Lenticular Privacy Policy

1. Who we are

Lenticular is made by MavenWright Studio ("we", "us"), Istanbul, Türkiye. We are the data controller for the personal data described here. Contact: [email protected].

2. What stays on your device

You can use Lenticular without an account. Your cards, their photos and depth maps, your lens profiles and your printer settings are then stored only on your device, and none of them is sent to us unless you send something to the assistant (section 5).

3D from a single photo is worked out on your device by an AI model that comes with the app. Your photos are not sent anywhere for it. The engine that runs the model (Microsoft's ONNX Runtime) can send usage statistics of its own to Microsoft; Lenticular switches that off.

When you print a card or share a preview, the file goes only where you send it: to your printer, or to the app you choose.

3. Signing in with Google or Apple

Signing in is optional. It lets you sync your cards between your devices and use your Plus or Pro plan on all of them. You sign in with Google or Apple; Lenticular has no passwords of its own.

Google or Apple tells us your email address, that it has confirmed that address, and an identifier for your account with them. With Apple this can be the relay address Apple gives you when you choose to hide your own. We ask for nothing else (no name, contacts or profile) and never see your Google or Apple password.

For your account we keep:

• an account id: a random identifier for your account;
• the email address and the Google or Apple identifier described above;
• the sign-in tokens that keep the app signed in, stored only as one-way hashes;
• if you sign in with Apple, a token Apple gives us, kept only so that we can revoke Lenticular's access at Apple when you delete the account;
• your plan (Free, Plus or Pro), where it came from and when it ends.

Like any server, ours sees the IP address of the device that connects to it. We use it to limit how many requests can come from one address and to keep the service safe.

4. Cloud sync

When you are signed in, Lenticular keeps a copy of the following on our servers and syncs it to your other signed-in devices. Cloud sync is part of every plan, Free included.

• your cards: each card's settings and layout, and its photos, depth maps and edit files;
• your lens profiles;
• the printer you chose and the lens you use with it.

Your theme, your language and the other preferences of each device are not synced, and neither are cards that have no photo yet.

Card records and settings are kept in our database. Photos and the other files of your cards are stored in Cloudflare R2, Cloudflare's storage service, in a space of your account's own; files are never shared between accounts. Cloudflare keeps them encrypted on its disks. They are not end-to-end encrypted: our server can read them, as it must to send them to your devices. We use your cards only to store and sync them for you.

When you delete a card, it moves to Recently deleted, where you can restore it for 30 days or delete it for good straight away. After 30 days it is deleted for good. When a card is deleted for good, its photos and files are removed from storage about a week later, unless another of your cards uses the same file. Deleting a lens profile is final at once. A small marker with no content (the card's id and when it was deleted) stays, so that a device that was offline also learns about the deletion.

5. The assistant

Lenticular has an assistant you can chat with: through the app it can make your cards, change them and get them ready to print. Nothing is sent to it until you agree, on the screen shown before your first message. When you send it a message, the following goes to our server and from there to OpenAI's API, which writes the answer:

• your message and the earlier messages of that conversation;
• a summary of the app and the open card: the screen you are on, your plan, your paper size and the app's language, your lens and printer settings, and the card's kind, size, number of photos and settings;
• photos you attach to a message, as a copy whose long side is at most 768 pixels;
• a small picture of the card, only when the assistant asks to look at it.

Your original photos, depth maps and print files are not sent.

You can send your first 5 messages without signing in. For them the app makes a random install id the first time it opens and sends it with your messages, so that our server can count them. The IP address your messages come from is also counted, in memory only, to limit how many messages one address can send in a day. After 5 messages the assistant asks you to sign in with Google or Apple.

Your conversations: when you are signed in, your conversations and the photos you attached are kept in your account and synced to your other signed-in devices, like your cards (section 4), so that you can carry on a conversation on another device. Without an account they stay on your device, and they are uploaded to your account when you sign in. Deleting a conversation is final at once; its attachments are removed from storage about a week later.

The product log: to find and fix the assistant's mistakes, our server keeps a log of each message for 90 days: what you wrote, the app summary, the attached photos as they were sent, what the assistant answered, which app actions it asked for and how they ended, and the app's version and language. We use it only to improve Lenticular. You can turn it off on the permission screen; your messages are then not kept in it. Messages sent before you signed in are logged under the install id, not under your account.

For costs and limits our server also keeps counts, with no words in them: how many messages you sent each day, how many model calls and tokens each one used, and which app actions were used and how they ended.

OpenAI processes the request for us under its API terms. At the time of writing, OpenAI does not use API data to train its models, and keeps requests and answers for up to 30 days to detect abuse, longer only where the law requires it.

6. Purchases

On iPhone, iPad, Mac and Android, payments are handled by Apple or Google. RevenueCat, Inc. tells the app and us which Plus or Pro subscription is active; it receives an app user id (a random id, or your Lenticular account id once you sign in) and the store's purchase history. We never see your card details.

7. No ads, no tracking

Lenticular shows no ads and has no analytics or crash-reporting tools in it. We do not track you across other companies' apps or websites, and we do not sell your data or share it for advertising.

The mavenwright.com website has its own privacy policy: https://mavenwright.com/en/legal/privacy.

8. Where your data is kept, and who processes it for us

Our servers are in the European Union (France). If you live in Türkiye, using Lenticular's account, cloud sync and assistant means your data is transferred to and stored outside Türkiye, and reaches the processors below, some of which are in the United States. What you send to the assistant goes from our server in the EU to OpenAI in the United States.

• Hostinger International Ltd.: our servers (EU)
• Cloudflare, Inc.: network protection and delivery, and storage of your cards' photos and files and your conversations' attachments (Cloudflare R2)
• Google LLC: Sign in with Google, if you choose it
• Apple Inc.: Sign in with Apple, if you choose it
• OpenAI, L.L.C.: the OpenAI API for the assistant
• RevenueCat, Inc.: App Store and Google Play purchases and subscriptions

9. Why we may use it (GDPR Art. 6 / KVKK Art. 5)

• To provide what you ask for (your account, cloud sync, your assistant conversations and your plan on all your devices, purchases): performance of a contract.
• Sending your messages, the app summary and the photos you attach to OpenAI for the assistant: your consent, asked before your first message.
• The assistant's product log: our legitimate interest in finding and fixing its mistakes; you can turn it off.
• Limiting requests and messages (counting messages sent without an account by the install id included) and keeping the service secure: our legitimate interest in a service that works and is safe.
• Purchase records: our legal obligations (tax and accounting).

10. How long we keep it

• Account data and synced cards, lens profiles and settings: while the account exists; all of it is deleted when you delete the account.
• Deleted cards: 30 days in Recently deleted, then deleted for good; their files are removed from storage about a week after that. Deleted lens profiles: at once.
• Assistant conversations and their attachments: until you delete them or the account; a deleted conversation's attachments are removed from storage about a week later.
• The assistant's product log: 90 days; what is logged under your account is deleted at once when you delete the account.
• Assistant usage counts (no words): while the account exists.
• The install id and how many messages it sent without an account: kept, so that the 5 messages without signing in are counted once.
• Sign-in tokens: they expire after at most 30 days unless the app renews them, and are deleted with the account.
• Purchase records: as long as tax law requires.

11. Your rights (GDPR / KVKK Art. 11)

You can ask what we hold about you and have it corrected, deleted or sent to you, and object to processing. Write to [email protected]; we answer within 30 days. You can also complain to your data protection authority (in Türkiye, the KVK Kurumu at kvkk.gov.tr).

13. Children

Lenticular is not directed at children under 13, and we do not knowingly collect their data.

14. Changes

We post changes to this policy here and update the date at the top.