BrandStills

Privacy Policy

Effective August 25, 2026

BrandStills (“we”, “our”, “us”) respects your privacy. This policy explains what the BrandStills mobile app and this website collect, why, and what you can do about it. We do not sell your data, we do not show ads, and we do not use third-party advertising or analytics trackers in the app.

Information We Collect

  • Photos you add. The product photos and inspiration images you upload, and the photos the app generates from them.
  • Product details. Names, descriptions and tags you type, plus the automatic analysis of your photos (for example: packaging type, shape, finish, visible label text) that the app uses to keep your product accurate.
  • Generation data. The scene, settings and prompt used for each image, and any feedback you give on a result, so we can debug and improve output quality.
  • A device identifier. Instead of an email and password, the app creates a random ID on first launch and stores it in your device’s secure storage. On Android we also read the system-provided Android ID so that reinstalling the app restores your library instead of creating an empty account. We do not collect your name, email address or phone number.
  • Purchases. When you buy credits, Apple or Google process the payment and our purchase provider tells us that a purchase happened and what it was for. We never see your card details.
  • Technical data. Platform (iOS or Android), app version, request logs and error logs, and your IP address at the moment of a request — used for security and rate limiting, not for profiling.

How We Use Your Information

  • Generate the product photos you ask for.
  • Keep your products, photos and generated images available across launches and reinstalls.
  • Analyse your photos so generated images match your real packaging and labels.
  • Track your credit balance and honour your purchases.
  • Prevent abuse, spam and excessive use of the service.
  • Diagnose failures and improve output quality and reliability.
  • Respond to you when you contact support.

We do not use your photos to advertise to you, and we do not sell or rent your data to anyone.

Data Storage and Security

Your photos are stored as private objects on Cloudflare R2, and your product and account records on Cloudflare D1; both sit behind our API on Cloudflare Workers. Photo files are not publicly listable or guessable: they are served only through short-lived signed links. Requests from the app are authenticated with a token derived from your device identifier and sent over HTTPS.

We keep your data for as long as your account exists. When you delete your account, it stops working immediately and the underlying photos and records are purged after a short grace period (currently 14 days), which exists so an accidental deletion can be investigated before the data is gone. Individual photos and generated images you delete inside the app are queued for permanent deletion in the same way.

Third-Party Services

We share the minimum needed with providers that help us run the service, including:

  • Cloudflare — hosting, storage and this website.
  • RevenueCat — records and validates in-app purchases.
  • Apple App Store / Google Play — payment processing and delivery of the app.
  • Expo — app builds and over-the-air updates.

These providers process data on our behalf under their own privacy terms. We do not use advertising networks.

Your Rights

  • Delete your account and all of its content from inside the app (Account → Delete account).
  • Delete individual products, photos and generated images at any time.
  • Ask us for a copy of the data associated with your account.
  • Ask us to correct or erase data.
  • Object to or restrict certain processing.
  • Withdraw from the service simply by deleting the app and your account.

Because we do not know your name or email, requests by email need the account ID shown in the app under Account (there is a copy button next to it) so we can find the right data. Depending on where you live, you may have additional rights under the GDPR, the Turkish KVKK, or US state privacy laws; write to us and we will honour them.

Children’s Privacy

BrandStills is a tool for people selling products and is not directed at children. We do not knowingly collect data from children under 13. If you believe a child has used the app and provided data, contact us and we will delete it.

Changes to This Policy

If this policy changes materially, we will update the effective date at the top and, where appropriate, tell you in the app.

Contact

If you have questions, contact us at: [email protected]