Ancestora AI Privacy Policy

Effective Date: August 28, 2026  |  Last Updated: August 28, 2026

This Privacy Policy explains how Ancestora AI ("we," "us," "our") collects, uses, discloses, and safeguards information when you use the Ancestora AI iOS application (the "App"). It should be read together with our Terms of Service. By using the App, you agree to the practices described below. If you do not agree, please do not use the App.

In short: We do not sell or rent your personal information, and we do not use your photos to train AI models, build facial recognition profiles, or identify you.

1. Information We Gather

1.1 Information You Provide

• Photographs and media you upload for generation requests;

• Account details, such as an email address, if you create an account;

• Support communications, such as messages you send us for help or feedback.

1.2 Information Collected Automatically

• Device information (device model, iOS version, app version, language settings);

• Advertising and vendor identifiers, such as the IDFA (Advertising Identifier) or IDFV (Vendor Identifier), where permitted by your App Tracking Transparency (ATT) choice;

• Approximate technical data such as IP address (used for security and localization, not precise geolocation tracking);

• Usage data, including feature interac

tions, session length, and crash or diagnostic logs;

• Subscription and purchase status obtained from the Apple App Store — we do not receive or store your payment card details, which are processed entirely by Apple.

1.3 What We Do Not Collect

We do not knowingly collect government identification numbers, precise real-time location, health records, or other special-category data unrelated to operating the App's core features.

2. Your Photos & Facial Image Processing

Ancestora AI's core feature relies on analyzing a photograph you voluntarily choose to upload or capture in order to generate a stylized, ancestry-themed portrait. Before any photo is processed, the App requests your explicit, affirmative consent.

2.1 What Happens to Your Photo

1. You select or capture an image within the App;

2. You confirm consent to proceed with AI processing;

3. The image is transmitted over an encrypted connection to our authorized AI processing partner described in Section 3 below;

4. The AI system analyzes the image and produces the requested Generated Output;

5. The result is returned to you within the App.

Purpose limitation. Your uploaded photograph is used solely to complete the specific generation task you requested. It is not used to identify you, verify your identity, build a biometric profile, or conduct surveillance, and it is not repurposed for advertising, marketing, or any activity unrelated to fulfilling your request.

2.2 Retention of Photos

We do not retain your uploaded photograph after the requested generation task is completed. Any transient copy held in memory or temporary storage during processing is deleted or automatically expires shortly after the job finishes. We do not maintain a facial recognition database, biometric templates, or facial-geometry signatures capable of identifying you, and we do not use your photos to train or fine-tune AI models.

2.3 Generated Images

Generated Outputs are saved to your device (and, if you enable an account, associated with your account) for your personal use. We do not publicly display, feature, or share your Generated Outputs without your separate, explicit permission.

3. AI Service Provider Powering Generation

To deliver image understanding and image generation features, Ancestora AI relies on Alibaba Cloud's Qwen (Qwen-VL series) and Wan models, accessed via Alibaba Cloud Model Studio / DashScope. This provider processes only the data necessary to complete your specific request — the uploaded image and associated generation parameters or prompt text — and is contractually and technically restricted from using that data for any purpose other than fulfilling your request, including facial recognition, biometric profiling, or model training. Alibaba Cloud's own handling of this data is further described in its Model Studio Privacy Notice and Privacy Policy.

We may add, remove, or change AI service providers or specific models as our technology evolves; where a change involves a materially different data-handling practice, we will update this Policy accordingly.

Our AI processing partner is contractually prohibited from using the uploaded image to build facial recognition profiles, biometric templates, or identify you, and is restricted to using it solely to generate the requested output.

4. Device Permissions

The App may request the following permissions. You may grant or deny each permission at the time of the request, and you may change your decision at any time through iOS Settings.

• Camera — to let you capture a photo directly within the App for a generation request;

• Photo Library — to let you select an existing photo to upload for a generation request;

• Notifications — to alert you when a generation job completes or to share product updates (optional);

• Network / Internet Access — required for the App to function, including sending requests to our servers and AI processing partner;

• App Tracking Transparency — requested before accessing the IDFA for analytics or attribution purposes, if applicable.

Declining a permission may limit or disable the corresponding feature, but will not prevent you from using the rest of the App.

5. How We Use Information

• To operate, maintain, and deliver the core AI generation features of the App;

• To process and manage your subscription and entitlements;

• To personalize your in-app experience and remember your preferences;

• To monitor, diagnose, and improve App performance and stability;

• To respond to support requests and communicate with you about the App;

• To detect, investigate, and prevent fraud, abuse, and security incidents;

• To comply with applicable law, legal process, or governmental request.

6. When We Disclose Information

We disclose information only in the following limited circumstances:

• Our AI processing partner described in Section 3, solely to fulfill your generation requests;

• Service providers that support our infrastructure, such as cloud hosting, crash reporting, and analytics vendors, bound by contractual confidentiality and data-use restrictions;

• Apple, for the purpose of processing your subscription payments;

• Legal and safety purposes, where disclosure is required to comply with law, respond to lawful requests from public authorities, or protect the rights, property, or safety of Ancestora AI, our users, or the public;

• Business transfers, where information may be transferred in connection with a merger, acquisition, or sale of assets, subject to continued protection under a policy at least as protective as this one;

• Aggregated or de-identified data that cannot reasonably be used to identify you, which we may share for research, analytics, or business purposes.

We do not sell or rent your personal information — including your photographs — to third parties for their own advertising or marketing purposes.

7. Third-Party Services

The App may contain links to third-party websites or services that are not owned or controlled by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

Our App uses the following third-party services:

• Google Analytics: A web analytics service provided by Google LLC that helps us understand how users interact with the App. Google's data practices are governed by the Google Privacy Policy.

• Firebase: A mobile development platform provided by Google LLC, used for crash reporting, analytics, and cloud services. Firebase's data practices are governed by the Firebase Privacy Policy.

• Facebook SDK — A mobile analytics and advertising platform provided by Meta Platforms, Inc., used for app event tracking, ad attribution, and campaign measurement. Facebook SDK's data practices are governed by the Meta Privacy Policy.

8. Security Measures

We use industry-standard technical and organizational safeguards designed to protect your information, including encrypted transmission (HTTPS/TLS) between your device, our servers, and our AI processing partner; access controls that restrict internal access to personal data on a need-to-know basis; and periodic review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Should a data breach occur that affects your personal information, we will notify you and applicable authorities as required by law.

9. Data Retention & Deletion

We retain account and usage information for as long as your account remains active or as needed to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. Uploaded photographs, as described in Section 2.2, are not retained beyond the time needed to complete your generation request.

You may permanently delete your account and associated data at any time directly within the App (Settings → Delete Account), without needing to contact support. You may also request deletion by contacting us at the email below. We will process any deletion request within a reasonable time, generally within 30 days, except where we are required or permitted by law to retain certain information. Because we do not retain your uploaded photographs after processing, there is typically no residual photo data to delete beyond that point.

10. Your Privacy Rights

10.1 If You Are in the European Economic Area, United Kingdom, or Switzerland (GDPR / UK GDPR)

Where the General Data Protection Regulation or the UK GDPR applies to our processing of your personal data, we rely on the following legal bases: your consent (for example, before processing an uploaded photograph), the performance of a contract with you (to provide the App and manage your subscription), our legitimate interests (such as securing the App and preventing abuse), and compliance with a legal obligation where applicable.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;

• Rectify inaccurate or incomplete personal data;

• Erase your personal data ("right to be forgotten");

• Restrict or object to our processing of your personal data;

• Receive a copy of your personal data in a structured, commonly used, machine-readable format ("data portability");

• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;

• Lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data infringes applicable law.

To exercise any of these rights, contact us using the details at the end of this Policy. We will respond within the timeframe required by applicable law (generally within one month under the GDPR, extendable where necessary).

10.2 If You Are a California Resident (CCPA/CPRA)

In the preceding 12 months, we have collected the categories of personal information described in Section 1 of this Policy (identifiers such as an email address; internet or network activity information; audiovisual information, namely photographs you upload; and commercial information relating to your subscription). We collect and use these categories for the business and commercial purposes described in Section 5.

Subject to certain exceptions, California residents have the right to:

• Know what personal information we collect, use, disclose, and the sources and purposes of that collection;

• Delete personal information we have collected from you, subject to certain exceptions;

• Correct inaccurate personal information we maintain about you;

• Opt out of the sale or sharing of your personal information;

• Limit the use or disclosure of sensitive personal information;

• Non-discrimination for exercising any of these rights.

We do not sell or share personal information (including your photographs) as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months. Because we do not sell or share personal information, no "Do Not Sell or Share My Personal Information" opt-out link is required. You may submit a rights request by contacting us at the email below; we may need to verify your identity before completing certain requests, and you may designate an authorized agent to submit a request on your behalf.

10.3 Other Jurisdictions

If you are located in a jurisdiction with its own data protection law not specifically addressed above (for example, Canada's PIPEDA or other regional privacy laws), you may have similar rights to those described in this Section 9. Please contact us using the details below, and we will address your request in accordance with the law applicable to you.

10.4 Managing Permissions

You can manage or revoke camera, photo library, tracking, and notification permissions at any time through iOS Settings.

11. Children's Privacy

Ancestora AI is not directed to children under the age of 13, and we do not knowingly collect personal information from children under that age. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at the email below.

12. International Data Transfers

Your information may be processed and stored in countries other than your own, including by our AI processing partner and infrastructure providers, which operate data centers in multiple regions. Where required, we rely on appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, to protect information transferred internationally.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App's features, or legal requirements. We will indicate material changes by updating the "Last Updated" date above and, where appropriate, by providing an in-app notice. Your continued use of the App after such changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: help@ancestoraai.com