AvatarForge AI: Privacy Policy

Last updated: October 6, 2025
Developer: Mitchell Smith
Contact: mitchell525@gmail.com

1. Overview

AvatarForge AI is an iOS app that creates fantasy and RPG character artwork using artificial intelligence. The app is developed by Mitchell Smith and uses Google's Gemini 2.5 Flash (primary) and OpenAI's DALL-E (fallback) for AI image generation, with Firebase providing authentication, database, storage, and backend services. The app uses a subscription-based model with credit consumption tracking and automatic refunds on failed generations. By using the app you agree to this policy.

2. Data We Collect

  • Account Information - Email, user ID, and authentication data via Firebase Authentication (including Sign in with Apple).
  • AI Prompts and Images - Text prompts (including moderated/transformed versions), AI-generated images, thumbnails, and metadata (style, timestamps, aspect ratio) stored in Firestore and Firebase Storage.
  • Subscription and Credit Data - Subscription tier, usage counters (images generated), one-time credits, credit consumption history, renewal dates, and purchase transaction records.
  • Generation Job Data - Job status (pending/processing/completed/failed), error messages, storage paths, and processing timestamps.
  • Analytics and App Usage - App usage, performance metrics, and diagnostics via Firebase Analytics, Crashlytics, and Apple's standard metrics.
  • Device and Configuration - Device information for optimization and Remote Config values (free credit amounts, feature flags, usage limits) cached locally.
  • Purchase Information - Subscription identifiers and anonymous confirmations from Apple to validate entitlements; Apple handles all payment details.

3. How We Use Your Data

We use data to:

  • Generate and display AI-generated fantasy avatar images
  • Save your creations and sync them across your devices
  • Manage subscriptions, track credit consumption, and validate entitlements
  • Monitor and process generation jobs from submission to completion
  • Improve and maintain the app through analytics and error reporting
  • Prevent abuse and enforce usage limits
  • Refund credits when jobs fail as part of our error handling
We do not sell or rent your personal data.

4. How AI Services Work

The app uses a dual-provider AI architecture for reliability:

  • Primary: Google's Gemini 2.5 Flash Image API for prompt validation and image generation
  • Fallback: OpenAI's DALL-E API when Gemini is unavailable
Prompts you submit are processed by these AI services under their respective privacy policies: We do not share personal identifiers (email, user ID) with these AI providers during image generation. Only the prompt text and generation parameters are transmitted.

5. Data Security

Your data is secured using Google Firebase services with industry-standard security measures:

  • Authentication: Firebase Auth with encrypted Sign in with Apple integration
  • Database: Firestore with role-based access rules and encrypted connections
  • Storage: Firebase Storage with access controls and secure URLs
  • Backend: Cloud Functions with input validation and rate limiting
  • Local Caching: SwiftData for device-side metadata; image files stored in app caches (excluded from iCloud backups)
Access to your data is restricted to: (1) you (via authenticated requests) and (2) the developer (for maintenance and support). No third-party services have direct access to your personal data.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your own:

  • Firebase (Google Cloud) uses data protection safeguards for international transfers
  • AI providers (Gemini and DALL-E) process prompts in their respective regions under their privacy policies
By using the app, you consent to these international data transfers as described in this policy.

7. Data Retention & Deletion

Data is retained while your account is active. The app implements automated cleanup processes:

  • Stale generation jobs are automatically expired and removed
  • Unused images in storage may be cleaned up based on access patterns
  • Transaction records are retained for audit purposes
You can request deletion of your account and all associated data by emailing mitchell525@gmail.com. Deletion will include: user account, all generated images, job records, and subscription data. Limited records may be retained if required by law or for abuse prevention.

8. Service Discontinuation

If the app is discontinued, all user data stored in Firebase (Firestore, Storage) will be removed from our systems within 30 days. Prior to discontinuation, we will notify users via the app. Locally cached images and metadata stored on your device will remain accessible until you delete the app or clear its cache.

9. Subscriptions and Credits

The app uses a two-tier credit system:

  • Subscription Credits: Monthly quota-based credits that reset based on your subscription tier
  • One-Time Credits: Credits granted at signup (free) or through purchases that never expire
Credits are consumed when generating images and automatically refunded if generation fails. Subscription validation is handled through Apple's App Store Server API; we only receive subscription identifiers and do not process payment information.

10. Age Requirement

AvatarForge AI is intended for users aged 18 years and older. By using the app, you represent that you are at least 18 years old. We do not knowingly collect data from anyone under 18. If you become aware that someone under 18 has provided us with personal information, please contact us so we can take appropriate action.

11. Changes

This policy may be updated as the app evolves. The latest version will be available in the app and on the App Store listing.

12. Contact

If you have privacy questions or requests, contact: mitchell525@gmail.com

App Store Privacy Summary

Data Linked to You: Email address / user ID; authentication information; user-generated content (text prompts, AI-generated images, thumbnails); subscription tier and usage counters; one-time and subscription credit balances; credit consumption history; generation job status and metadata; device identifiers for subscription validation; diagnostics and app usage.

Data Not Linked to You: Crash reports; performance metrics; aggregated usage statistics.

Data Used to Track You: None

Third-Party Services: The app uses Firebase (Google) for backend services and Google Gemini 2.5 Flash / OpenAI DALL-E for AI image generation. These services process data under their own privacy policies. No third-party tracking or advertising SDKs are used.