Privacy Policy

Last updated: August 2026

Olivier De Grandpré ("we," "us," "our") operates the Artifact mobile application ("App"). This Privacy Policy explains what information we collect, how we use it, and your choices. By using the App, you agree to this policy.

1. Who Is Responsible for Your Data

Olivier De Grandpré is the data controller for the personal data we collect through the App, except where we state that a third party (e.g. Apple, Google, Auth0, Supabase, RevenueCat, or AI generation providers) is responsible. Their privacy policies apply to data they collect and process.

2. Information We Collect

2.1 Information You Provide

  • Account: When you sign up or sign in with Apple Sign In or Google Sign-In (via Auth0), we receive an identifier and, if shared by the provider and your choices, your name and email.
  • Profile: Information you add in the App (e.g. display name and profile picture). Profile pictures may be taken with your camera or chosen from your photo library.
  • Orders, prompts, and references: Details you submit for AI or human-made artwork—including prompts, style choices, feedback text, and reference images from your camera or photo library.
  • In-app chat: Messages you send to the designer or support about your orders, including any attachments you choose to send.
  • Support: Information you send when you contact us (e.g. email, message content).

2.2 Information Collected Automatically

  • Device and usage: Device type, operating system, app version, and basic operational data needed to run the App (e.g. feature activity, errors). We do not use a third-party analytics or crash-reporting SDK in the App.
  • In-app purchases: We receive purchase and receipt data via RevenueCat from Apple or Google (e.g. product ID, transaction ID) to validate purchases and grant credits or revisions. We do not receive or store your payment card details.
  • Push notifications: If you enable notifications, we use a device push token (via Expo's push service) to send you notifications; we may associate it with your account.

2.3 Information from Third Parties

  • Sign-in providers: When you use Apple Sign In or Google Sign-In, we receive the information they share (e.g. name, email) according to your choices and their policies, processed through Auth0.
  • Stores and purchase providers: Apple, Google, and RevenueCat provide us with purchase and receipt information for in-app purchases as described above.

3. How We Use Your Information

We use the information we collect to:

  • Provide the App and Services: Create and manage your account, process orders, generate AI artwork, deliver human-made artwork, enable in-app chat, grant credits and revisions, and support you.
  • Process payments: Validate in-app purchases (via RevenueCat with Apple/Google) and update your credits or revision count.
  • Communicate: Send you transactional messages (e.g. order updates by email or push) and, if you opt in, marketing or push notifications.
  • Operate and secure: Fix errors, prevent fraud and abuse, and enforce our Terms of Use.
  • Comply with law: Meet legal, regulatory, and tax obligations.

We do not sell your personal information to third parties for their marketing.

4. Sharing Your Information

We may share your information:

  • Service providers: With companies that help us run the App, including Supabase (database, file storage, and backend/edge functions); Auth0 (authentication); RevenueCat (in-app purchase validation); Apple and Google (sign-in and app stores); Expo (push notification delivery); Resend (transactional email, e.g. order-related messages); and AI generation providers such as Stability AI, Replicate, or similar services that process your prompts, style inputs, and reference images to generate artwork. They are required to use your data only to provide services to us and to protect it, subject to their own terms and policies.
  • Sign-in and stores: With Apple, Google, Auth0, or RevenueCat as needed for sign-in or payments; their privacy policies apply.
  • Legal and safety: When required by law, or to protect our rights, your safety, or the safety of others.
  • Business transfer: In connection with a merger, sale, or other transfer of our business or assets, subject to the same privacy commitments.
  • Designer and operations: Artifact's founder (designer) and authorized support may access order details, reference images, prompts, and in-app messages as needed to fulfill your order and provide support. We may also use internal operational alerts (for example, messaging tools) to notify about new or updated orders; those alerts are for operations only and are not used for third-party marketing.

We do not share your personal information with third parties for their own marketing.

5. Data Retention

  • Account and profile: We keep your account and profile data while your account is active. After you delete your account, we remove or anonymize personal data within a reasonable period (typically within 30 days), except where we must retain certain records longer for legal, security, or backup purposes.
  • Orders and artwork: We retain order, artwork, chat, and related data as needed to provide the service and support, and for legal/tax requirements (often up to several years for transaction records where required).
  • Purchase records: We retain in-app purchase and transaction records as required for accounting, fraud prevention, and platform rules.
  • Support and communications: We retain support emails, in-app messages, and related communications as needed for follow-up and our records, then delete or anonymize them when no longer needed.

When we no longer need data, we delete or anonymize it in line with our retention practices and applicable law.

6. Security

We use reasonable technical and organizational measures to protect your personal information (e.g. encryption, access controls, secure hosting). No system is completely secure; we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on where you live (e.g. Canada, EU, UK, California), you may have rights to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal information, subject to legal and operational requirements.
  • Object or restrict: Object to certain processing or request restriction in some jurisdictions.
  • Portability: Request a copy of your data in a portable format where required by law.
  • Opt out of marketing: Unsubscribe from marketing emails or disable push notifications in your device or app settings.

To exercise these rights, contact us at [email protected]. We will respond in line with applicable law. You may also have the right to lodge a complaint with a supervisory authority in your country.

Account deletion: You may delete your account directly in the App without contacting support. To delete your account open the app, go to Settings → Delete Account, follow the confirmation steps, and your account and associated data will be removed. Deletion may not remove all data immediately where we must retain certain records for legal or operational reasons.

8. Children's Privacy

The App is not directed at children under 12 (or under 13 where required by law, e.g. in the United States). We do not knowingly collect personal information from children. If you believe we have collected a child's information, contact us and we will delete it.

9. International Transfers

Your information may be stored and processed in Canada, the United States, or other countries where our service providers operate. Laws in those countries may differ from yours. By using the App, you consent to such transfer. Where required by law, we use appropriate safeguards (e.g. contracts, transfer mechanisms) for international transfers.

10. Third-Party Links and Services

The App may link to third-party sites or services (e.g. support pages, social media). This Privacy Policy does not apply to them. We are not responsible for their privacy practices; please read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy in the App or on our website and update the "Last updated" date. Continued use of the App after changes means you accept the updated policy. If you do not agree, please stop using the App and contact us about deleting your account.

12. Contact Us

For questions about this Privacy Policy or our privacy practices:

Olivier De Grandpré