LOVE STICKERS WASTICKER

Effective date: October 2, 2026

NextApp S.R.L. • Republic of Moldova • contact@nextapp.md

1. Introduction

NextApp S.R.L. (“NextApp”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how personal data and other information may be collected, used, disclosed, stored, and otherwise processed when you install or use the Love Stickers WASticker mobile application (the “App”) and related services (the “Services”).

NextApp S.R.L. is the controller of personal data for the processing activities for which we determine the purposes and means of processing. Some third-party providers may act as processors, independent controllers, or joint participants in processing depending on the service and applicable law.

This Privacy Policy applies globally. Additional rights may apply based on your place of residence. A U.S. Multistate Privacy Notice is included as an Annex.

2. Information We Process

2.1 AI Input Content and Generated Content

The App allows you to voluntarily select a photograph using the iOS photo picker and/or enter text to create AI-generated stickers or related content. A selected photograph may contain your face or other personal information.

For AI generation, the selected photograph and/or text prompt is transmitted to OpenAI for processing. NextApp does not store the source photograph on its own servers or in Cloudflare storage. NextApp does not use your photograph or AI-generated content for advertising, marketing, facial recognition, identity verification, or training NextApp AI models.

OpenAI’s own processing, security, and retention practices apply once data is transmitted to OpenAI. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer expressly opts in. Depending on the applicable API configuration and service, OpenAI may retain limited data for security, abuse monitoring, legal, or technical purposes.

Generated content is returned to the App and may be stored locally in the App’s My Album/cache on your device. NextApp does not upload personal AI-generated results to Firebase Storage or Cloudflare. Local content may be lost if the App is deleted, application data is cleared, the device is lost or replaced, or local storage is otherwise removed.

2.2 Photos and Photo Library Access

The App uses the iOS photo picker so that you can choose a photo for AI processing without granting the App broad access to your entire photo library. The App does not collect other photos merely because they exist in your library.

If you choose to save a generated sticker or image to your device, the App may request the system permission required to add content to your Photos library. We use that permission only to perform the save action you request.

The App does not request precise GPS location or access to your contacts.

2.3 Anonymous Identity, Credits, and Subscription State

The App can be used without a traditional login. Firebase Authentication may create an anonymous technical identifier (Firebase UID) so that the App can operate certain backend functionality.

We may associate the following information with that anonymous identifier:

subscription product or entitlement identifiers and subscription status;
Subscription Credit and Additional Credit balances;
App Store transaction identifiers and purchase status;
credit grants, deductions, resets, refunds, and related timestamps;
technical records needed to prevent duplicate grants, fraud, or abuse.

This information is used to provide paid functionality, maintain the credit economy, restore or reconcile eligible entitlements where technically possible, prevent fraud, and provide support.

2.4 Analytics and App Usage Information

We use Firebase Analytics and AppMetrica to understand how the App is used, measure performance, analyze product funnels, improve features, and diagnose product issues. Depending on your device settings, consent choices, and the provider, analytics information may include:

App version, device model, operating-system version, language, country/region inferred from technical signals, and general device characteristics;
App opens, session information, screens viewed, buttons or features used, onboarding steps, paywall impressions, purchase-related events, and other in-App events;
technical identifiers, anonymous or pseudonymous identifiers, timestamps, IP address or network-derived information processed by service providers;
diagnostic and performance information made available by the relevant analytics SDK.

We use AppMetrica for analytics and related technical diagnostics. We do not use Firebase Crashlytics in the current implementation described by this Policy.

2.5 Advertising and Tracking Information

The free version of the App may display advertising through Google AdMob bidding/mediation and participating advertising partners, including Meta and Pangle. Advertising providers may process device and advertising identifiers, IP address, approximate location derived from IP or device settings, App interactions, ad impressions, clicks, conversions, and related technical information.

Where required, we request consent for personalized advertising and use Apple’s App Tracking Transparency (ATT) framework before allowing tracking that requires ATT permission. If you choose “Ask App Not to Track,” we do not authorize access to the IDFA for cross-app tracking through ATT. You may still receive contextual or non-personalized advertising, and providers may process information permitted by Apple and applicable law for functions such as fraud prevention, frequency capping, measurement, or contextual ads.

Consent choices may also be collected through Google’s consent mechanisms for advertising where required by law. You can change ATT permission in iOS Settings > Privacy & Security > Tracking.

2.6 Push Notifications

We use Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) to deliver notifications, including service, retention, feature, or promotional notifications where permitted. These services may process a device push token and technical delivery information.

You can disable notifications at any time in iOS Settings. Disabling notifications does not prevent you from using the core App.

2.7 Payment Information

Apple processes payments for subscriptions and In-App Purchases. NextApp does not receive or store your full credit-card or debit-card number. We receive transaction and entitlement information needed to provide purchased functionality, maintain credits, process subscription state, and respond to refunds or revocations.

2.8 Support Communications

If you contact us at contact@nextapp.md, we process your email address, name if provided, message contents, attachments you voluntarily send, and related correspondence. Our email is hosted using Google/Gmail services. We use this information to respond to requests, provide support, investigate issues, and comply with legal obligations.

2.9 Cloudflare Infrastructure

We use Cloudflare for storage/CDN or delivery of App-owned content and assets, such as sticker packs, images, catalog content, or other resources used by the App. Cloudflare is not used by NextApp to store the personal photographs you submit for AI generation or your personal AI-generated results under the implementation described in this Policy.

3. Why We Process Information

Depending on the processing activity and applicable law, we process information for one or more of the following purposes and legal bases:

Purpose

Examples

EEA/UK legal basis where applicable

Provide the Services

AI generation, subscriptions, credits, restore/reconciliation, saving requested content

Performance of a contract; steps requested by you

Operate and improve the App

Analytics, product funnels, feature performance, technical diagnostics

Legitimate interests, where permitted; consent where required

Advertising

Contextual ads; personalized ads where permitted

Consent where required; legitimate interests for limited non-personalized functions where permitted

Security and fraud prevention

Transaction integrity, duplicate-grant prevention, abuse detection

Legitimate interests; legal obligations

Communications

Support responses and requested communications

Performance of a contract; legitimate interests; consent where required

Legal compliance

Accounting, legal requests, disputes, enforcement

Legal obligation; legitimate interests

4. AI Data Transfer and Explicit Choice

AI generation requires the transfer of the text and/or photograph you intentionally submit to OpenAI. The purpose of this transfer is to generate the content you request. If you do not want your selected photograph or prompt to be sent to OpenAI, do not use the relevant AI generation feature.

Before or at the point where required by Apple or applicable law, the App may provide a contextual disclosure explaining that the selected content will be sent to OpenAI for AI processing.

You must have the necessary rights and permissions to submit a photograph of another person. AI features are not intended for children under 13, and you must not submit photographs, images, or likenesses of children under 13 for AI generation.

5. How We Share Information

We do not sell your personal photographs or AI-generated content. We disclose information only as described in this Policy, as necessary to provide the Services, with your consent, or as required by law.

Provider / category

Purpose

Typical data involved

OpenAI

AI-generated content provider

Selected photo and/or text prompt; generated response; technical request data

Google Firebase

Anonymous authentication, Firestore, Remote Config, Analytics, FCM

Anonymous UID, app/usage data, credit and entitlement state, device/push information

AppMetrica

Analytics and technical diagnostics

App events, device/technical identifiers, performance and usage information

Google AdMob

Advertising, mediation/bidding, measurement

Advertising/device identifiers where permitted, IP/technical data, ad interactions

6. Advertising Choices and Opt-Outs

You can control Apple tracking permission in iOS Settings > Privacy & Security > Tracking. You can also manage advertising consent choices presented in the App where available.

If you decline personalized advertising or tracking, you may still receive ads that are contextual or otherwise permitted without cross-app tracking. Declining ATT permission does not necessarily prevent all data processing by advertising providers, because some processing may be permitted for security, fraud prevention, contextual advertising, aggregated measurement, or other purposes allowed by Apple and applicable law.

You can disable push notifications in iOS Settings > Notifications > Love Stickers WASticker.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining transaction integrity, resolving disputes, preventing fraud, and meeting legal, accounting, or compliance obligations.

AI source photos: NextApp does not retain the submitted source photograph on its own servers. The photo is sent to OpenAI for generation. OpenAI’s applicable retention practices apply to its processing.
AI-generated personal results: stored locally in My Album/cache on the user’s device under the current implementation; not stored by NextApp in Firebase Storage or Cloudflare.
Firebase economy and entitlement records: retained while reasonably necessary to maintain valid balances, purchases, subscription state, fraud prevention, support, and legal obligations.
Analytics and advertising data: retained according to our configurations and the retention practices of Firebase Analytics, AppMetrica, AdMob, Meta, Pangle, and applicable consent requirements.
Support email: retained for as long as reasonably necessary to respond, maintain support history, resolve disputes, or satisfy legal obligations.

We may retain limited information for longer where required by law, necessary to establish or defend legal claims, prevent fraud, or maintain transaction integrity.

8. International Data Transfers

We provide the App globally and use service providers located in multiple countries. Personal data may therefore be processed outside your country of residence, including in countries whose data-protection laws may differ from yours.

Where required for transfers from the EEA, UK, or other jurisdictions with transfer restrictions, we rely on recognized transfer mechanisms and safeguards as applicable, such as adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Addendum or other lawful mechanisms made available by our providers.

We take reasonable steps to use providers that maintain appropriate technical, organizational, and contractual safeguards.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encrypted network transport, access controls, transaction verification, Firebase security rules, and minimization of stored AI content.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

10. Children’s Privacy

AI generation features are not intended for children under 13. We do not knowingly permit children under 13 to submit photographs or other personal content to AI generation features, and our Terms prohibit submitting photographs, images, or likenesses of children under 13 for AI generation.

Users aged 13 to the age of majority must use AI features with parental or guardian permission and supervision where required by applicable law. If you believe a child’s personal information has been processed contrary to this Policy, contact us at contact@nextapp.md.

11. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal data, including the right to:

request access to personal data we hold about you;
request correction of inaccurate personal data;
request deletion of personal data, subject to legal exceptions;
request restriction of processing;
object to certain processing, including direct marketing;
withdraw consent at any time where processing is based on consent, without affecting prior lawful processing;
request data portability where applicable;
lodge a complaint with a competent data-protection or supervisory authority;
appeal certain privacy-request decisions where applicable.

To exercise a privacy right, contact contact@nextapp.md. Because the App currently uses anonymous authentication rather than a traditional login, we may need information from the App, such as a Privacy/User ID or other technical identifier, to locate records associated with your device or anonymous Firebase account. We may need to verify your request before acting on it.

We recommend displaying a Privacy/User ID inside the App’s Settings so users can provide it when making privacy requests.

12. EEA and UK Privacy Information

For users in the European Economic Area and United Kingdom, NextApp S.R.L. acts as controller for processing for which it determines the purposes and means. The legal bases used are described in Section 3.

Where processing is based on legitimate interests, our interests generally include operating and improving the App, protecting transactions and the Services, preventing fraud and abuse, and understanding product performance, balanced against your rights and interests.

Where consent is required, including for certain tracking, personalized advertising, or AI data transfers where applicable, you may refuse or withdraw consent. Refusal may prevent the relevant optional feature from operating but should not prevent unrelated functionality.

13. California and U.S. State Privacy Notice

This section supplements the Privacy Policy for residents of U.S. states with comprehensive privacy laws, to the extent those laws apply to NextApp and to the relevant processing.

13.1 Categories of Personal Information

Depending on how you use the App and your choices, we may process categories such as identifiers (for example anonymous user IDs, device or advertising identifiers where permitted, IP address, and email when you contact us); Internet or electronic activity information; commercial information such as App Store transaction and subscription state; approximate geolocation inferred from IP or technical signals; user-provided photos and prompts; generated content; and inferences or advertising profiles created by third-party advertising providers where permitted.

We do not intentionally collect precise GPS location, contacts, government identifiers, financial account credentials, or payment-card details through the App.

13.2 Purposes and Disclosure

We process and disclose these categories for the business and commercial purposes described in Sections 3 and 5, including providing AI generation, maintaining subscriptions and credits, analytics, security, support, and advertising.

13.3 Sale, Sharing, and Targeted Advertising

NextApp does not sell personal photographs or AI-generated content for money. Some U.S. state laws define “sale” or “sharing” broadly and may treat certain disclosures of device identifiers or activity information to advertising partners for cross-context behavioral or targeted advertising as a sale, sharing, or targeted advertising.

Where applicable, you may opt out through the App’s consent controls, Apple’s App Tracking Transparency settings, and/or by contacting us at contact@nextapp.md. If we provide a dedicated “Do Not Sell or Share My Personal Information” or targeted-advertising control in the future, you may also use that control.

13.4 U.S. Privacy Rights

Subject to applicable law and exceptions, eligible residents may have rights to know/access, correct, delete, obtain a portable copy, opt out of sale/sharing/targeted advertising, limit certain sensitive-data processing, and appeal a denied request. We will not unlawfully discriminate against you for exercising privacy rights.

Requests may be submitted to contact@nextapp.md. We may need to verify the request and identify the relevant anonymous App record. Authorized agents may submit requests where permitted by law and subject to verification requirements.

14. Business Transfers and Legal Disclosures

We may disclose information where reasonably necessary to comply with law, legal process, or governmental requests; protect the rights, safety, and security of users, NextApp, or others; investigate fraud or abuse; enforce our Terms; or establish, exercise, or defend legal claims.

If NextApp is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law and appropriate notice where required.

15. Third-Party Links and Services

The App may contain links to third-party services. We are not responsible for the privacy practices of third-party websites or services that you choose to access. Review their privacy policies before providing information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the effective date and make the revised Policy available through the App, nextapp.md, or another appropriate channel. Where required by law, we will provide additional notice or request renewed consent before materially different processing begins.

17. Contact Us

For privacy questions, requests, or complaints, contact:

NextApp S.R.L.
Chisinau, Republic of Moldova
Email: contact@nextapp.md
Website: nextapp.md

If you are located in the EEA or UK, you may also have the right to lodge a complaint with the data-protection authority competent for your place of residence, work, or the alleged infringement.

Annex A — Service Provider Summary

The following summary reflects the implementation described to NextApp as of the effective date. Providers and SDK configurations may change as the App evolves, and this Policy will be updated when required.

Service

Role in Love Stickers WASticker

OpenAI

Processes selected photos and text prompts to generate AI content.

Firebase Authentication

Creates and manages anonymous technical user identities.

Cloud Firestore

Stores economy, entitlement, transaction, and related backend state.

Firebase Remote Config

Delivers remote configuration values used by the App.

Firebase Analytics

Measures App usage, events, and product performance.

Firebase Cloud Messaging

Supports push-notification delivery together with APNs.

AppMetrica

Analytics and technical diagnostics.

Google AdMob

Advertising, bidding/mediation, consent-aware ad delivery and measurement.

Annex B — Important Product Privacy Notes

AI source photographs are selected through the iOS picker and are not stored by NextApp on its own servers.
Personal AI-generated results are stored locally in My Album/cache and are not uploaded to Firebase Storage or Cloudflare under the current design.
The App does not use Firebase Storage.
The App does not request precise GPS location or Contacts access.
Saving a generated sticker/image may require permission to add content to the Photos library.
Personalized advertising is subject to consent and Apple ATT requirements where applicable.
The App currently launches without a permanent login; Firebase Anonymous Authentication is used for relevant backend state.
AI generation features are restricted to users aged 13+ under the Terms, and photos/images/likenesses of children under 13 must not be submitted for AI generation.

END OF PRIVACY POLICY