Last updated: May 10, 2026
Master Valley ("we," "our," or "the App") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.
| Data Type | What We Collect | Purpose |
|---|---|---|
| Account Information | Email address, display name, profile photo (via Google or Apple Sign-In) | Authentication and account management |
| Transaction Data | Cash balance, purchase history, transformation IDs | Cash management and billing |
| Payment Data | Processed by Apple App Store, Google Play Store, and RevenueCat | In-app purchase processing |
When you use the App's photo transformation feature, your photo is transmitted to third-party AI services for real-time processing. We collect and transmit only the minimum data necessary for the requested transformation (the photo itself and selected style parameters). This is how your photo data is handled:
Your photo is sent to Replicate (for AI image generation using the FLUX model), Anthropic (for photo analysis and art style matching), Google (for image editing via the Gemini model when you request modifications), and OpenAI (for master artist dialogue and GPT-4o vision-based commentary on transformed images). These services process your photo solely to generate your requested transformation and related features. We do not intentionally retain your photos beyond the time necessary for real-time processing; however, transient caching may occur for technical or security purposes. Third-party retention is governed by each provider's own data retention policies. We do not extract, collect, store, or use facial geometry, biometric identifiers, or biometric information from your photos, because we do not perform facial landmark detection, embedding generation, or any form of biometric template creation. Your photos are not used to train AI models, build identification databases, or develop facial recognition technology. We implement prompt-level restrictions, output scanning, and safety classifiers to minimize the risk of generating non-consensual intimate imagery or harmful content.
We do not collect location data, contacts, browsing history, or device sensor data. We do not use advertising trackers or sell your data to third parties. We do not create or store biometric profiles or face templates from your photos.
Transformation results saved to your gallery are stored locally on your device using IndexedDB. This data never leaves your device unless you choose to share or export it. Clearing your browser data or uninstalling the App may remove locally stored gallery data.
All transformation outputs include embedded metadata (EXIF tags) indicating that the image was generated by AI, in compliance with applicable AI transparency regulations. This metadata identifies the image as "AI Generated by Master Valley" and cannot be removed through normal use of the App.
We use the following third-party services to operate the App. In accordance with Apple's App Review Guideline 5.1.2(i), we disclose that your personal data, including photo data, is shared with third-party AI services as described below:
| Service | Purpose | Data Shared | Retention |
|---|---|---|---|
| Firebase Authentication | User sign-in and account management | Email, display name, profile photo | Until account deletion |
| Firebase Firestore | Cash balance and transaction records | User ID, cash balance, transaction history | Until account deletion |
| Replicate (Third-Party AI) | AI image transformation (FLUX model) | Photo data | Not retained by us; subject to Replicate's retention policy |
| Anthropic (Third-Party AI) | Photo analysis and art style matching | Photo data | Not retained by us; subject to Anthropic's retention policy |
| OpenAI (Third-Party AI) | MasterChat interactive art dialogue | Transformation result image, conversation text | Not retained by us; subject to OpenAI's retention policy |
| Google (Third-Party AI) | AI re-transformation (Gemini model) | Transformation result image | Not retained by us; subject to Google's retention policy |
| RevenueCat | In-app purchase management | User ID, purchase records | Per RevenueCat's retention policy |
| Firebase Cloud Functions | Server-side API and photo transformation orchestration | Photo data (transient), user ID | Not retained beyond real-time processing |
Each third-party service operates under its own privacy policy. We are not responsible for the data handling practices of third-party services. We encourage you to review their respective privacy policies. By using the App's transformation feature, you consent to the transmission of your photo data to these third-party AI services as described above.
We use the information we collect to: provide and maintain the App's functionality; process your photo transformations; manage your cash balance and purchases; communicate with you about your account or support requests; and improve the App's performance and user experience.
Account information and transaction data are retained as long as your account is active. If you delete your account, we will delete your data from our systems within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping). Photo data is not intentionally retained beyond real-time processing. Transient caching may occur for technical or security purposes, and third-party service providers may retain data in accordance with their own policies. Personal data of accounts inactive for an extended period (e.g., one year or more) may be separately stored or deleted after prior notice, as part of our dormant account processing. To prevent fraudulent account misuse, upon account deletion we store an irreversible cryptographic hash (one-way SHA-256) of your email address along with the deletion timestamp. This information cannot be reversed to recover the original email and is used solely to prevent the same email address from receiving new-user free cash again upon re-registration.
We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS/TLS), secure authentication via Firebase, and server-side access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
The App is intended for users aged 18 and older. Users under 18 may not create accounts or use the App independently. When a photo containing a minor is uploaded by an authorized adult user (such as a parent or legal guardian), our AI system automatically applies enhanced safety measures designed to promote age-appropriate processing and minimize the risk of sexual, nude, or inappropriate content being generated. However, no AI system can guarantee absolute prevention in all cases. Personal information of minors is not collected, stored, or used beyond what is strictly necessary for real-time photo transformation processing. If you believe a minor's data has been improperly collected or processed, please contact us immediately at support@mastervalley.app.
Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent for data processing; and export your data in a portable format.
To exercise any of these rights, please contact us at support@mastervalley.app.
Your information may be processed in countries other than your country of residence, including the United States and the Republic of Korea. By using the App, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.
If you are a resident of California (CCPA/CPRA), Illinois (BIPA), Texas (CUBI), or other states with biometric or consumer privacy laws: We do not sell personal information. We do not collect, capture, or store biometric identifiers or biometric information. Photos transmitted for AI processing are not retained and are not used to create face templates or biometric profiles. You have the right to request disclosure, deletion, and portability of your personal information. You have the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at support@mastervalley.app.
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing your data is your consent (for account creation and photo processing) and legitimate interest (for service operation).
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the App after any changes constitutes acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at support@mastervalley.app.