Last updated: October 21, 2026
Master Valley ("we," "our," or "the App") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.
| Data Type | What We Collect | Purpose |
|---|---|---|
| Account Information | Email address, display name, profile photo (via Google or Apple Sign-In) | Authentication and account management |
| Transaction Data | Cash balance, purchase history, transformation IDs | Cash management and billing |
| Payment Data | Processed by Apple App Store, Google Play Store, and RevenueCat | In-app purchase processing |
| App Event Data | App install, sign-up completion, first transformation, transformation failure, and purchase events; device and app information (OS version, app version); device advertising identifier (IDFA/GAID) only where you have given consent | Measuring the effectiveness of our advertising campaigns |
| Usage Data | For each completed transformation: the art style and category you selected, the artist and artwork chosen by our AI, the type of subject in the photo (person, animal, landscape, or object — not the photo itself), the transformation type (single, One-Click, or modification), app language, the country code from your device's language and region setting, platform (iOS, Android, or web), app version, and time of use | Operating and improving the App, and producing aggregate usage statistics |
When you use the App's photo transformation feature, your photo is transmitted to third-party AI services for real-time processing. We collect and transmit only the minimum data necessary for the requested transformation (the photo itself and selected style parameters). This is how your photo data is handled:
Your photo is sent to Replicate (for AI image generation using the FLUX model), Anthropic (for photo analysis and art style matching), Google (for image editing via the Gemini model when you request modifications), and OpenAI (for master artist dialogue and GPT-4o vision-based commentary on transformed images). These services process your photo solely to generate your requested transformation and related features. We do not intentionally retain your photos beyond the time necessary for real-time processing; however, transient caching may occur for technical or security purposes. Third-party retention is governed by each provider's own data retention policies. We do not extract, collect, store, or use facial geometry, biometric identifiers, or biometric information from your photos, because we do not perform facial landmark detection, embedding generation, or any form of biometric template creation. Your photos are not used to train AI models, build identification databases, or develop facial recognition technology. We implement prompt-level restrictions, output scanning, and safety classifiers to minimize the risk of generating non-consensual intimate imagery or harmful content.
We do not collect location data, contacts, browsing history, or device sensor data. The country code included in Usage Data is read from your device's language and region setting, not from GPS or any location service. We do not sell your data to third parties, and we do not display third-party advertisements inside the App. We do not create or store biometric profiles or face templates from your photos. The App does use the Meta (Facebook) SDK solely to measure the effectiveness of our own advertising, as described in Sections 6 and 6A; on iOS this occurs only if you allow tracking when prompted.
Transformation results saved to your gallery are stored locally on your device using IndexedDB. This data never leaves your device unless you choose to share or export it. Clearing your browser data or uninstalling the App may remove locally stored gallery data.
All transformation outputs include embedded metadata (EXIF tags) indicating that the image was generated by AI, in compliance with applicable AI transparency regulations. This metadata identifies the image as "AI Generated by Master Valley" and cannot be removed through normal use of the App.
We use the following third-party services to operate the App. In accordance with Apple's App Review Guideline 5.1.2(i), we disclose that your personal data, including photo data, is shared with third-party AI services as described below:
| Service | Purpose | Data Shared | Retention |
|---|---|---|---|
| Firebase Authentication | User sign-in and account management | Email, display name, profile photo | Until account deletion |
| Firebase Firestore | Cash balance, transaction records, and usage records | User ID, cash balance, transaction history, Usage Data (Section 2) | Until account deletion; Usage Data is then kept only in de-identified form (Section 8) |
| Replicate (Third-Party AI) | AI image transformation (FLUX model) | Photo data | Not retained by us; subject to Replicate's retention policy |
| Anthropic (Third-Party AI) | Photo analysis and art style matching | Photo data | Not retained by us; subject to Anthropic's retention policy |
| OpenAI (Third-Party AI) | MasterChat interactive art dialogue | Transformation result image, conversation text | Not retained by us; subject to OpenAI's retention policy |
| Google (Third-Party AI) | AI re-transformation (Gemini model) | Transformation result image | Not retained by us; subject to Google's retention policy |
| RevenueCat | In-app purchase management | User ID, purchase records | Per RevenueCat's retention policy |
| Firebase Cloud Functions | Server-side API and photo transformation orchestration | Photo data (transient), user ID | Not retained beyond real-time processing |
| Meta Platforms (Facebook SDK) | Advertising measurement and attribution for our own app install campaigns | App events (install, sign-up, first transformation, transformation failure, purchase), device and app information, and the device advertising identifier only where you have consented. No photos are shared with Meta. | Per Meta's data policy |
Each third-party service operates under its own privacy policy. We are not responsible for the data handling practices of third-party services. We encourage you to review their respective privacy policies. By using the App's transformation feature, you consent to the transmission of your photo data to these third-party AI services as described above.
To understand whether our advertising on Meta platforms (Facebook and Instagram) leads to app installs and use, the App sends a limited set of app events to Meta through the Facebook SDK. These events are used only to measure and optimize our own advertising; we do not show third-party ads in the App and we never share your photos or transformation results with Meta.
iOS: The App asks for permission under Apple's App Tracking Transparency framework. If you choose "Ask App Not to Track," no device advertising identifier is shared, and attribution is limited to Apple's privacy-preserving mechanisms. You can change this at any time in Settings > Privacy & Security > Tracking.
Android: You can reset or delete your advertising ID, or opt out of ads personalization, in Settings > Google > Ads (or Settings > Privacy > Ads, depending on your device).
Meta's handling of this data is governed by the Meta Privacy Policy at facebook.com/privacy/policy.
We use the information we collect to: provide and maintain the App's functionality; process your photo transformations; manage your cash balance and purchases; communicate with you about your account or support requests; measure the effectiveness of our advertising campaigns; produce aggregate, de-identified usage statistics (for example, which art styles are most popular in each country); and improve the App's performance and user experience.
Account information and transaction data are retained as long as your account is active. If you delete your account, we will delete your data from our systems within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping). Usage Data is retained while your account is active; when you delete your account, your user ID is removed from it and it is kept only as de-identified statistical data that can no longer be linked to you. Photo data is not intentionally retained beyond real-time processing. Transient caching may occur for technical or security purposes, and third-party service providers may retain data in accordance with their own policies. Personal data of accounts inactive for an extended period (e.g., one year or more) may be separately stored or deleted after prior notice, as part of our dormant account processing. To prevent fraudulent account misuse, upon account deletion we store an irreversible cryptographic hash (one-way SHA-256) of your email address along with the deletion timestamp. This information cannot be reversed to recover the original email and is used solely to prevent the same email address from receiving new-user free cash again upon re-registration.
We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS/TLS), secure authentication via Firebase, and server-side access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
The App is intended for users aged 18 and older. Users under 18 may not create accounts or use the App independently. When a photo containing a minor is uploaded by an authorized adult user (such as a parent or legal guardian), our AI system automatically applies enhanced safety measures designed to promote age-appropriate processing and minimize the risk of sexual, nude, or inappropriate content being generated. However, no AI system can guarantee absolute prevention in all cases. Personal information of minors is not collected, stored, or used beyond what is strictly necessary for real-time photo transformation processing. If you believe a minor's data has been improperly collected or processed, please contact us immediately at support@mastervalley.app.
Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent for data processing; and export your data in a portable format.
To exercise any of these rights, please contact us at support@mastervalley.app.
Your information may be processed in countries other than your country of residence, including the United States and the Republic of Korea. By using the App, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.
If you are a resident of California (CCPA/CPRA), Illinois (BIPA), Texas (CUBI), or other states with biometric or consumer privacy laws: We do not sell personal information. We do not collect, capture, or store biometric identifiers or biometric information. Photos transmitted for AI processing are not retained and are not used to create face templates or biometric profiles. You have the right to request disclosure, deletion, and portability of your personal information. You have the right to opt out of the sale of personal information (we do not sell personal information). Sharing app event data with Meta for advertising measurement may be considered "sharing" for cross-context behavioral advertising under the CPRA; you can opt out at any time using the device settings described in Section 6A, or by contacting us. To exercise these rights, contact us at support@mastervalley.app.
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing your data is your consent (for account creation and photo processing) and legitimate interest (for service operation).
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the App after any changes constitutes acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at support@mastervalley.app.