Legal
Privacy Policy
What happens to your photo, in plain sentences, and below that the same thing again in full.
This English text is a courtesy translation. In case of doubt the German version is the binding one.
Your photo is processed and discarded, not permanently stored. GPS and capture time are removed beforehand. The result deletes itself after 24 hours. You need no account, and we set no trackers.
Controller
The controller for data processing within the meaning of the GDPR is:
Ivo Schmidt
Nachtweideweg 27
13589 Berlin
Germany
For information requests and deletion: support [at] caricly [dot] de
Replace “ [at] ” with @ and “ [dot] ” with a full stop.
What data is processed
As little as possible. Specifically:
- The photo you upload: solely in order to draw the caricature from it.
- A random device identifier: so that your credits and your history can be assigned to your device. It contains no name and no email address.
- A checksum of your photo: a string your image cannot be reconstructed from. It prevents the same photo from being billed twice after a dropped connection.
- Events about your use of the app: app opened, photo picked, style tapped, caricature started, result received, saved, shared, and around purchases. Each event carries the device identifier, platform, app version and the time. We evaluate them to see where people get stuck. Free text is technically impossible: every value comes from a fixed list.
- For each caricature: the style chosen, the model used, success or failure, duration and cost. We need this for operation and billing.
- Technical server logs: for operation and security. The IP address is truncated immediately, and neither user agent nor referrer is written down at all.
No name, no email address, no password, no advertising identifiers, no third-party analytics services. What we measure, we measure ourselves and on our own server.
This data is pseudonymous, not anonymous. Every row carries your device identifier, and whoever holds it sees a usage history. We therefore treat it as personal data, even though no name is attached to it.
What happens to your photos
The original is processed to generate the caricature and discarded afterwards. It is not permanently stored on our side. Before processing we remove the EXIF metadata, in particular GPS coordinates and capture time. The generated image is deleted automatically after 24 hours.
Transfer to the United States
The drawing does not happen on our server. Your photo is sent to OpenRouter (OpenRouter, Inc., United States) and from there to the model provider that generates the image. What is transmitted is the downscaled photo without metadata, together with the fixed text describing the style. Nothing else: no device identifier, no name, no IP address.
This is a transfer to a third country within the meaning of Art. 44 et seq. GDPR. The legal basis for the processing is Art. 6(1)(b) GDPR: you requested the caricature, and without this transfer there is none. What OpenRouter and the model providers behind it store on their side is not determined by us.
How long we keep what
- Your uploaded photo: not at all. There is no place to store it, neither in the database nor on disk. During the request it briefly exists as a temporary file on the server and disappears when the request ends.
- The finished caricature: 24 hours, then it is deleted automatically.
- IP addresses: 7 days.
- Device identifier and checksum on the generated images: 90 days. After that only style, model, status, duration and cost remain, and none of it can be traced back to anyone.
- Usage events: 90 days.
- Server logs: 14 days.
On our side, deleting means emptying the personal fields, not removing whole rows. What remains is pure operational statistics with no link to you.
Deletion: how it actually works
Because there is no account, everything hangs on your device identifier. To have everything belonging to your device deleted:
- Open Settings in the app and tap Copy device identifier.
- Send it to the contact address named above, subject “Deletion”.
- We delete everything assigned to that identifier and confirm it to you.
You can delete your local history yourself at any time, in the app via “Edit” in the history, or by removing the app.
Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Just write to us. No justification needed.