Last updated October 26, 2026
This policy explains what the Image Brew iPhone app and the services behind it collect, why, who receives it, and the choices you have. It is written to match what the app actually does today.
Image Brew ("we", "us", "our") makes the Image Brew app for iPhone, the API it talks to at api.imagebrew.link, and the website at imagebrew.link. We decide how the personal data described here is used and are responsible for it.
For any privacy question or request, email [email protected].
On first launch the app reads or creates a random device ID and keeps it in your iPhone's keychain. It is not your Apple Account, your phone number, or Apple's advertising identifier. The app sends it with every request to our API, uses it as your RevenueCat customer ID, and attaches it to analytics events. The first time the app connects, our API issues a signed identity token tied to this ID, which the app stores in the keychain and uses to prove that requests come from your device. We use the User ID to keep your credits and purchases together and to answer your support and privacy requests.
When you create an image, the app sends your prompt, the model and style you chose, and the aspect ratio to our API. If you add photos, the app first shrinks each one to at most 1024 pixels on its longest side and saves it as a new JPEG, which leaves out the photo's original metadata such as its location. It then uploads the photo directly from your iPhone to fal's storage, and our API receives only a link to it. We use this content only to create the image you asked for.
Your photos may show people, including you. We only use them to create the images you ask for. We do not use them to identify anyone, and we do not create face templates or other biometric identifiers from them. Only add photos you have the right to use.
For each creation, our database keeps a job record: your User ID, a random job ID, the model and recipe, the credits it cost, its status, fal's request reference, and the time. To avoid charging you twice when the app retries a request, the record also keeps a copy of the request itself: your prompt, the aspect ratio, and the links to any photos you added. Those photo links stop working once fal deletes the uploads after 1 day. We do not keep a copy of your finished images on our servers.
Our database keeps your credit balance, the credits you were granted (such as welcome credits and purchases), and what each creation cost. When you buy a subscription or credits, RevenueCat tells our API about it. We store the event ID, the store transaction ID, the product, the subscription status, and whether it was a test or real purchase, so we can add the right credits and restore them for you. Apple handles payment. We never receive your card details or your Apple Account email address.
If you report an image, our database records that it was reported and when, so we can review the request on fal while fal still has it.
The app logs events such as screens viewed, buttons tapped, onboarding steps and the answers you choose there (for example what you want to create and a favourite style), and paywall and purchase steps. These events go to Firebase Analytics and Superwall, as described below. We use them to understand how the app is used, fix problems, and decide which offers to show. Those services also receive basic technical information such as device model, iOS version, app version, and language.
Like any internet service, our servers receive your IP address with each request. Our API does not store IP addresses in its database. Cloudflare, which hosts the API, processes them and derives an approximate city and country from them. We use that approximate location only in the new-user notice described under Telegram below.
If you email us, we receive your email address and whatever you include. The app's Contact Us button pre-fills your app version, iOS version, User ID, credit balance, and subscription status so we can help you faster. You can remove any of it before sending.
The home page at imagebrew.link uses Google Analytics, which sets cookies and collects standard visit data such as pages viewed, browser, device, and approximate location. The privacy, terms, help, and EULA pages do not load Google Analytics.
Earlier versions of Image Brew kept your gallery on our servers: each image's prompt, the link to the image on fal, its style, model, aspect ratio, and creation time, plus your credit history, subscription records, and the images and styles you liked. Some earlier versions also offered optional rewarded ads from Google AdMob in exchange for credits. The current app copies that old gallery onto your iPhone. Those server records stay in our database until you delete the image in the app or ask us to delete your data. The current app shows no ads.
Image Brew does not run AI models itself. When you create an image:
These are the model makers that may receive your prompt and photos, depending on which model you pick:
If you don't pick a model, Image Brew uses the model set for the style or idea you chose, or otherwise Google's Nano Banana. The model picker shows each model's maker.
fal and the model makers receive your prompt, your photos, and the generation settings. They do not receive your User ID, and we don't send them your name or contact details, which we don't have. They process the content under their own terms and privacy policies, and they may screen it for safety. We do not use your prompts, photos, or images to train AI models.
Your consent. Before your first creation, the app explains this and asks whether you agree to send your prompts and photos to these AI partners. Nothing is sent until you agree. You can withdraw consent at any time in Settings by turning off Share with AI Partners. The app will then ask you again before your next creation.
Besides the AI providers above, these companies process data for us. Each receives only what it needs for its job.
We do not sell your personal information, and we do not share it for advertising. We may disclose information if the law requires it, to protect people's safety, or to a company that takes over Image Brew, which would remain bound by this policy.
We may keep some purchase records longer if the law requires it, for example for tax or accounting.
Some data never leaves your iPhone:
Deleting the app removes the gallery and settings. iOS can keep keychain items after an app is deleted, so if you reinstall, the app may recognise the same User ID and your credits. Your iCloud or computer backups may include the app's data, depending on your backup settings.
There is currently no switch in the app to turn off analytics. If you want us to stop using your data for analytics, email us with your User ID.
We rely on these legal bases: contract, to provide the app, credits, and purchases you ask for; consent, to send your prompts and photos to our AI providers; legitimate interests, for analytics, paywalls, security, and fraud prevention; and legal obligation, for records the law requires us to keep.
You have the right to access, correct, delete, restrict, or object to the processing of your data, to receive a copy of it, and to withdraw consent at any time. You can also complain to your local data protection authority. Our providers process data in the United States and other countries. Where the law requires, these transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.
In the past 12 months we have collected identifiers (User ID, IP address), commercial information (purchases and credits), internet activity (in-app events), approximate location, and user content (prompts and photos), for the purposes described above. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You have the right to know, delete, and correct your personal information, and we will not treat you differently for using these rights. Email us with your User ID to make a request. An authorised agent can make a request on your behalf.
Image Brew is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has used the app, email us with the User ID from Settings and we will delete the data linked to it.
All traffic between the app, our API, and our providers uses encrypted HTTPS connections. Your User ID and identity token are stored in the iPhone keychain, and our API checks the signed identity token so other people cannot use your credits. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities as the law requires.
When we change how Image Brew handles data, we will update this page and the "Last updated" date. If a change matters, such as adding a new AI provider or a new use of your data, we will let you know, for example in the app, and ask for your consent again where needed.
For questions, requests, or complaints about privacy, email [email protected]. Please include the User ID shown in Settings.