know to be under 16. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" opt-out to offer. To exercise your other rights, contact us at support@profazia.com.

10. India (DPDP Act, 2023)

If you are in India, we process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. You have the right to access a summary of your data, to correction and erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to grievance redressal.

To raise a grievance, contact our grievance officer at support@profazia.com. We will acknowledge and respond within the timelines set by the Act.

11. Deleting Your Account and Data

You can request deletion of your SensePose account and the personal data associated with it at any time, using our account deletion request form, or by emailing support@profazia.com from the address on your account.

When we action a deletion request we remove your account record, your enhanced results held in our storage, your usage history, your push token and your feedback. We complete this within 30 days. Transaction and tax records are retained where law requires, as described in section 5.

Photos already saved to your phone's gallery are stored on your device, not by us — deleting your account does not remove them, and you can delete them yourself at any time.

12. Children's Privacy

SensePose is not directed at children. You must be at least 13 years old to use the app. In the EU and EEA, where a member state has set a higher digital-consent age (up to 16), you must meet that age, or have your parent or guardian's consent. In the UK the age is 13.

We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, contact us at support@profazia.com and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Where a change materially affects how we use your data, we will give you notice in the app or by email before it takes effect.

14. Contact Us

For any question about this policy, to exercise your rights, or to raise a grievance:

• Email: support@profazia.com
• Profazia — independent developer, India

Email reaches us directly and is the fastest route for any data-protection request. As a solo developer we do not publish a street address, but we will provide our postal details on request to anyone who needs them to exercise a legal right.

See also our Terms of Service and Refund & Cancellation Policy.