Privacy Policy

Last updated: September 29, 2026

If you obtained Yolopic from the App Store or Google Play of any country other than Japan, this English version is the governing text. For users who obtained it from the Japanese App Store or Google Play, the Japanese version is the legally binding text and this English version is a reference translation; in case of any discrepancy, the Japanese version prevails.

Jujutech (hereinafter "we," "us," or "our") sets out below this Privacy Policy ("Policy") regarding the handling of personal information of users of the mobile application "Yolopic" ("Service") that we provide.

1. Operator and Contact

• Operator: Jujutech (sole proprietorship / trade name)
• Location: Japan (full address disclosed upon request)
• Representative name: disclosed upon request
• Contact: support@yolopic.com

2. Information We Collect

We collect the following information in connection with the Service:

• Images you upload: facial photographs (selfies) that you capture or select for the purpose of generating ID photos. These images contain information about the appearance of the subject.
• Generated images: ID photos and their variations produced by the Service.
• Face landmark data: the positions of the face and facial features (such as the eyes and chin), detected in your selfie and in the generated photo only while they are processed. See the Biometric Notice.
• Anonymous authentication ID: an anonymous user identifier issued by Firebase Authentication. We do not collect names, email addresses, or other registration information.
• Device and usage information: technical data such as OS version, app version, language and region settings, the country of your App Store or Google Play account, IP address, access logs, and app usage events (for example, that a photo was generated or saved) together with an app instance identifier issued by Firebase Analytics. We do not use the advertising identifier (IDFA / Android advertising ID) and do not track you across other companies' apps or websites.
• Billing and purchase information: purchase transaction IDs and purchase status processed through the App Store or Google Play. We do not collect credit card numbers or other payment instrument details; those are processed by the respective platform providers.

3. Purposes of Use

We use the information collected for the following purposes:

• To provide the Service (AI-based ID photo generation, storage, download, in-app purchases, etc.)
• To investigate defects, improve quality, and develop new features, including by measuring how the app is used
• To respond to customer support inquiries
• To manage purchases and to investigate billing issues
• To detect and prevent fraud, breach of terms, or unauthorized access
• To comply with applicable laws or requests from public authorities

4. Handling of Photo Data

Uploaded facial photographs are used solely for the AI ID photo generation processing of the Service. We do not use uploaded photographs or generated photos to train AI models. An uploaded selfie is deleted as soon as its photo has been generated; if generation fails, the selfie is kept so that you can retry, and it is deleted together with the failed photo. Generated photos are retained in our cloud storage for ninety (90) days from generation so that you can view and download them within the Service, after which a daily cleanup deletes them automatically. You may delete these images at any time through the app.

5. Biometric Notice (Face Data)

This notice explains how the Service handles face geometry, which some laws (for example, the Illinois Biometric Information Privacy Act and the privacy laws of Texas, Washington, Colorado and other U.S. states) treat as biometric information.

• What we collect and why: when you take or choose a selfie, the app uses Google ML Kit on your device to detect your face and facial landmarks (such as the positions of your eyes), only to check that the selfie is usable and to center it. After the ID photo is generated, our server uses Google Cloud Vision to detect the face and its landmarks (the positions of the eyes and chin) in the generated photo, only to crop it to the photo size you chose. We do not use face data to identify or recognize anyone, and we do not create face templates or faceprints.
• Retention and destruction schedule: face landmark data is used only while the image is being processed and is never stored, on your device or on our servers. Your selfie is deleted as soon as its photo has been generated (or, if generation fails, together with the failed photo). Generated photos are permanently deleted by a daily cleanup once ninety (90) days have passed since generation, so no later than ninety-one (91) days after generation, or earlier when you delete them or your account. A selfie for which no photo was requested (for example, if the app was closed during the upload) is deleted within two (2) days. In every case, face data is destroyed once the purpose for which it was collected has been satisfied, and never later than ninety-one (91) days after collection.
• No sale or disclosure: we never sell, lease, trade or otherwise profit from face data. We disclose it only to the processors that perform the processing described above on our behalf (Google and OpenAI, see section 7), or where required by law.
• Security: we protect face data with the same measures as our other confidential information (see section 9).
• Your consent: if you obtained the app from the App Store or Google Play of any country other than Japan, the home screen asks for your consent to this processing. By tapping to continue, you give your written consent, in electronic form, to the collection and processing described in this notice. You may withdraw your consent at any time by no longer using the Service and deleting your account in the app.

6. Sharing with Third Parties

We will not share personal information with third parties without the user's prior consent, except in any of the following cases:

• where required by law
• where necessary to protect the life, body, or property of a person and obtaining consent is difficult
• where cooperation with a national or local government body, or a party entrusted by such body, is necessary for the execution of statutory duties

7. Processors (including Overseas Recipients)

We entrust the handling of personal information to the following service providers in connection with operating the Service. Some of these providers are located outside Japan (primarily in the United States). For information on the data protection regime of each country and the measures each provider takes to protect personal information, please refer to the information published by each provider.

• Google LLC (United States) — cloud infrastructure including Firebase Authentication, Firebase App Check, Cloud Firestore, Cloud Storage, and Cloud Functions. Used to store and process uploaded and generated images, and technical logs.
• Google LLC (United States) — Google Cloud Vision (face detection). Generated photos are sent to locate the face so that the photo can be cropped to the chosen size.
• Google LLC (United States) — Firebase Analytics (usage measurement). App usage events, the app instance identifier, device information and the anonymous user ID are sent.
• Google LLC (United States) — Google AI (generative AI inference). Uploaded facial photographs may be sent for the purpose of ID photo generation.
• OpenAI, L.L.C. (United States) — OpenAI API (generative AI inference). Uploaded facial photographs are sent for the purpose of ID photo generation.
• RevenueCat, Inc. (United States) — purchase management. We send the anonymous user ID, purchase transaction IDs and the Firebase Analytics app instance identifier (so that purchases can be counted in our analytics).
• Apple Inc. (United States) and Google LLC (United States) — payment processing via the App Store and Google Play.
• Sharp Corporation (Japan) — Network Print, only when you print at a convenience store in Japan: the purchased print sheet is registered with the service to issue your print code.
• Slack Technologies, LLC (United States) — internal notifications to our team about generations and purchases: the anonymous user ID, the job ID, the options chosen and the store market. Photos are never sent.

Please refer to each provider's own privacy policy for full details of their data handling.

8. Retention Period

We retain personal information only for as long as necessary to achieve the purposes of use, and delete or anonymize it without undue delay when no longer needed. Specifically:

• Face landmark data: never stored; used only while an image is processed
• Uploaded selfie images: deleted as soon as the photo has been generated (if generation fails, deleted together with the failed photo)
• Generated photos: automatically deleted by a daily cleanup ninety (90) days after generation
• Account-related data (anonymous ID, usage logs, etc.): deleted within a reasonable period after a request for account deletion
• Billing and purchase records: retained for the period required by applicable laws (e.g., tax law)

9. Security Measures

To prevent leakage, loss, or damage of personal information, we implement security measures including:

• encryption in transit (HTTPS / TLS)
• encryption at rest on cloud storage
• access control (per-user storage path isolation, Firestore security rules)
• data minimization in product design
• review of standard security commitments of sub-processors (Google, OpenAI, RevenueCat, etc.)

10. Your Rights (Disclosure, Correction, Deletion, etc.)

Under Japan's Act on the Protection of Personal Information and other applicable laws, you may request disclosure, correction, addition, deletion, suspension of use, suspension of third-party provision, or notification of purpose of use with respect to personal information that we hold about you. Please contact us using the contact details below. If you delete your account from the app's settings, related data held by us will be deleted within a reasonable period. Residents of the United States also have the rights described in section 11.

11. Notice to U.S. Residents (State Privacy Rights)

This section applies to residents of U.S. states with consumer privacy laws (such as California, Colorado, Connecticut, Texas and Virginia), in addition to the rest of this Policy.

• Categories of personal information we collect: identifiers (the anonymous user ID, the app instance identifier and IP address); commercial information (purchase records); internet or other electronic network activity (app usage events); sensory information (the selfie you upload and the generated photos); and biometric information (face landmarks, handled as described in the Biometric Notice). We collect this information from you and your device.
• Sensitive personal information: we process face data and photos only to provide the Service you request, and never to infer characteristics about you.
• Disclosure: we disclose personal information only to the service providers and processors listed in section 7, for the purposes in section 3.
• No sale or sharing: we do not sell your personal information, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising or profiling. We have not done so in the past twelve (12) months.
• Your rights: you may request to know and access the personal information we hold about you, to correct it, and to delete it. You can delete your account and its data at any time in the app. For any other request, email support@yolopic.com. Because the Service does not ask for your name or email address, we may ask for information showing that the request relates to your use of the app (for example, a purchase receipt). You may use an authorized agent. We respond within forty-five (45) days. If we decline your request, you may appeal by replying to our response.
• No discrimination: we will not treat you differently for exercising any of these rights.

12. Cookies

The Service is a mobile application and does not use browser cookies. This website (where the Privacy Policy and other public pages are published) is delivered via Firebase Hosting and minimal access logs may be collected.

13. Minors

Users under the age of 18 must obtain the consent of a parent or guardian before using the Service. If a photograph of a child under the age of 13 is uploaded, it must be done under the responsibility of a parent or guardian.

14. Changes to this Policy

We may revise this Policy due to changes in applicable laws, changes to the Service, or other reasons. Material changes will be announced on this page or notified within the Service. The revised Policy becomes effective when published on this page.

15. Contact

For questions or requests regarding this Policy or the handling of personal information, please contact:

• Operator: Jujutech (sole proprietorship)
• Email: support@yolopic.com