Fluxfield.ai — Privacy Policy
Effective: 9 May 2026 (AEST)
This Privacy Policy explains how Fluxfield collects, uses, and shares information when you use our websites, apps, and services (the “Service”). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For EU/UK residents, see Notice to European Users.
1. Information we collect
You provide: account/contact info; prompts, sketches, images/videos, captions, metadata; support messages; limited payment details from our processor.
Automatic: IP, device/browser, language/time zone, pages viewed, feature usage, performance, and Apple Ads or Google Ads campaign/conversion attribution data where available; cookies and similar tech for auth, preferences, analytics, and (if enabled) marketing.
From third parties: SSO/integrations you connect; analytics, fraud prevention, and support vendors.
Sensitive info. Please don’t upload sensitive identifiers, health data, or biometric templates unless a feature expressly requests it and you have required rights/consents.
2. Face data and AI processing
Photos with faces. When you choose or capture a photo for a Fluxfield photo tool, that photo may contain your face or another person’s face. We collect the photo you provide, optional prompts or custom notes, selected filter options, and generated outputs so we can create the requested AI edit.
No biometric templates. Fluxfield does not create biometric templates, faceprints, Face ID identifiers, facial-recognition profiles, or persistent identifiers based on facial geometry. We do not use uploaded photos to identify people across services.
Planned uses. We use visible facial features in your uploaded photo only to provide the requested result, such as preserving the person, scene, expression, and framing while applying a selected photo filter or retouch; saving private generation history; providing support; securing the Service; and preventing abuse.
Third-party AI processing. Current iOS image-editing flows send the selected photo, prompt or custom note, and selected filter options to Google Nano Banana through WaveSpeed, our third-party AI service provider, to create the requested output.
Storage and retention. Uploaded photos and generated outputs are stored in Fluxfield private object storage and related job/asset records while your account or content remains active, unless you delete your account or request deletion earlier. Third-party AI processing data may be retained by the provider for abuse monitoring unless a different retention setting applies or longer retention is required by law.
3. How we use information
Provide the Service. Accounts, authentication, processing Inputs/Outputs, generation history, storage/CDN, support.
Improve & secure. Operate, protect, troubleshoot, enhance; develop new features; monitor for abuse/safety.
Model improvement:
– Opt-in default: Only with your opt-in.
– Opt-out default: De-identified/aggregated aspects; opt out any time via Settings → Privacy or [email protected].
Personalise. Preferences and recommendations.
Communicate. Service messages, security alerts, and (if you opt in) updates/marketing (unsubscribe anytime).
Measure ads. Understand whether Fluxfield ads led to installs, sign-ups, subscriptions, and feature usage so we can evaluate and improve our own marketing.
Legal/safety. Comply with law; enforce terms; prevent fraud, spam, or harm.
Anonymise. Create aggregated/de-identified analytics.
4. Sharing information
Service providers (hosting/CDN, model providers, payments, analytics, email, support, moderation, logging).
Integrations you enable (at your direction).
Affiliates & transactions (e.g., mergers/acquisitions).
Legal/safety (where required).
Public areas (if you publish content).
We do not sell personal information. We require service providers that handle user data for us to protect it consistently with this Privacy Policy and applicable privacy requirements.
5. International transfers
We process in Australia and other countries where our providers operate (e.g., US/EU). For disclosures overseas, we take reasonable steps to ensure recipients handle personal information per the APPs. For EU/UK data, we use appropriate safeguards (e.g., SCCs).
6. Data retention
We retain personal information as needed for the purposes above and legal/accounting requirements. When no longer required, we de-identify or delete it. You can delete your account in-app or request deletion via email; backups may persist briefly.
7. Your choices & rights
Access & correction (Australia). Request via [email protected].
Marketing. Unsubscribe via email or settings.
Cookies. Control via browser/device; some features need cookies.
Model-training preference. Opt in/out per Section 3.
Delete account. Request via [email protected]; we’ll de-identify/delete subject to legal retention and backup windows.
8. Security
We use appropriate technical/organisational measures (encryption in transit, access controls, audit logging, least-privilege). No method is 100% secure.
9. Children
The Service is for users 18+. If you believe a child has provided data, contact us to delete it.
10. Notifiable data breaches (Australia)
If an eligible data breach occurs under the Notifiable Data Breaches scheme, we will assess promptly and notify affected individuals and the OAIC as required.
11. Third-party sites & services
Third-party links/integrations follow their own privacy practices.
12. Changes to this policy
We may update this policy. We’ll post the new version and update the “Effective” date; material changes may be notified to account holders.