Privacy Policy

asoha creates or edits images from the photos you add and the words you write. This policy explains what data that involves and how we handle it. In short: your photos and descriptions are used only to create your images, we show no ads, and we never sell your data.

1. Who We Are

asoha is operated by Asoha AS, a company registered in Norway. We are the data controller for the personal data described in this policy. Contact: aamund@asoha.app.

2. What Data We Collect

• Account data: your email address and name, received from Google or Apple when you sign in. Google also provides your profile picture. If you sign in with Apple and choose to hide your email, we receive a private relay address that Apple forwards to your real one.
• Content you provide: photos you take or upload, the descriptions you write, and the images you generate and save.
• Usage data: how many images you generate (to enforce usage limits) and technical details of each generation, such as image size and timestamps.
• Subscription data: your plan and its status, the App Store receipt that proves your purchase, your device type and operating system, and when you last opened the app. Payment itself happens through your Apple account; we never receive your payment details.
• Onboarding answers: the options you pick when setting up the app — what brings you to asoha (for fun, work, social media, and so on), your experience level, how often you plan to use it, and where you heard about us.
• Automatically collected: your device's push-notification token, so we can tell you when your image is ready. Our infrastructure provider (Google) keeps standard technical logs, which may include IP addresses.

3. Why We Use Your Data

4. Who We Share Data With

We use the following service providers (data processors):

• Google (Firebase) — sign-in, database, image storage, and push notifications.
• OpenAI (GPT Image) — image generation: your photos and description are sent to OpenAI to create your image, together with a pseudonymous account ID used for abuse monitoring.
• Google (Gemini) — image generation: your photos and description are sent to Google to create your image.
• RevenueCat — subscription management: your account ID, subscription data, and onboarding answers, so the app and our servers know which plan you have.

When you sign in with Google or Apple, the sign-in step itself happens with that provider, under its own terms and privacy policy; we only receive the account data described above.

When you subscribe, payment is handled by Apple through your Apple account, under Apple's own terms and privacy policy. We never see your payment details.

We do not sell your personal data, and we show no ads.

5. International Transfers

Our providers process data in the United States. Transfers to Google are protected by the EU–US Data Privacy Framework, which Google is certified under, supplemented by Standard Contractual Clauses. Transfers to OpenAI and RevenueCat are protected by Standard Contractual Clauses.

6. Data Retention

• Generations you don't save — the photos you added, the description you wrote, and the resulting image — are deleted automatically within 48 hours.
• If you save a result, the whole generation — photos, description, and image — is kept until you delete it in the app.
• Account data, subscription data, and onboarding answers are kept while your account exists and are deleted when your account is deleted. To delete your account and data, contact us at aamund@asoha.app.
• If you go through setup without signing in, your onboarding answers are kept under a random identifier that we cannot connect to you.

7. Your Rights

Under the GDPR you have the right to access, correct, delete, and export your data, to object to or restrict processing, and to withdraw consent at any time. To exercise these rights, contact us at aamund@asoha.app.

You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) or your local supervisory authority.

8. Children

This app is not directed at people under 18, and we do not knowingly collect their data.

9. The Website

You can browse this website without an account, and it sets no cookies and runs no analytics. The site loads the Poppins typeface from Google Fonts; when your browser fetches the font files, your IP address is sent to Google. Our hosting provider may keep short-lived technical logs to keep the site running and secure.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated date.

11. Contact

Asoha AS
aamund@asoha.app