Privacy Policy
Last updated 9 September 2026
Drop Studio makes weekly sets of AI photographs of you, from selfies you upload once. This page describes exactly what that requires us to hold, who else sees it, and how to make all of it go away. It describes this app as it is built, not a category of app.
There is no account to sign up for
The app never asks for an email address, a name, a phone number or a password. On first launch it generates a random identifier on your device, stores it in the iOS Keychain, and uses it as your account. We cannot look you up by name, because we do not have one.
What we hold
| Data | Why we need it | How long |
|---|---|---|
| A random device identifier | It is your account. | Until you delete your account. |
| The 3–8 selfies you upload | They are the reference the generator conditions on; they are sent with every photo it makes. | Until you delete your account or replace them. |
| The photographs generated for you | They are your drops. | Until you delete your account. |
| Your notification token, if you allow notifications | To tell you a drop has landed. | Until you turn notifications off, delete the app, or delete your account. |
| Your subscription status | To know whether to give you full-resolution photographs. | Until you delete your account. |
| Basic technical logs | To find faults. | A short operational period. |
We do not collect your contacts, your location, your photo library beyond the images you pick, or your browsing. We use no advertising identifiers and we run no advertising.
Who else sees it
- Replicate generates the photographs. Your selfies are sent to it as short-lived links, together with the text describing the week's theme.
- Anthropic writes the words that accompany a theme. It receives the theme's title and prompt — never your photographs.
- Apple processes payments and delivers notifications.
- RevenueCat tells our servers when a subscription starts, renews or ends, identified by your device account and nothing else.
- Amazon Web Services hosts the service and stores the images.
We do not sell your data, and we do not share it for anyone else's advertising.
Your photographs are not training data
We do not use your selfies or your generated photographs to train any model of ours, and we do not publish them anywhere. They exist to make your drops and for nothing else.
Deleting everything
Settings → Delete my account removes your account, your selfies, your identity model and every photograph generated for you. It is inside the app and needs no email to us.
Your rights
Depending on where you live — including under the GDPR in the EU/UK and the KVKK in Turkey — you may ask what we hold about you, ask for a copy, ask us to correct it, or ask us to erase it. Deletion is built into the app; for anything else write to privacy@dropstudio.app and we will answer within 30 days. You may also complain to your local data protection authority.
Children
Drop Studio is not intended for anyone under 13, and we do not knowingly hold data from children. If you believe a child has used the app, write to us and we will delete it.
Security
Data travels over encrypted connections and is stored on AWS. Photographs are served through links that expire, so a link that leaks stops working. No system is perfect and we will not pretend otherwise.
Changes
If this policy changes materially we will update the date above and, where the change matters, say so in the app.
Who we are
[[Legal entity name]], [[address]]. Contact: privacy@dropstudio.app.