Privacy Policy

DecalFit is provided by imagin4ryLabs. This policy explains how DecalFit handles information when you create decal previews, save projects, sign in, make a purchase, or contact support. Questions may be sent to imagin4ryLabs@gmail.com.

Information you choose to provide

Depending on the feature you use, DecalFit may process:

• Car photos, decal artwork, and images you select, capture, or export.
• Your selected target surface, placement points, style and shape choices.
• Prompt text or optional edit instructions you choose to submit to an AI feature.
• Support messages and the diagnostic details you include.

Account information

If you sign in or link Apple or Google, Firebase Authentication and the selected provider may process a provider account identifier, email address, and basic profile information when supplied. DecalFit uses a Firebase UID as the account identifier. You can browse and edit locally without an account, but account-backed AI, credits, purchases, and recovery features require authentication.

If you start an account-backed AI feature before linking Apple or Google, DecalFit may create an anonymous Firebase Authentication identity. It has a Firebase UID but does not itself contain your name or email. Linking Apple or Google may upgrade that identity or, after your confirmation, switch to an existing account.

Google Sign-In information

When you use Google Sign-In, Google processes information needed to provide and protect its sign-in service. Google's SDK privacy declaration includes names, email addresses, phone numbers, user and device identifiers, approximate location, and other usage and service data. Google states that it may use an IP address to estimate a device's general location for fraud prevention. These declarations describe Google's processing and do not mean that every listed category is returned to DecalFit. DecalFit does not request phone-number authentication or permission to access device location services.

Service analytics and diagnostics

Firebase Authentication and App Check may send technical user-agent information, including device, operating-system, app-bundle and development-platform details, for Firebase's platform and version-adoption analytics. Firebase states that this user-agent information is not linked to a user or device identifier. Google Sign-In's SDK also declares analytics involving user and device identifiers and other usage and service data.

RevenueCat processes purchase history and the DecalFit account identifier (Firebase UID) to validate purchases, prevent fraud, manage and restore access, and provide purchase analytics; these purchase records are linked to your DecalFit account. Separately, DecalFit's service may keep account-linked job outcomes and failure codes to operate, secure and recover the service.

AI preview processing

When you request a live AI preview, DecalFit sends the selected image inputs, placement information, target surface, and instructions through an imagin4ryLabs Cloud Run service to Google Cloud Vertex AI. Vertex AI processing may use a global endpoint and is subject to Google Cloud's applicable terms and retention controls.

Temporary delivery and metadata

An accepted AI output may be held temporarily as encrypted data in private cloud storage so the app can recover delivery if a response is lost. This data is logically limited to no more than 24 hours and is deleted when delivery is committed, abandoned, or expires. Firestore stores service metadata such as job state, hashes, timestamps, attempts, credits, and entitlement records—not raw user images or prompt text.

Security and anti-abuse information

DecalFit processes limited app-integrity and anti-abuse information, including Firebase App Check or Apple App Attest results, opaque account and device identifiers, timestamps, counters, hashes, rate limits, and job outcomes. Limited route, status, and reliability events may be retained without request bodies, photos, prompts, filenames, or local file paths.

Purchases and subscriptions

Apple processes App Store payments. RevenueCat may process product, transaction, entitlement, renewal, refund, and restore metadata so DecalFit can grant and restore access. DecalFit does not receive your full payment-card information.

Information stored on your device

Drafts and unsaved work may be held temporarily on your device. A project is added to My Decals only when you choose Save. Saved projects remain in DecalFit's app storage and are excluded from iCloud backup. Saving to Photos is a separate action you control.

How information is used

• Provide, maintain, secure, troubleshoot, deliver, and recover requested app features.
• Maintain credits, passes, purchases, restores, and refunds.
• Authenticate accounts, link sign-in providers, and protect the service.
• Diagnose failures, respond to support, prevent fraud, and enforce limits.
• Understand SDK adoption and service or purchase usage through the provider analytics described above.
• Meet legal obligations and resolve disputes.

Service providers

DecalFit relies on providers that process information for the purposes described above:

• Firebase Authentication and App Check
• Google Cloud Run, Firestore, Cloud KMS, Cloud Storage, and Vertex AI
• Apple Sign in with Apple and the App Store
• Google Sign-In
• RevenueCat

Advertising, sale, and tracking

DecalFit does not show third-party advertising, does not sell personal information for targeted advertising, and does not use user photos or prompts as advertising content.

Retention and deletion

Account-backed information is retained while needed to provide the service, maintain credits and purchases, secure the service, resolve disputes, or meet legal obligations. Temporary encrypted AI delivery data follows the shorter period described above. After account deletion, limited one-way security, anti-abuse, purchase or refund, and redacted deletion records may remain where needed to prevent fraud, repeated free-credit claims, or prove deletion completion.

See Delete DecalFit data for in-app steps, local-data details, and subscription guidance.

Your choices

• Choose whether to sign in, request AI processing, save a project, or export to Photos.
• Manage camera and photo-library access in iOS Settings.
• Link Apple and Google before changing sign-in methods so account-backed credits remain together.
• Delete a linked account inside DecalFit, or contact support with your Support ID if the in-app option is unavailable or you use an anonymous identity.
• Manage Apple subscriptions separately in your App Store subscription settings.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a portable copy of certain personal information, and to withdraw consent where consent is the legal basis. You may also have the right to complain to your local data-protection authority. To make a request, contact us using the details below. We may need to verify your identity before acting on a request.

Children

DecalFit is not directed to children who cannot lawfully consent to this processing in their region. Do not submit another person's personal information or photos without permission.

International processing

Service providers may process information in countries outside your own, including where their global cloud infrastructure operates.

Changes to this policy

We may update this policy as DecalFit, its providers, or legal requirements change. The effective date at the top identifies the current published version.

Contact

Email imagin4ryLabs@gmail.com or use the DecalFit support form. The website form opens your email app; your message is processed by your chosen email provider and the recipient's email provider.