Privacy Policy

CHRM — AI Photo Studio

CHRM is a private portrait editor operated by Yash Rajesh Gandhe for adults aged 18 and over. This section applies to CHRM only. Its account and photos use cloud storage; the on-device practices of another app do not apply to CHRM.

Account and security information

When you sign in with Apple or Google, CHRM receives your name, email address (including an Apple relay address if chosen), provider account identifier and any profile information the provider supplies. Its backend stores authentication sessions, IP address and user agent for security, along with daily upload and monthly or daily edit counters. Your session is stored in the iOS Keychain. Editing preferences are saved on your device.

Subscriptions and purchases

Apple processes App Store payments. RevenueCat receives your CHRM account identifier, purchase history, subscription status, and app and device information to verify purchases, manage subscription access, and provide subscription history and aggregate revenue reporting. CHRM stores payment receipts for accepted edits and uses RevenueCat to verify subscriptions and grant, debit and expire edit credits. Retrying the same accepted edit does not spend a second credit. CHRM does not receive your payment card details. See RevenueCat’s Privacy Policy.

Photo sharing and your permission

Before uploading for an edit, CHRM asks you to confirm that you are 18 or older, the photo is of you, and you agree to send the original, selected references and editing instructions through Cloudflare and to OpenAI. Cloudflare hosts the backend, database, private image storage and job queue. OpenAI processes the images and instructions to generate an edit. CHRM cannot perform the edit without this processing.

Saving references requires separate consent. You may save up to five photos and choose whether to use them for each edit. CHRM uses them as image inputs; it does not train a personal model or build a face-recognition database. The app prepares selected photos locally and removes image metadata before uploading. Only images you select are accessed, and add-only Photos permission is requested when you save an edit.

Storage, retention and deletion

• Originals and edits: CHRM stores private copies that stop being available after seven days. Scheduled cleanup removes them. You can remove an original and all its edits sooner from Your edits.
• Saved references: These remain until you remove them or delete your account. Removing a reference cancels unfinished edits using it, but cannot recall a request already sent to a provider.
• Account: Settings → Delete account removes your CHRM account, sessions and usage records. Private photo erasure and provider deletion continue automatically, with retries during outages. A fresh sign-in may be required. CHRM revokes stored Apple authorization when available; older accounts without a stored token receive instructions for manually disconnecting Apple access. A minimal deletion record and encrypted Apple revocation credential remain only until erasure and revocation finish, preventing in-flight work from recreating data. CHRM also requests deletion of its RevenueCat customer record. Apple and service providers may retain transaction records for legal, accounting or security purposes. Account deletion does not cancel an Apple subscription; cancel it separately in Apple’s subscription settings.
• Device and shared copies: Deleting CHRM data does not delete photos you saved to your device or shared elsewhere.

CHRM requests that gateway prompt/output logging be disabled and bypasses the gateway cache for generation. Provider processing, security records, temporary output storage and infrastructure backups may have separate retention requirements. CHRM deletion does not promise immediate removal from every provider system. See Cloudflare’s data-use information, Cloudflare’s Privacy Policy and OpenAI’s Privacy Policy.

Your choices and privacy requests

You can decline photo processing, turn off references for an edit, remove saved images or delete your account. CHRM has no public photo feed, advertising integration or cross-app tracking SDK. The website’s traffic analytics are separate from CHRM’s app processing. Service providers may process information outside your country.

For access, correction or deletion requests, email support@yashgandhe.com and name CHRM. Include the account email and approximate request date only when relevant; never send passwords or sign-in codes. Requests for provider-side records depend on provider capabilities and applicable legal or security retention requirements.