Privacy Policy

The short version

• Your photos are not used to train AI models. They are processed only to make the edit you requested.
• Uploaded photos and generated edits are deleted from our storage within 30 days.
• Oneshot works without a personal profile. We do not ask for your name, email address, or phone number to use the app.
• We do not sell your personal data.
• You can ask us to delete your data. Email [email protected] with your support code.

Who we are

Oneshot is built and operated by Onrois ("we", "us"), 707, Kyros Business Center, Sarathana, Surat, Gujarat, India. Onrois is the data controller / data fiduciary for the information described here.

Questions, requests, and complaints can be sent to [email protected].

What we collect

The selfie you choose to edit

When you take a selfie with a preset selected, Oneshot uploads that photo so our service and an AI processing provider can produce the edit. Photos in your library that you do not select are not uploaded or scanned.

A random user ID and support code

Oneshot does not require a login. Your installation receives a random user identifier and a short support code. These connect edits, credits, purchases, and support requests to the same installation.

App activity and diagnostics

We collect product interactions, app version, device and operating-system details, crash information, network type, and coarse country or region derived from the request IP address. This helps us understand feature use, diagnose failures, prevent abuse, and improve reliability. We do not collect precise GPS location.

Purchases and notifications

If you subscribe, we receive product, transaction, and entitlement information from Apple and RevenueCat. We do not receive your card number or billing address. If you enable notifications, we store a device push token so Firebase can deliver them.

Advertising and attribution data

With the permissions required by iOS, Meta and Linkrunner may receive device identifiers, advertising attribution data, and app events to measure campaigns. You can deny or change tracking permission in iOS Settings. Core app editing still works without granting tracking permission.

Why we use it

• To create and deliver the AI edit selected by you.
• To maintain credits and premium access and restore purchases.
• To improve the app by understanding product interactions and fixing crashes or failed edits.
• To deliver notifications when you have allowed them.
• To measure marketing where you have granted the required iOS tracking permission.
• To keep the service secure and prevent fraud, automated abuse, and prohibited uploads.

We do not use your selfies to train, fine-tune, or evaluate AI models, and we require the services processing them not to do so either.

Who else processes data

We do not sell personal data. We use specialist service providers only where needed to operate, secure, analyze, or market the app:

• Replicate and fal.ai process selected photos through AI models used by a preset. Those models may be supplied by developers including OpenAI and Meta. The photo is used to return the requested result, not to train a model.
• Cloud hosting and object-storage providers run the API and temporarily hold photos and edits.
• RevenueCat and Apple process subscription, purchase, and entitlement information.
• PostHog and Google Firebase process product analytics, crash reports, and notification delivery data.
• Meta and Linkrunner process marketing events and attribution data, subject to applicable permissions and settings.
• Formspree receives the email address you voluntarily submit on this website to join the waitlist.

Some providers process data outside India or the EEA, including in the United States. Where required, international transfers rely on appropriate contractual safeguards.

How long we keep it

• Photos and edits: deleted from our storage within 30 days. A copy you save to your own photo library remains until you delete it.
• Purchase and credit records: kept while needed to provide the service and for legal, tax, accounting, and fraud-prevention obligations.
• Analytics and diagnostic data: retained according to our processor settings and generally no longer than needed to understand trends or investigate reliability and security issues.
• Waitlist email: kept until launch communications are complete or you ask us to remove it.

This website

This website does not run advertising pixels or third-party analytics. Normal server logs may record an IP address, browser information, requested page, and timestamp for security and reliability. If you join the waitlist, your email address is sent to Formspree and Onrois for launch communication; it is not used for unrelated marketing.

Your choices and rights

You may ask us to access, correct, export, or delete data linked to your installation. Email [email protected] with the support code shown in the app. We normally answer within 30 days.

Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, nominate another person, or complain to a data-protection authority. Withdrawing consent does not make earlier lawful processing unlawful.

Children

Oneshot is not intended for children under 13. Where local law requires parental consent for older minors—including the rules that apply in India—we expect a parent or guardian to provide that consent. Contact us if you believe a child used Oneshot without the required consent.

Security and changes

We use encrypted network connections and restrict operational access to stored data. No service can promise perfect security. If a breach affects your rights, we will notify you and the appropriate authority where required.

When this policy changes, the date at the top changes. Material changes to how selfies are handled will also be communicated in the app before they take effect where required.

Contact

Onrois
707, Kyros Business Center, Sarathana, Surat, Gujarat, India
[email protected]