Charmie Privacy Policy

Last updated: 2026-06-23

Charmie ("Charmie", "we", "us", or "the app") is built and operated by Charmie Labs. This Privacy Policy explains what information the app does and does not handle, how the app's AI features work, and the choices and rights you have. It applies to the Charmie iOS application and is written for users in the United States, the European Union, the United Kingdom, and elsewhere.

By installing and using Charmie, you agree to the practices described in this policy. If you do not agree, please do not use the app.

Summary

• We do not operate accounts, servers, or databases that store your content.

• We do not collect personal information, and we do not use analytics, advertising, or tracking SDKs.

• Charmie runs entirely on your device, except that the photos and text prompts you choose to submit are sent directly from your device to our AI provider, Replicate, to generate images.

• We do not sell or share your personal information, and we do not use it for advertising.

• You can erase everything the app holds at any time with Settings → Clear all data.

Information we collect

We do not collect personal information. Charmie has no sign-up, no login, no user accounts, no analytics SDKs, no advertising identifiers, and no third-party trackers. We do not ask for your name, email address, phone number, or location, and the app does not maintain any server-side profile of you.

The app does not transmit any device identifiers, usage statistics, crash telemetry, or contact information to us. We have no server that receives your data, so there is no server-side log of your activity for us to read, retain, or disclose.

Content you provide

To use the creative features, you choose content for the app to work with:

• Photos — a photo of yourself, a friend (with their permission), or a pet that you select from your photo library or capture with the camera, used as the basis for an avatar.

• Text prompts — short descriptions you type to generate or place decorative "charms".

This content is used only to fulfill the specific request you make (generating an avatar, generating a charm, or composing charms onto an avatar). It is processed as described in "How AI features work" below and is not used for any other purpose.

Device permissions

Charmie requests the minimum permissions needed for the features you use:

• Camera — only if you choose to take a new photo to turn into an avatar. The app does not record video or use the camera in the background.

• Photo Library (read) — only when you pick an existing photo to use as a source image.

• Photo Library (add) — only if you enable "Save outputs to Photos" and save a generated image to your library.

You can grant or revoke each permission at any time in the iOS Settings app. Denying a permission only disables the related feature; the rest of the app continues to work.

How AI features work

Charmie has no AI models or servers of its own. To create avatars and charms, the app sends the content you supply (the photos you choose and the text prompts you write) directly from your device over an encrypted HTTPS connection to Replicate, Inc. ("Replicate"), our third-party AI hosting provider. Replicate runs the image models that perform the generation and returns the resulting image to your device.

The models used are:

• bytedance/seedream-4.5 — avatar generation,

• openai/gpt-image-2 — charm generation,

• google/nano-banana-2 — composing charms onto an avatar.

You can choose which model is used for avatars and for charms in Settings. Whichever model you select, the request still goes only to Replicate.

When a request is sent to Replicate:

• Before any content leaves your device for the first time, the app shows an in-app disclosure that names what is sent (your photo and any charm description), who it is sent to (Replicate, and the upstream model providers), and how it is used. No data is transmitted until you tap Agree & Continue. If you decline, no request is made. You can withdraw this consent at any time with Settings → Clear all data.

• It is transmitted over a secure, encrypted connection.

• Replicate processes the photo and/or prompt to produce the image, then returns it to your device.

• We (Charmie Labs) do not receive, store, or keep a copy of your photos, prompts, or generated images on any server, because we do not operate one.

Replicate acts as a processor (sub-processor) for the requests you initiate. Replicate's handling of the data it receives is governed by Replicate's own privacy policy, available at https://replicate.com/privacy. We encourage you to review it. Replicate may also rely on the upstream model providers (such as ByteDance, OpenAI, and Google) to serve the hosted models; their processing is governed by Replicate's agreements with those providers.

Charmie connects to Replicate using a built-in access credential, so the app works out of the box. You do not need to create an account or supply any API key of your own.

On-device storage and retention

Your gallery of creations, your settings, and your saved images are stored only on your device. We do not back them up to our servers, because we have none.

• Generated images and gallery entries remain on your device until you delete them or clear all data.

• Temporary caches used during generation are managed by the app and the system and can be cleared at any time.

• Because content sent to Replicate is processed to fulfill your request and is not retained by us, deleting data in the app removes everything we are able to control.

To erase everything immediately, open Settings → Clear all data. This deletes your gallery, saved images, and caches. This action cannot be undone.

Legal bases for processing (EEA / UK)

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, the limited processing that occurs (sending the content you choose to Replicate at your request) is based on:

• Performance of a service you request — to generate the avatar or charm you asked for; and

• Your consent — given when you choose a photo or submit a prompt for processing, which you may withdraw at any time by not submitting further content and by using "Clear all data".

International data transfers

Replicate processes requests on infrastructure that may be located in the United States or other countries. If you use the app from the EEA, the UK, or another region, the content you submit may be transferred to and processed in a country whose data-protection laws differ from your own. Such transfers are carried out under the safeguards described in Replicate's privacy policy. If you prefer not to transfer your content internationally, do not submit photos or prompts for AI processing.

Data sharing and sale

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not disclose your content to anyone except Replicate, and only as needed to perform the generation you request. We have no advertising partners and run no ad networks.

Security

Content is transmitted to Replicate only over encrypted HTTPS connections. Because we operate no servers and retain none of your content, there is no central store of user data for an attacker to target. No method of transmission or storage is ever completely secure, but we minimize risk by keeping data on your device and limiting transmission to the requests you initiate.

Children's privacy

Charmie is rated 12+ and is not directed to children under 13 (or under the minimum age required in your country). We do not knowingly collect personal information from children. Because the app collects no personal information and uses no accounts, it does not build profiles of any user, including minors. If you believe a child has used the app in a way that concerns you, use "Clear all data" to remove all content from the device.

Your rights

EEA / UK (GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Because we do not collect or store personal data on any server, there is no profile for us to retrieve or delete; deletion is effectively automatic when you use "Clear all data" or uninstall the app. You also have the right to lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

California residents have the right to know what personal information is collected, to delete personal information, to correct inaccurate personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we do not collect it on any server, so there is nothing for us to disclose, delete, or correct on our side. You will not be discriminated against for exercising any privacy right.

Other U.S. states

Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Utah) have similar rights to access and delete personal information. The same facts apply: we hold no personal information on any server, and "Clear all data" removes everything stored on your device.

To exercise any right or ask a question, contact us at the address below. We may need to confirm that a request relates to the Charmie app, but because we hold no account data, we cannot identify individual users from our side.

Third-party links

Settings and this policy may link to external pages (such as Replicate's privacy policy). Those sites are governed by their own privacy policies, and we are not responsible for their content or practices.

Changes to this policy

We may update this policy from time to time. When we do, we will post the revised version at this page and update the "Last updated" date above. Material changes will be reflected here; your continued use of the app after an update constitutes acceptance of the revised policy.

Contact

Charmie Labs Email: bang77bang88@gmail.com

If you are in the EEA or UK and have a concern we cannot resolve, you may also contact your national data protection authority.