Fullframe Privacy Policy

Publisher: Appy Nation · App: Fullframe (com.appynation.fullframe)

1. What we collect, and why

Fullframe's basic editing tools (filters, adjustments, crop, retouch, background removal, text and collage) run entirely on your device. Your photos never leave your phone when you use them. This isn't a limited trial. It's the permanent, free part of the app.

Fullframe has no user accounts. You don't create a login, and we don't ask for your name, email address or any other personal identifier.

AI tools (optional)

Some tools are marked as AI tools, for example erase object, expand photo, upscale, AI headshot, hairstyle try-on, beard try-on and AI makeup style. These are the only time a photo you are editing leaves your device. When you run one of them, the photo you're working on is sent to our server. Our server passes it to our AI processing provider (Google, through its Vertex AI service) to do the one operation you asked for, and the result comes back to your device.

We only send a photo when you start an AI operation yourself. The app tells you this before you run one.
The photo and the result are kept only as long as it takes to finish your request, 15 minutes at most. Then they are deleted automatically from our processing systems. We don't keep a copy.
Our database never stores the contents of your photo or any text describing what the operation should do. It records only basic facts about the operation itself: which tool ran, how long it took, whether it worked, and how many bytes were sent. Never the image, never a prompt.
Our AI provider's terms for this service state that data sent through it is not used to train their models. That is their commitment, not something we can check ourselves, so we repeat it exactly as their terms put it.

Reporting an AI result

If you think an AI result is inappropriate, you can report it in the app. A report sends only a reference to that operation and the reason you picked. It never includes the image, which by then has usually already been deleted under the 15-minute limit above. The reporting system could also carry a short note, but the app has no place to type one today, so a report never contains anything you wrote. If we add a note field in a future version, we will update this section before it ships.

Subscriptions and purchases

Fullframe offers optional paid subscriptions (Pro, Pro AI+ and Pro AI Max) through Google Play, and in the future through the Apple App Store. The store handles all payments, so we never see or store your card details. To confirm your subscription is active, our server receives a coded reference token from the store (not your payment information) and checks it with the store. When a subscriber uses an AI tool, the same reference goes with the request, and our server keeps a count of the AI tokens that subscription has used. This keeps your balance correct when you restore your subscription after reinstalling or on a new phone. The count is just a number: no photo, no prompt, no personal details. Each AI request is also recorded under that reference so we can run the service: which tool ran, the output size, how long it took and how many bytes were sent. Never the photo or the prompt.

Camera and photo access

A photo you take in the app is handled exactly like any photo you open from your device.

The Home screen shows your most recent photos, so you can start editing without opening a picker first. To show them, the app reads the newest images and their thumbnails from your photo library. This happens entirely on your phone, and the photos are read only to show them on screen. None of them is uploaded, copied, indexed or sent anywhere. If you don't allow photo access, the app still works: you just pick photos with your device's own picker.

When you use the picker, the app sees only the file you chose. Saving an edited photo writes it to your device's gallery.

Face detection on your device

Some editing tools (retouch, reshape, makeup) use face detection that runs entirely on your device, so the tool lands in the right place. Fullframe never sends face data, a biometric template or a detection result anywhere. It exists only briefly on your device while you edit. The detection itself is done by Google's on-device ML software, whose own diagnostic data is described in section 2. That data never contains your photo or anything taken from it.

Preventing abuse of the AI service

Every AI operation costs us real money, so our server needs to tell one connection from another. Otherwise a single script could use up a day's capacity in minutes and leave paying subscribers unable to use the feature. For that reason only, the server counts operations per connection:

We do not store your IP address. We turn it into a short code that can't be reversed and store a counter under that code. The address itself is never written down.
The counter holds only a number of operations, expires automatically within about 48 hours, and is never linked to your identity, your subscription or any photo. We have no account system to link it to.
Our hosting provider (Cloudflare) also sees the connection's IP address while serving the request, like any web host, and applies its own rate limits.

2. What we don't do, and the one thing we can't switch off

We don't show ads in the app, and we don't use any advertising software.
We don't use analytics or crash-reporting software of any kind. Fullframe's own code measures nothing about how you use the app and sends nothing about it to us.
On the free tier your photos never leave your device. The only exception, on any plan, is an AI operation you start yourself (section 1).
We don't sell, rent or share your data with data brokers.
We don't require an account, and we don't track you across other apps or websites.

One thing we can't switch off. Face and feature detection in some editing tools is powered by Google's ML software (ML Kit and MediaPipe), which runs on your phone. That software sends Google its own diagnostic and performance data: your phone's model and Android version, the app's version, an identifier for this installation, model-load events and processing-time statistics about the software itself. This data never includes your photo, your face data or anything taken from your images. It isn't sent to us and we can't read it, and it's built into Google's software in a way we can't turn off. We'd rather tell you than claim a zero we don't control.

3. Who we share data with

The only company we ever share a photo with is our AI processing provider (Google, through Vertex AI), and only for the one operation you asked for. Our server runs on Cloudflare, which as our hosting provider handles the network connection for that request. If you subscribe, Google Play (or later Apple) handles your payment and subscription status, because that's where you bought it. We don't share your data with any other company.

4. Keeping and deleting data

We don't require an account and we don't store your photos or AI prompts on our servers, so there is generally nothing to delete beyond what already expires automatically within 15 minutes of an AI operation. If you have a question about a specific operation, or want us to confirm nothing was kept, contact us at the address below.

5. Children

Fullframe is not directed at children and does not knowingly collect data from children.

6. Changes to this policy

If the way Fullframe handles data changes, for example when we add a new feature or a new AI provider, we will update this policy and change the "last updated" date below.

7. Contact us

Support email: ticketappynation@outlook.com