Ivy Photo Editing AI Agent – Privacy Policy

Last updated: 1 July 2025

Ivy Photo Editing AI Agent (“Ivy”, “we”, “us”) is published by Ohad Zadok in Tel Aviv, Israel.
This Policy explains how we collect, use, share, and protect your data when you use Ivy on iOS, Android, web, or desktop.
By installing or using Ivy you agree to the practices below.

Age limit: Ivy is designed for users 13 years of age or older. We do not knowingly collect data from children under 13 and will delete such data if discovered.

1. What We Collect — and Why

Data category	Examples	Why we need it	Retention
Account	Email, hashed password, user ID	Create & secure your account, provide support	While the account is active
Images you select	Photos you upload or capture	Apply the edits you request and show the result	Removed after edit / on deletion
Voice audio	Spoken commands sent to our voice-AI processor	Convert speech to text & carry out your request	Not stored – discarded after transcription
Usage / diagnostics	Crash logs, feature clicks, device model, OS version, IP	Fix bugs, measure feature usage, fight abuse	≤ 24 months
Push-notification token	Random device token	Deliver transactional push alerts (e.g., “edit complete”)	Until you disable pushes

No advertising IDs • No cross-app tracking • No sale of personal data

Voice-AI disclosure

When you tap the microphone you acknowledge you are speaking with an AI agent (not a human) and consent to transient recording and secure transmission to a third-party speech processor.
Do not include sensitive data (payment cards, government IDs, medical info) in voice commands.

2. How We Use Your Data

Operate the service – log you in, edit your images, respond to voice commands.
Improve & personalise – analyse usage/crash data to add features and keep Ivy stable.
Communicate – send password resets, critical updates, and optional push alerts (you control these in device settings).
Safety & legal – detect fraud, enforce our Terms, and comply with lawful requests.

We do not use your data for third-party advertising, remarketing, or automated decision-making that materially affects you.

3. How We Share Information

Service providers – cloud hosting, AI voice/image processing, analytics, push delivery.
Legal or safety – when required by law or to protect Ivy, users, or the public.
Business transfer – if Ivy is sold or merged, data may transfer to the new owner under this Policy.
Aggregated / de-identified stats – e.g., “average edits per user”; no individual can be identified.

We never sell your personal data or share it with ad networks.

4. Data Retention & Deletion

Images – stored only long enough to perform your edit or until you delete them.
Voice audio – processed in real time, never stored after transcription.
Account data – kept until you delete your account; backups wiped in the next rotation (≤ 30 days).
Logs & diagnostics – pruned after 24 months or sooner if no longer needed.
Legal holds – certain records may be kept longer if required by law.

Delete your account or request a copy of your data any time via in-app settings or by emailing [email protected]. We respond within 30 days.

5. Your Privacy Rights

Access and correct your data.
Delete your account and associated data.
Export your data in a portable format where technically feasible.
Withdraw optional permissions (camera, mic, notifications) in device settings.
Object to or restrict certain processing, consistent with GDPR, CCPA/CPRA and similar laws.

We will not discriminate against you for exercising these rights.

6. Security Measures

Encryption – TLS for data in transit; encryption at rest for stored files.
Access control – data accessible only to authorised staff on a need-to-know basis.
Infrastructure – ISO-certified cloud providers, firewalls, routine patching.
Monitoring & response – continuous logging, vulnerability scans, incident-response plan.

No system is perfect, but we work hard to safeguard your data and will notify you of any breach as required by law.

7. Children

Ivy is not for children under 13. We will promptly delete any data inadvertently collected from them.

8. International Transfers

Your data may be processed in Israel, the EU, or the United States. We rely on Standard Contractual Clauses or equivalent safeguards to protect data transferred internationally.

9. Changes to This Policy

We may update this Policy. For material changes we will give at least 14 days’ notice via the app or email. Continued use after the effective date means you accept the update.

10. Contact

Email: [email protected]
Address: Ohad Zadok, Tel Aviv, Israel

By using Ivy, you confirm that you have read and understood this Privacy Policy.