Privacy Policy

ImagicaAI — operated by Cloud Crowd Labs.

Last updated: 2026-06-14

This Privacy Policy explains how Cloud Crowd Labs ("we", "us", "our") collects, uses, and shares information when you use the ImagicaAI mobile application (the "Service"). By using ImagicaAI you agree to the practices described below.

1. Information we collect

Account information

When you sign in we receive the email address associated with your account from our authentication provider, Apple (Sign in with Apple) or Google. We use this address as your account identifier and to send you service-related messages such as receipts and security alerts. We do not receive your password.

Content you provide

ImagicaAI lets you enter text prompts and, if you choose, upload a photo to use as a starting point for generation. The text prompt and any uploaded photo are sent to our image generation provider to produce the image you requested. Generated images are stored in your in-app gallery and on our server so they sync across your devices.

Purchase and credit ledger

If you buy a credit pack or subscribe to ImagicaAI Studio, Apple's StoreKit records the transaction and we mirror the resulting entitlement (subscription tier, remaining credit balance) in our database. We do not see or store your Apple ID password or full payment details — those are handled by Apple.

Diagnostics

We log basic request metadata (timestamp, request type, error codes) to keep the Service reliable. We do not log the content of your prompts or generated images in these diagnostics.

2. How we use your information

To run the Service: authenticate you, process your generations, store your gallery, and bill you through Apple.
To provide support when you contact us.
To detect and prevent abuse, fraud, and violations of our Terms.
To comply with legal obligations such as tax and accounting rules.

We do not use your prompts, uploaded photos, or generated images to train third-party models, and we do not sell your personal information.

3. Third-party services

To run the Service we share the minimum data needed with these providers:

Apple (Sign in with Apple) and Google — for authentication. They receive your sign-in attempt and return a verified identity token to us.
Firebase Authentication and Firestore (Google) — store your account record, gallery metadata, favorites, and credit ledger. Data may be stored in the United States or the European Union depending on configuration.
Runware / EvoLink (image generation provider) — receives your text prompt and any uploaded source image to produce the result. We send them the prompt and image; we do not send your name, email, or account ID.
Apple StoreKit and App Store — process all payments. They receive billing information governed by Apple's privacy policy.
Cloudflare — hosts our edge proxy that forwards generation requests. They see request metadata and IP addresses for routing and security.

4. Retention

Account and gallery. Stored while your account is active. Deleted within 30 days of account deletion, except where retention is required for legal, tax, or anti-fraud reasons.
Generated images. Kept in your gallery and on our server until you delete them or delete your account.
Billing records. Retained for 7 years as required by tax law in the jurisdictions where we operate. These records contain the transaction identifier, plan, amount, and date — not your prompts or images.
Diagnostics logs. Retained for up to 90 days, then aggregated or deleted.

5. Your rights

You can do the following at any time from inside the app:

Delete individual generated images from your gallery.
Delete your entire account, which purges your Firebase Authentication record, your Firestore user document, and all of your subcollections (favorites, generated images, credit ledger). The iOS app guides you through the flow under Settings → Delete Account.

If you are in the European Economic Area, the United Kingdom, or California, you also have the right to request a copy of the personal data we hold about you, and to ask us to correct inaccuracies. Contact Hello@cloudcrowdlabs.com to make a request; we respond within 30 days.

6. Children's privacy

ImagicaAI is not directed to children under 13 (or under the age defined as a child in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has created an account, contact Hello@cloudcrowdlabs.com and we will delete the account.

7. International transfers

Cloud Crowd Labs is based in Canada. Your data may be processed in the United States or the European Union by our service providers listed in Section 3. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers.

8. Security

We use HTTPS for all network traffic, require authentication for every account-scoped request, and rely on Firebase security rules to keep user records private. No system is perfectly secure; if you suspect your account has been compromised, contact Hello@cloudcrowdlabs.com.

9. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top of this page reflects the current version. If a change is material we will notify you in-app or by email at least 14 days before it takes effect.

10. Contact

Cloud Crowd Labs
Email: Hello@cloudcrowdlabs.com

Change history

2026-06-14 — Initial publication.