Privacy Policy

AI 3D Maker · Effective October 20, 2026

This Privacy Policy explains what information the AI 3D Maker app (“AI 3D Maker: Image to 3D” on the App Store, the “app”) processes, why, who it is shared with, and the choices you have. The app is made by Emre Öztürk, an individual developer (“we”, “us”, “our”), who is responsible for your personal data as the data controller.

1. Who we are

AI 3D Maker is an iOS app developed and operated by Emre Öztürk, an individual developer. You choose a style (for example realistic bust, marble bust, chibi, anime, animated, clay, fashion doll or collectible figure), add a photo, and receive an AI-generated stylized image and a 3D model that you can rotate and view in augmented reality (AR).

For any privacy question or request, email emreoz-turk@outlook.com.

2. Information we process

Photos you choose

To make a creation, you take a photo with your camera or pick one from your photo library. Only the photo you choose is uploaded; the app does not get access to the rest of your library. A photo usually shows a person’s face and can show other details visible in it.

Your creations

For each creation we store the stylized image, a cut-out version of it (the person without the background), and the 3D model files (GLB and USDZ formats), together with job information: the chosen style, status, timings, the results of technical quality checks, and the processing cost.

The app also keeps downloaded copies of your 3D models in its cache on your device so they open quickly. Deleting a creation in the app removes them, and deleting the app removes them from your device.

Anonymous user ID

The app signs in anonymously with Firebase Authentication, a Google service. This creates a random user ID that is not linked to your name, email address or phone number. We use it to keep your creations, coins and reports connected to you.

Notifications

If you allow notifications, the app sends our server the push token Apple gives your device, linked to your anonymous user ID, so we can tell you when a creation is ready or could not be finished. The notification is delivered by Apple Push Notification service. You can turn notifications off at any time in the iPhone’s Settings; Delete Account removes the token from our server.

Purchases and coins

Payments are processed by Apple. We never receive your card or other payment details. Subscription and coin-purchase status is managed with Adapty (see section 5), and our server reads that status from Adapty to unlock Pro features and add coins. We store your coin balance and a history of coin changes (for example coins added, spent or returned), linked to your anonymous user ID and to the identifier Apple assigns to your App Store subscription, so that your coins can follow your Apple ID.

Content reports

If you report a generated result, we store the reason you select, any text you add, a reference to the result, and your anonymous user ID, so that we can review the report.

Server logs

Our backend on Google Cloud keeps technical logs (Google Cloud Logging) to run, secure and fix the service. Logs can contain technical information such as the time of a request, the request made, error messages and network information such as your IP address.

Usage data and crash reports

To see which features people use, where they get stuck and what goes wrong, the app records how it is used with Google Firebase Analytics and reports crashes and errors with Google Firebase Crashlytics:

• Usage data: the screens you open, the buttons you tap, which styles and examples are shown and opened, and the steps and outcomes of onboarding, purchases, creations and sharing (for example “purchase cancelled”, “creation finished”, or the app you picked to share a video). It also includes app errors and loading problems, your Pro status, plan and coin range, and how many creations you have.
• Crash reports: what the app was doing when it crashed or hit an error (a technical stack trace, the screen and the last button tapped), with device model, iOS and app version, and free memory and storage.
• Both are linked to your anonymous user ID and to a random app instance ID that Firebase creates. Firebase also receives your device model, iOS and app version, language and an approximate location (country or region) derived from your IP address.
• They never include your photos, the images or 3D models made from them, the text of reports you send, or your push token.

The app uses the version of Firebase Analytics that has no advertising identifier (IDFA) support, and ad personalization is turned off. We also give Adapty (section 5) the random app instance ID, so that subscription events such as renewals and cancellations can be counted together with the usage data. If you don’t want usage data or crash reports collected, email us and we will delete what we hold; deleting the app stops all collection.

Emails you send us

If you email us, we receive your email address and whatever you write, and use them only to answer you and handle your request.

What we do not collect

The app does not ask for your name, email address or phone number, and we do not collect your contacts, precise location, browsing history or advertising identifier (IDFA). When you view a model in AR, the camera is used on your device by Apple’s AR features; we do not receive the camera image.

3. How your photo is processed

1. Upload. After you give consent (see section 4), your photo is uploaded over an encrypted connection (HTTPS) to our backend on Google Cloud (Cloud Run, Cloud Storage and Firestore) in the europe-west1 region (Belgium, EU).
2. Stylized image. Our server sends the photo to Wiro (wiro.ai), an AI API provider, which processes it with an image-generation model developed by Google to create the stylized 2D image in the style you chose.
3. Original photo deleted. As soon as the stylized image is ready (normally within about a minute), we delete your original photo from our storage. If processing fails before that, we delete the photo when the creation fails.
4. 3D model. Only the stylized image (cropped, with the background removed) is sent to Runware (runware.ai), which generates the 3D model using Microsoft’s TRELLIS.2 model. Your original photo is never sent to Runware.
5. Finishing. Our server finishes the model and converts it into formats your iPhone can show in 3D and in AR.

Files we upload to AI providers are deleted from the provider’s side after we download the result, where the provider’s API allows it. The providers process this data under their own terms and privacy policies.

Face processing

To place facial details correctly on the 3D model, our server runs automated face detection and facial landmark detection on the generated, stylized image, not on your original photo. This is used only to build your 3D model. We do not create biometric templates, we do not identify or recognize anyone, and we do not use face data for any other purpose. No face data is kept apart from the generated files themselves.

4. Your consent

Before your first upload, the app explains how your photo is handled and asks for your consent to send it to third-party AI services. Nothing is uploaded without this consent. You can withdraw it at any time in the app’s Settings; after that, no new photos can be uploaded until you agree again. Your existing creations stay until you delete them. Withdrawing consent does not affect processing that already took place.

5. Service providers

We share data only with the following providers, only for the purposes listed, or where we are required to do so by law.

6. Why we use your data

Where laws such as the GDPR or KVKK require a legal basis, we rely on the following:

• Your consent: to upload your photo and send it to the third-party AI services described above. You can withdraw it at any time.
• Performing our contract with you (the Terms of Use): to create, store and show your creations, keep your anonymous sign-in working, and provide your subscription and coins.
• Our legitimate interests in running a safe and reliable service: to review reports, prevent abuse, keep the service secure and fix errors (including through server logs), and to understand how the app is used so we can find and fix crashes and improve it (usage data and crash reports, which you can object to by emailing us).
• Legal obligations: where we must keep or disclose information by law.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

7. How long we keep data

• Original photo: deleted from our storage as soon as the stylized image is ready, normally within about a minute. If processing fails before that, it is deleted as soon as the creation fails.
• Files sent to AI providers: deleted from the provider after we download the result, where the provider’s API allows it; otherwise handled under the provider’s own terms.
• Your creations (stylized image, cut-out image and 3D model files) and their job information: kept until you delete the creation in the app, delete your account (Settings › Delete Account), or ask us by email to delete your data. Deleting a creation removes all of its files. A basic record of the job without any images or models (such as its style, status, timings and processing cost) may remain in our database; you can ask us to erase it as well.
• Deleted files may remain in Google Cloud’s recovery storage for up to 7 days before they are permanently erased.
• Delete Account (in the app’s Settings) deletes all your creations and their files, your profile, coins you got before subscribing and your push tokens, and then your anonymous user ID. It also starts a new random analytics identifier on your device; usage data already sent stays under the old identifier until it expires as described below, or until we delete it on request. A Pro subscription and coins bought with it belong to your Apple ID: they are not cancelled and come back with Restore Purchases. Cancel the subscription in your iPhone’s Settings › Apple Account › Subscriptions.
• Push tokens: kept while notifications work on your device; removed when Apple reports the token as no longer valid or when you delete your account.
• Coin balance and coin history: kept while needed to provide your coins and purchases, and as required for our records.
• Content reports: kept as long as needed to review them and prevent abuse.
• Server logs: kept for about 30 days.
• Usage data: kept in Google Analytics for at most 14 months, then deleted. Aggregated reports that do not identify you (for example how many people opened a screen) may be kept longer. Email us if you want your usage data deleted sooner.
• Crash reports: kept in Firebase Crashlytics for 90 days.
• Purchase information at Adapty: kept under Adapty’s terms for as long as needed to manage your subscription and purchases.
• Emails: kept as long as needed to handle your request.

Deleting the app does not delete your creations from our servers, and you may not be able to reach them again. To remove them, use Delete Account (or delete them one by one) in the app first, or email us.

8. Your rights

Depending on where you live, you have rights over your personal data, including the right to:

• access your data and get a copy of it;
• have it corrected;
• have it deleted;
• object to certain processing;
• withdraw your consent at any time (in the app’s Settings, or by email);
• object to usage data and crash reports at any time, and have them deleted, by emailing us;
• use any other rights your local law gives you, such as restriction of processing or data portability; and
• complain to a data protection supervisory authority, for example your local authority in the EU, the Information Commissioner’s Office (ICO) in the UK, or the Personal Data Protection Authority (KVKK) in Türkiye.

These rights apply under laws such as the EU and UK General Data Protection Regulation (GDPR), Türkiye’s Personal Data Protection Law No. 6698 (KVKK), and US state privacy laws such as California’s.

How to make a request: email emreoz-turk@outlook.com. Because the app has no accounts, we may ask for information that helps us find your data, for example which creation your request is about or the approximate date you made it. We will respond within the time limits set by applicable law. We will not treat you differently for using your rights.

9. Notice for US residents

We collect the following categories of personal information, for the purposes described in this policy: identifiers (the random anonymous user ID, and IP addresses in server logs and at Adapty); commercial information (subscription status, purchases and coin history); visual information (the photos you upload and the content generated from them); technical information (device model, OS and app version, language, region/time zone, and server logs); and internet or other electronic network activity (how you use the app, and crash reports; see section 2). We receive it from you and your device, and purchase status from Apple through Adapty. We disclose it only to the service providers in section 5, for the purposes listed there.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you.

10. International transfers

We store data in the EU (Google Cloud, Belgium). Our providers may process data in the United States and in other countries where they or their subcontractors operate, which may have data protection rules different from those of your country. Where the law requires it, these transfers rely on appropriate safeguards (such as standard contractual clauses) or on your consent.

11. Children

The app is not intended for children under 13, or under the minimum age for digital consent in your country if that is higher. We do not knowingly collect personal data from children below that age. Only upload photos of yourself or of people who agreed, and never upload a photo of a minor without the permission of their parent or guardian. If you believe a child has used the app, or that a photo of a minor was uploaded without permission, email us and we will delete the related data.

12. Security

Data is sent over encrypted connections (HTTPS) and stored on Google Cloud, which encrypts stored data by default. Your files are delivered to the app through private, time-limited links. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to keep only what we need.

13. No advertising or tracking

The app shows no ads and contains no ad networks. It uses Google Firebase Analytics and Crashlytics only to understand and improve the app (section 2): set up without the advertising identifier (IDFA) and with ad personalization turned off, and the data is not used for advertising. We do not track you across other companies’ apps or websites, and we do not sell your data.

14. This website

This website does not use cookies, JavaScript, analytics or third-party resources. It is hosted on Firebase Hosting (Google), which processes standard technical data such as IP addresses to deliver the pages.

15. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top. If the changes are significant, we will also let you know in the app where appropriate, and we will ask for your consent again where the law requires it.

16. Contact

Emre Öztürk (developer of AI 3D Maker)
Email: emreoz-turk@outlook.com