Privacy Policy

Last updated: September 11, 2026

App Coverage and Responsible Entity

The provisions set forth in this Privacy Policy are applicable exclusively to the WonderPix mobile application (the "App") as distributed through the Google Play marketplace.

Ownership, development, and operational control of the App are vested in Mwogezi (referred to in this document as "the Developer," "we," "our," or "us"). Throughout this Privacy Policy, all instances of "we," "our," or "us" shall be understood to designate Mwogezi, which serves as the legally recognized party accountable for the functioning and oversight of WonderPix.

For users who have downloaded WonderPix from Google Play, this document establishes the binding framework governing how your information is gathered, processed, maintained, and disclosed in connection with your use of the App.

Summary of Processing Steps

Our avatar generation functionality proceeds in accordance with the following operational sequence:

  1. The user initiates the process by uploading one or more photographs into the system and indicating their template selection from the designated interface.
  2. A personalized copy of the diffusion-based model is instantiated and retrained exclusively on the provided dataset, thereby tailoring the algorithmic output to the individual user.
  3. Once retraining has concluded, the system produces the final avatar rendition derived from the customized model parameters.
  4. Immediately subsequent to the avatar's creation, all user-supplied photographic materials and the associated retrained model copy are irrevocably expunged from our servers. It is important to note that the utilization of generated avatars is subject to explicit constraints—including, but not limited to, a prohibition on generating explicit nude content and a requirement that only photographs for which the user holds proper authorization may be uploaded.
  5. We affirm that your personal information will never be incorporated into any general foundational model training initiatives or leveraged in the creation of any distinct AI offerings separate from this Service.

User-Triggered Remote Processing

Certain advanced capabilities of WonderPix, such as AI-assisted modification, quality refinement, and visual composition, are facilitated through protected cloud computing environments. These remote processing operations are performed exclusively when you voluntarily select a tool or function that inherently requires server-side processing power, and they occur only as a direct consequence of your affirmative choice to utilize that particular feature.

Conditions Triggering Upload

Uploading of photos, videos, or other user-generated media occurs only after you have proactively chosen a feature that depends on server-side processing and have distinctly initiated the operation through the user interface. No media content is ever transferred to our infrastructure automatically, passively, or without clear user awareness. Whenever an upload is about to be initiated, the App explicitly informs you that the selected capability relies on remote cloud execution.

Retention Schedule and Content Erasure

The media you submit remains on our systems solely for the period necessary to accomplish the processing task you have requested. Once the operation is finalized, all submitted originals along with the resulting deliverables are systematically and irreversibly removed from our servers within a 72-hour window. Mwogezi neither preserves nor retains any duplicate copies of your uploaded files, and we do not apply your content to advertising initiatives, model development, user profiling, or any other non-specified use cases.

Protection of Transmitted Data

All inbound and outbound communications involving your media are secured via standard TLS encryption technology. Access to stored content is rigorously confined to automated computational workflows and the essential infrastructure personnel and systems that are indispensable to completing the service you have requested.

Content Notice

We strive to configure the AI model as appropriately as possible. However, you may still encounter content that feels unsuitable for you. If you see anything offensive or inappropriate, please report it to us at thomasburra@gmail.com. We will take prompt action, and your feedback also helps us improve the algorithm over time.

Information Collected Through Our Platforms

  1. Activity-Based Usage Data
    We may compile data regarding your usage behavior across our Platforms, encompassing items such as pages viewed, interactions performed, files
  2. Device Specifications and System Logs
    To sustain operational reliability, strengthen security protocols, refine the overall user experience, enable ad serving and messaging features, and uphold account safety, we log certain device parameters and access records whenever you utilize our services via the Platforms. These include: unique device identifiers, Google Advertising ID, device model, system locale and language, country of access, OS version and build number, IP address, installed software version, network access modality, performance metrics regarding network quality, and related server logs.
  3. Inquiries and User-Furnished Feedback
    Whenever you approach us with support requests or offer commentary on our services, we record the information and documentation you provide, together with your identifying contact details (such as telephone number and email address). This facilitates our ability to address your questions and render effective customer service.
  4. Facial Recognition Processing
    In the course of using our facial modification or synthesis capabilities, our system automatically identifies the coordinates and geometry of your facial landmarks to perform the analytical computations essential to photo processing. The resultant rendered imagery is subsequently returned to you. We do not archive these images, videos, facial feature vectors, or renderings within our systems, nor do we transmit them to any external entity. This operation is performed exclusively to support the facial editing functionality and to improve your output quality. If your activity involves facial imagery belonging to others, you are solely accountable for notifying the relevant individuals and acquiring their prior authorization.
  5. Cloud-Enabled Processing
    To achieve rapid and accurate image or video manipulation, we may temporarily transmit your uploaded content or associated labeling data to a cloud-based server infrastructure for the purpose of effect generation. These transmissions are limited in scope to the specific service instance you have requested. We do not preserve the uploaded materials, tags, or auxiliary data beyond the minimal timeframe required, nor do we apply them to any other purposes or share them with any outside parties.

Access Permissions on Your Device

To enable the provision of improved offerings, streamlined operations, and a superior overall experience, we may request specific device-level authorizations when making additional capabilities available. With your prior approval and strictly adhering to the policy of collecting only the minimal essential data, we may obtain the permissions enumerated below, along with the corresponding categories of information:

  1. Read/Write External Storage Permission - Used to read from and write to your device's external memory card for video editing purposes.
  2. Camera Permission - Allows you to take photos and record videos within the app.
  3. Network Access Permission - Enables various online services, such as accessing and downloading materials.

Permissions, Consent, and Revocation

The data accessible through these device permissions is regarded as confidential and requiring heightened protection. If you opt not to grant a particular permission, the sole consequence will be the unavailability of the specific feature that relies upon it; all other capabilities within the application will continue to operate without impairment. You retain the ability to examine your current permission settings at any time through the device's native settings panel. The prerogative to activate or deactivate any or all permissions remains fully yours.

Your act of granting a permission constitutes your explicit authorization for us to collect and utilize the relevant personal information solely in connection with the service rendered by that feature. Should you later choose to disable a permission, that action will effectively terminate your prior authorization, and we will immediately discontinue any collection or use of personal information reliant on that permission from that point forward. However, please note that disabling a permission does not nullify any data collection or usage that lawfully took place prior to such revocation while the permission was still in effect.

Third-Party SDKs and Service Providers

To deliver core features, process analytics, and support in-app purchases, WonderPix integrates with the following third-party software development kits (SDKs). Each SDK may collect and process certain device and usage data as described below. All such processing occurs only after you have consented to this Privacy Policy.

  1. AppsFlyer (provided by AppsFlyer Ltd.)
    Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.
    Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data helps us understand how you discovered our app and improve our promotional activities.
  2. Google Play Billing (provided by Google LLC)
    Purpose: Processing in-app purchases and subscription transactions.
    Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is
  3. Google Install Referrer (provided by Google LLC)
    Purpose: Identifying the source (channel) that led to your app installation.
    Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.
  4. Google Ads Identifier & AppSet ID (provided by Google LLC)
    Purpose: Providing anonymized identifiers for analytics and ad performance measurement.
    Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.
  5. Google Sign-In (provided by Google LLC)
    Purpose: Enabling Google account-based login and authentication.
    Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.
  6. Functional Libraries (No Data Collection)
    The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data Collection and Use

We systematically gather and evaluate data with the objective of facilitating continuous improvements to our Service and elevating the overall user experience. This information is handled in a de-identified and aggregate manner, which allows us to discern behavioral patterns and make informed refinements to our product portfolio. The resulting aggregated statistics may be shared with our subsidiaries, representatives, and business collaborators for uses including scholarly research, feature advancement, and commercial forecasting. We hereby assure you that this analytical data is strictly anonymized and does not contain any personally identifiable information pertaining to you or your end users.

Uses of Your Personal Data

Consistent with the terms set forth in this policy, we may utilize the information you provide to facilitate service delivery and maintain active communication with you. The specific purposes for which your data is employed encompass the following categories:

  1. Enhancement of Service Quality
    Your information supports the design, operation, and continuous advancement of our products and capabilities. For instance, through the examination of user behavioral data, we are able to confirm that the platform remains efficient,
  2. Infrastructure Security and Risk Management
    We process your information to preserve account protection and network reliability, ensuring the ongoing safety of our services across the entire user base. Measures may include pre-screening or scanning content submissions for indicators of illegality. Additionally, your data may be applied to loss prevention efforts, end-user security support, and other safety-related operations.
  3. Dissemination of Important Notices
    Your information enables us to dispatch essential communications to you, including but not limited to security alerts pertaining to your account, as well as notifications concerning modifications to our terms of use, policies, and related agreements.
  4. Regulatory and Statutory Compliance
    We retain and process your information as may be required to satisfy our legal and regulatory duties. This may involve the recording, auditing, analytical review, and handling of your data in full conformity with relevant laws, including where such processing is necessitated by emergency circumstances.

Your Choices

You may limit data collection by:

Your Right to Delete Data

While using our app, you retain full control over your information and may delete saved records at any time. We are committed to protecting your privacy and ensuring that data removal is possible. You can clear your history and other stored information through the app's settings menu. Additionally, uninstalling the app will automatically erase any data stored locally on your device. Please be aware that once data is deleted, it cannot be restored. If you have any questions regarding your deletion rights, feel free to reach out to our support team for help.

Cookie Usage and Similar Tracking Mechanisms

We utilize cookies, pixel tags, and other comparable technical tools in accordance with standard industry practice. Cookies—which are small data records stored locally on your device's storage or memory—contain information about your activity within our services, enabling essential operations such as login verification, retention of user-selected preferences, monitoring of site traffic and behavioral metrics, assessment of promotional performance, and activation of community-oriented features. Pixel tags are miniature code fragments embedded in webpage content or electronic mail, serving to reveal how users interact with the material presented.

While web browsers generally accept cookies as a default setting, most provide users with the ability to adjust their preferences to remove or disable such tracking mechanisms. Nevertheless, we caution that disabling cookies may result in diminished availability or impaired performance of certain aspects of our services.

We deploy analytics services provided by external vendors to assess visitor traffic and evolving usage patterns across our platform. These solutions capture data originating from your device or from our services, including pages accessed, functionalities utilized, and additional indicators that inform our product refinement efforts. All analytical information is consolidated in aggregate form with data from other users, ensuring that it does not individually identify any particular person.

We maintain commercial arrangements with third-party advertising partners for the distribution of promotional materials via internet channels and other outlets. In support of performance measurement and payment verification, we have integrated third-party software components into our applications. We may also implement such modules to acquire deeper insights into how users engage with our service offerings.

How Long We Keep Your Personal Information

We retain your personal data for a period of 48 months. We may keep and use your information as necessary to fulfill legal obligations (for example, complying with applicable laws), resolve disputes, and enforce our agreements and policies.

We also retain Usage Data for internal analytical purposes. This type of data is generally kept for a shorter duration unless it is needed to enhance security, improve our Service functionality, or we are legally required to retain it for a longer period.

Information Sharing Practices

We neither sell nor license your personal data to any third parties for commercial purposes. The SDKs referenced throughout this policy share user data exclusively with their corresponding providers, limited to the functionalities as described. These providers are bound by enforceable agreements requiring them to handle all shared information in strict accordance with relevant data protection regulations.

Circumstances for Data Disclosure

Mwogezi refrains from selling, renting, or exchanging your personal information with any external entity. We may share personal information only when such action is required to fulfill the services you have requested, to sustain the ongoing operation of WonderPix, to complete financial transactions you have authorized, to meet our obligations under applicable statutes and regulations, or to safeguard our proprietary interests and the security of our systems.

Engagement of External Service Partners

To support the essential operations of WonderPix, we partner with a number of trusted third-party service organizations. These partners deliver critical functions such as identity verification, payment gateway services, analytical reporting, campaign attribution tracking, cloud storage and computing resources, fraud detection capabilities, and comprehensive application monitoring.

Depending on the feature you use, these providers may process limited categories of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

Processing of User Content via Artificial Intelligence

When you elect to submit photographic images, video recordings, or other digital materials for AI-powered manipulation, such content is utilized solely to fulfill the specific processing task you have initiated. We expressly confirm that your submitted materials are never sold, sublicensed, or disseminated to external parties for promotional purposes, behavioral analysis, or the development of general-purpose AI models. All media files are handled only to the extent necessary for the requested operation and are subject to automatic deletion within the timeframes specified elsewhere in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

If WonderPix or Mwogezi becomes involved in a merger, acquisition, corporate reorganization, financing, sale of assets, or similar business transaction, your personal information may be transferred as part of that transaction.

In such cases, the receiving entity will be required to protect your personal information under privacy protections that are substantially equivalent to those described in this Privacy Policy and in accordance with applicable data protection laws.

Security Measures and Data Protection Commitments

We assign high priority to the security and confidentiality of your personal data. To counter threats such as unlawful access, unauthorized disclosure, or other possible harms, we have established reasonable physical, electronic, and managerial safeguards applicable to information obtained through your interaction with our Platform. We are dedicated to exercising due diligence in the protection of your data.

Our security framework undergoes routine assessment and is adapted when necessary to address shifts in our business landscape, emerging technological developments, and evolving regulatory obligations. These precautions include, without limitation, the adoption of technical and organizational security policies, the enforcement of access privilege controls, and the delivery of regular training to our personnel.

Notwithstanding our strong commitment to data protection, we acknowledge that no internet-based transmission or electronic data retention method is entirely immune to compromise. Despite our efforts to apply industry-recognized protective measures, we cannot provide an unconditional guarantee of security.

In the event that we detect a security breach affecting your personal information, we will issue a notification to you as mandated by relevant laws and regulations. Your continued use of the Platform signifies your agreement to receive such notices via electronic communication.

Data Subject Rights

If you seek additional clarification concerning your legal prerogatives under relevant privacy legislation, or if you desire to assert any of those rights, please do not hesitate to reach out to us using the contact information set forth in the "How to Contact Us" section below. In accordance with the regulations applicable in your jurisdiction, you may have the authority to submit a request for us to perform any of the following:

  1. Provide access to, or a copy of, certain personal information we hold about you.
  2. Stop using your information for direct marketing purposes, including any marketing activities based on profiling.
  3. Correct any outdated or inaccurate information we have about you.
  4. Erase specific information we maintain on you.
  5. Limit how we process or share certain information related to you.
  6. Transfer your information to another third-party service provider.
  7. Withdraw any consent you previously gave regarding the processing of your information.

We will evaluate all requests and respond within the timeframe required by applicable law. Please be aware that in some situations, certain information may not be subject to such requests — for example, if we need to continue processing your data to protect our legitimate interests or to comply with legal obligations. Before processing your request, we may ask you to provide reasonable information to verify your identity.

Privacy Safeguards for Underage Users

The Services offered herein are not directed toward persons younger than 18 years of age ("Minors"). We do not intentionally gather or maintain personally identifiable data pertaining to any user who has not reached this age. If you are a parent or guardian and you discover that your minor child has furnished us with Personal Data, please notify us immediately. Following the confirmation that such data was acquired without properly authenticated parental authorization, we shall expeditiously initiate removal procedures to eliminate it from our repositories.

Compliance with CCPA, VCDPA, GDPR, and LGPD

We adhere to the privacy standards mandated by the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), the EU General Data Protection Regulation (GDPR), and Brazil's Lei Geral de Proteção de Dados (LGPD). Users situated within these regions are conferred with statutory rights, including the privileges to review, amend, remove, or challenge the handling of their personal data. Should you wish to invoke any of these entitlements, please reach out to our customer support staff for further direction.

Legal Grounds for Processing Your Data

We process your personal information in compliance with relevant data protection laws, including the General Data Protection Regulation (GDPR). Depending on the specific purpose of processing, we rely on one or more of the following legal bases:

  1. Legitimate Interests
    We may process certain non-sensitive data to pursue our legitimate interests, which include:
    • Enhancing the performance and user experience of our applications.
    • Maintaining the security and reliability of our apps and services.
    • Studying app usage patterns to better inform future development.
    When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.
  2. Legal Obligations
    In certain situations, we are required to process your data to meet legal obligations, such as complying with applicable financial, tax, or regulatory requirements.
  3. Vital Interests
    In exceptional circumstances, we may process your data to protect your vital interests or those of another person — for example, in response to a security incident affecting an application.

Your Right to Lodge a Grievance

In the event that you consider our processing activities to be in breach of relevant data protection regulations or to have violated your individual rights thereunder, you have the legal prerogative to refer the matter to a supervisory authority. This right is available, for example, to EU-based users pursuant to the GDPR framework, and may also be accessible to users located in other regions subject to comparable privacy regimes.

Guidance on Submitting a Complaint

If you decide to pursue a complaint, you may direct your submission to the relevant data protection oversight body in your jurisdiction. The appropriate contact information for such agencies can typically be found on their official web portals. As an alternative, you may also contact our team directly, and we will endeavor to offer further clarification on the complaint procedures available to you.

Resolution Through Internal Channels

We strongly encourage you to contact us before pursuing any formal complaint procedure, so that we may have the opportunity to address your concerns through reasonable and good-faith efforts. Our Data Protection Officer (DPO) is available to receive your communications, or you may reach out to us directly via email at thomasburra@gmail.com.

Identity of the Data Controller

Under the framework of applicable privacy laws, the data controller responsible for personal information gathered via WonderPix is Mwogezi. Mwogezi determines the objectives and operational mechanisms for processing personal data and is accountable for maintaining adherence to all relevant data protection obligations. For any matters pertaining to privacy or data handling, please contact us at thomasburra@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Policy Revisions and Updates

This Privacy Policy may be subject to periodic revisions to reflect operational, legal, or regulatory developments. We advise you to consult this page on a regular basis to stay apprised of any amendments. When we make material changes, we will display the updated policy here. Each revised version takes effect as soon as it is posted to this page.

How to Reach Us

If you have any questions, issues, or suggestions regarding our Privacy Policy, please feel free to contact us via email at thomasburra@gmail.com.