日本語

Privacy Policy

Last updated: September 14, 2026

1. Operator

appful Inc. ("we" or "us") establishes this Privacy Policy regarding the handling of user information in the iOS app "Pixie+" (the "App") that we provide.
Address: 2F Nishi-Shinjuku Mizuma Bldg, 3-3-13 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan
Contact: info@appful.tokyo

2. Information We Collect and Where It Is Stored

Photos you capture, the in-app gallery, filter choices, favorite and saved states, and settings such as background color and date burn-in are all stored on your device. The App does not send your photos to our servers. Photos leave your device only when you yourself choose to "save" or "share" them. The only information the App sends off the device is what is needed to display advertising (Section 6) and to deliver app configuration and measure usage (Section 7).

3. Camera and Photo Library

The App requests access to the camera for its shooting feature. It uses photo library add permission and the share feature only when you choose to "save" or "share." You can change these permissions at any time from your device's Settings.

4. Face Detection and Beautification (On-Device Processing)

The app's beautification features (adjusting eye size, face shape, and skin brightness) detect the position of a face in the camera preview and in captured photos in order to determine where the adjustment should be applied.

• What is collected: Using the Vision framework provided by Apple in iOS, the app computes only coordinates indicating the position of a face in the image — specifically, 29 landmark points describing the eyes and the jaw contour, together with the face's orientation (yaw angle). The app does not create a face template or faceprint of any kind, and does not perform facial recognition. The app does not use the TrueDepth camera, depth data, face meshes, or Face ID.
• Purpose of use: These coordinates are used solely to determine where and how strongly the adjustment is applied. They are never used to identify or authenticate a person, or to infer age, gender, emotion, or any other attribute.
• Where processing happens: Entirely on the user's device. No face data is transmitted to our servers or to any third party.
• Storage: Face coordinates exist only in memory while the app is running. They are never written to a file, a database, or any other persistent storage. Each detection result is overwritten by the next, and all of it is lost when the app terminates.
• Retention: No face data is retained. It exists only in memory for the duration of the app session.
• Disclosure and sharing: Face data is never disclosed or shared with any third party, including advertising and analytics providers.
• User control: Beautification is off by default. While it is off, no face detection is performed at all. The user can disable it at any time within the app.

5. Friends Feature (Not Offered in the Current Version)

The currently distributed version of the App does not offer "Friends," the feature for sending photos to other users. This version has no path for sending a photo, and no photos, thumbnails, captions, reactions, nicknames, avatars, or group membership information are sent to our servers.

For users who created a Friends account in an earlier version, data stored on the servers at that time (Firebase / Cloudflare Worker and R2) may still exist. To have it deleted, contact info@appful.tokyo and we will verify and delete it; see the account deletion page for the steps. The App also has a deletion entry under Settings > Account > Delete Account, but because the Friends feature has been discontinued, that entry returns an error in some versions. If it does, please use the contact address above. Deletion does not remove the on-device Pixie+ gallery, images saved to Photos, or the Pixie+ Pro purchase managed by your Apple ID, and it does not cancel that subscription.

6. Advertising

The App may display advertising provided by Google AdMob (Google LLC). To optimize ad delivery, information such as the advertising identifier (IDFA) may be used. Based on iOS App Tracking Transparency (ATT), the App requests permission to track. Ads are shown even if you decline, but they will not be optimized for your interests. Information handled by AdMob is subject to Google's privacy policy.

7. App Configuration and Usage Measurement

The App uses Firebase Remote Config and Firebase Analytics (Google LLC) to control settings and improve quality and advertising health. It may collect operation events such as captures, prints, filter selection, saving, ad opportunities, load outcomes, presentation outcomes, and ad revenue, plus statistical information such as device type, OS version, and approximate region. Photos, face data, captions, nicknames, and email addresses are not sent to Firebase Analytics.

8. Purpose of Use

The information collected is used to take, edit (including the beautification described in Section 4), display, save, and share photos, manage the in-app gallery, retain settings, display advertising, and improve quality. We do not transmit your photos to third parties without your explicit action.

9. Third-Party Provision and Service Providers

Except as required by law, we do not provide your photos or personal information to third parties without your consent. Face data (Section 4) is never provided or shared with any third party. The App uses services from Google LLC (Google AdMob) to display advertising, and from Google LLC (Firebase Remote Config and Firebase Analytics) to deliver app configuration and measure usage. Data stored through the Friends feature in earlier versions continues to be held and deleted using services from Google LLC (Firebase) and Cloudflare, Inc. (Cloudflare Worker and R2). Photos you pass to an external app by choosing "share" are handled under the destination service's terms and policies.

10. Data Storage and Deletion

You can delete on-device photos and settings using the App's delete actions, device photo-management features, or by deleting the App. Face data (Section 4) is never stored persistently, so there is no such data left to delete. An account created through the Friends feature in an earlier version, together with its profile, memberships, photos you sent, reactions, and related data, can be deleted by request through the contact address given in Section 5. Photos owned by other users and shared groups are not covered by that deletion. Safety reports may be retained only as necessary after direct identifiers are removed.

11. Contact

For inquiries about this Policy, please contact info@appful.tokyo.

12. Changes to This Policy

We may revise this Policy as needed. If there are significant changes, we will display them clearly within the App.