WiseSpark Studio

PoseBunny Privacy Policy

Effective date: 29 October 2026 · Version 1.0

PoseBunny is not yet released. This policy describes how the app will handle your data when it becomes available.

Who we are

PoseBunny is made by WiseSpark Studio in Bangkok, Thailand ("we", "us"). WiseSpark Studio is the data controller for the personal data described here. Contact: support@wisespark.studio.

PoseBunny helps you find a pose and, if you want, creates a photo of you in that pose with AI. This policy explains what we collect, why, who processes it, how long we keep it, and how to delete it.

1. Short version

2. What we collect and why

DataSourceWhyLegal basis (PDPA / GDPR)How long
Selfie (a photo of your face you choose)You pick it in the appOnly to create the image you requestedYour explicit consent (the tick box before each generation)Not stored. Held in memory on our server for the request, sent to Fal, then discarded
Generated imageCreated by Fal from your selfie and the poseTo show it to youConsent; performing the service you asked forFal deletes its copy after 1 hour. We do not keep a copy
Birth date and optional birth time (Lucky Photo)You type itTo calculate today's colours, time and directionConsent; service you asked forStays on your phone. Not sent to us
Install ID (random)Created by the app on first launchFair-use limits, and to link your consent records and reportsLegitimate interest (abuse and cost control); consentUntil you delete your data, or 12 months after your last use
Consent record: consent text version, language, pose, date and timeEach time you generateTo prove you agreed before we processed your photoLegal obligation / legitimate interest (accountability)Until you delete your data, or 3 years after your last use
Usage and cost records: date, pose, success/failureEach generationSpend limits, preventing abuseLegitimate interestKept for accounting; unlinked from your install ID when you delete your data
Reports: reason, optional note, job ID, poseYou tap Report imageTo review harmful or wrong images and act on abuseLegitimate interest; legal obligation12 months, or until you delete your data
Purchases (credits)Apple sends us a signed transaction (product, date, transaction ID)To add creditsContractAs required for tax and accounting (up to 10 years)
Support emailsYou email usTo answer youLegitimate interest2 years after the conversation ends

We do not collect your name, phone number, contacts, location, or advertising identifiers. We do not use face recognition or create a face template, and we do not use Apple's face-tracking (ARKit/TrueDepth) data.

3. Who processes your data

CompanyWhat they do for usWhat they receive
Fal (Features & Labels, Inc.), USAAI image generationYour selfie (sent with the request, not uploaded to file storage), the pose reference and a prompt from our fixed pose list. We ask Fal not to store the request and set the result to expire after 1 hour
Cloudflare, Inc., USA (global network)Runs our server and databaseThe request in transit; the records in section 2 (no selfie, no image)
Apple Inc.App distribution, in-app purchases, TestFlightPurchase data under Apple's own privacy policy

These providers may process data outside Thailand, mainly in the United States, under their data processing terms. We will list any new provider here before using it.

4. Who may use PoseBunny

5. Content safety

Poses come from a fixed, safe-for-work list; you cannot type a free-text prompt. Generated images pass an automated safety check before they are shown. You can report any image; reported images are hidden on your device at once and reviewed by a person. We may block installs that misuse the service.

6. Your rights

Under the Thai Personal Data Protection Act (PDPA) and, where it applies, the GDPR, you can ask to access, correct, delete, restrict or object to the processing of your data, ask for a copy, and withdraw consent at any time (this does not affect processing that already happened). You can complain to Thailand's Personal Data Protection Committee (PDPC) or your local data protection authority.

How: in the app, Help & support → Delete my data, or email support@wisespark.studio with the Install ID shown on the Help screen. We answer within 30 days.

7. Security

Traffic is encrypted (HTTPS). Our AI provider key is stored only on our server as an encrypted secret, never in the app. Selfies are never written to our database or logs.

8. Children

PoseBunny is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 used PoseBunny, or a child's photo was used, report the image or email us and we will act promptly.

9. Changes

If we change this policy we update the date above and, for important changes (for example a new kind of data or a new provider), ask for your consent again in the app.

10. Contact

WiseSpark Studio · support@wisespark.studio