Privacy Policy

Data controller / operator: Eryk Czekalski · Górnych Wałów 23B/29, Gliwice, Poland · cognitra.adm@gmail.com

1. What we collect

Account data via Google Sign-In (Firebase Authentication): your name, email, profile photo, and a unique user ID.

Your selfie: the photo you upload is sent to our image-generation provider to create your stylized image. We do not store your original selfie after the image is generated — only the generated result is saved.

Quiz answers, generated images, technical/usage data (IP for rate-limiting only, timestamps, basic device info), and payment data handled entirely by Polar (we never receive your card details).

2. How we use your data

To authenticate you, generate and store your images, personalize results, enforce usage limits and prevent abuse/fraud, process purchases, and provide support.

3. Legal bases (GDPR Art. 6 & 9)

Performance of a contract; your consent (for processing the facial image in your selfie); and our legitimate interests in security and fraud prevention. You can withdraw consent at any time by deleting your account.

4. About your selfie / facial data

Your selfie is used solely to generate a stylized, fictional image. It is not used for identification, biometric matching, or profiling, and the original is discarded after generation. Only the generated artwork is retained.

5. Who we share data with (processors)

Google Firebase (Auth, Firestore, Storage, Hosting); Google Cloud Vertex AI (image generation); Polar (Merchant of Record for payments); and, only if you opt in, Google Analytics (anonymous usage analytics). These providers may process data outside the EEA under appropriate safeguards. We do not sell your data.

6. Retention

Generated images and account data are kept until you delete them or delete your account, which you can do anytime in Settings → Delete my account & images. Backups and logs are purged on a rolling basis.

7. Your rights

Under the GDPR you can access, rectify, erase, restrict, port, and object to processing, and withdraw consent — most of this directly in the app, or by emailing cognitra.adm@gmail.com. You may also lodge a complaint with the Polish authority (UODO).

8. Cookies / local storage

Essential storage for authentication/session and your preferences (e.g. language). Optional analytics: only if you accept the consent banner, we load Google Analytics (GA4) to count anonymous, aggregated visits with your IP anonymized — no advertising trackers and no profiling. Analytics never load until you opt in, and you can decline or change your mind at any time.

9. Children

The app is not intended for anyone under 16, and we do not knowingly process their data.

10. Changes

We may update this policy; the date below reflects the latest version. Material changes will be surfaced in the app.