Privacy Policy

1. What we collect

• Account details: your name, email address and password. We only store your password hashed, so even we can't see it.
• What you upload: product, model and mannequin photos, reference images, and any images you pick as the first or last frame of a video.
• What you create: your generated images and videos, the prompts you write, and the products, models and mannequins you set up.
• Purchase and credit records: your plan, subscription status, credit balance and credit history. Your card details never reach us.
• Technical records: when you were last active, when your generations ran and what they cost, and server logs (such as IP address and request time) for security and debugging.
• Device permissions: on iOS, the camera and photo library are only used when you take, pick or save a photo.

We don't collect your location, contacts or advertising identifier. There are no analytics, advertising or tracking tools in the app or on the site.

2. Why we use your data

• To provide the service: running your account, creating the images and videos you ask for, storing your files, and managing your credits and subscription. Legal basis: our contract with you.
• To keep payment and accounting records. Legal basis: our legal obligations.
• To keep the service secure, prevent abuse and fix problems. Legal basis: our legitimate interests.
• To answer your support requests.

We don't sell your data, use it for advertising, or track you across apps and websites. We don't train our own AI models on your content.

3. Who we share it with

We work with the providers below to run the service. Each of them processes your data only to provide its own service.

• Wiro AI (wiro.ai), our generation infrastructure: when you start a generation, your prompt and the images you add are sent to Wiro. Depending on the model you pick, images are processed by Google or OpenAI models and videos by the Seedance (ByteDance) model. Your name, email and account details are never sent. Providers process the content only to generate your result and may keep a temporary copy for their own retention period.
• Appwrite: the database and file storage that hold your account, content and files. It runs on servers we manage.
• Stripe: payments and subscriptions on the web.
• Apple and RevenueCat: purchases in the iOS app. To validate your purchases, RevenueCat only receives a random user ID and your purchase records.

Before your images and prompts are sent to AI providers for the first time, the iOS app asks for your explicit consent. You can withdraw it any time by turning off AI processing in Account → Settings → Privacy, and no new generations will run.

Beyond this, we only share your data when the law requires it, or in a business transfer such as a merger, on condition that this policy keeps applying.

4. International transfers

Some of our providers process data outside the United Kingdom, the European Union and Türkiye, for example in the United States. We make these transfers with the safeguards required by applicable data protection law.

5. Cookies

The site uses only two essential cookies: a session cookie that keeps you signed in, and one that remembers your language. Your theme preference is stored in your browser. We don't use analytics or advertising cookies.

6. How long we keep it

• Your account details and content are kept while your account is open.
• Images you delete from your gallery are permanently removed. The record of the generation (date, model and cost) stays until you delete your account.
• When you delete your account, your account, content and all of your files, including generated videos, are permanently deleted.
• Because of our accounting obligations, credit transactions are kept for the legally required period in a form that can no longer be linked to you. Stripe and Apple also keep payment records under their own legal obligations.
• Server logs are kept for a short time and then deleted.

7. Deleting your account

• In the iOS app: Account → Settings → Delete account.
• By email: write to support@loomshot.ai from your account's email address and we'll delete it within 30 days.

If you have a subscription bought on the web, it is cancelled automatically when you delete your account.

Important: a subscription bought through Apple is not cancelled when you delete your account. To avoid being charged again, cancel it on your iPhone in Settings → your name → Subscriptions.

8. Your rights

Under UK and EU data protection law (UK GDPR and GDPR) and Türkiye's KVKK, you have the right to access your data and get a copy, correct mistakes, ask us to delete it, restrict or object to how we use it, take it with you, and withdraw any consent you gave.

To use these rights, write to support@loomshot.ai. Once we've confirmed it's you, we'll reply within 30 days.

If you're not happy with our answer, you can complain to a data protection authority: the ICO in the UK, your local supervisory authority in the EU, or the KVKK Authority in Türkiye.

We don't make automated decisions about you or build profiles of you.

9. Security

Your data travels over encrypted connections (HTTPS), and only our own servers can access the database and files. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

10. Age limit

Loomshot is not for anyone under 18. We don't knowingly collect data from people under 18, and if we find such an account we delete it.

11. Changes to this policy

We may update this policy from time to time. We'll let you know about important changes in the app or by email. The date at the top of this page shows the latest update.

12. Contact

Questions and requests: support@loomshot.ai. Postal address: LEX PROXIMA STUDIOS LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.