Privacy Policy for Drop AI

Last Updated: 2026-07-17

This Privacy Policy describes how Frostskull AB ("we", "our", or "us") collects, uses, and shares information in connection with Drop AI (the "App"), an AI image-generation application for iOS and Android. We are committed to protecting your privacy.

Important: To generate images, the content you provide — including your prompts and any photos you upload — is transmitted to and processed by third-party AI providers on our behalf. Please read Section 3 carefully.

1. Data we collect

Account and profile data

You can start using the App anonymously. If you sign in or link an account, we collect a minimal set of identity data from your chosen provider:

• A unique user ID
• Email address
• Your full name, only if you choose to share it when using Sign in with Apple

Sign-in is handled through our authentication provider. We do not receive or store your Google or Apple account password.

Content you provide

• Photos you take or upload as input for generation
• Prompts, template selections, and free-text descriptions you enter
• Generated result images and their metadata (dimensions, format, the final prompt used, token cost, and timestamps)

Your generation history is retained on our servers until you delete it or delete your account.

Billing and subscription data

• Your token/credit balance and token-transaction history
• Subscription status and tier
• A customer identifier assigned by RevenueCat and records of purchase/renewal events

Payments are processed by the Apple App Store or Google Play. We never receive or store your payment card details.

Push notification data

If you enable notifications, we store your device push token (via Firebase Cloud Messaging), your device platform, and your notification preference so we can deliver updates about your generations.

Data collected automatically

We use Firebase Analytics and Crashlytics, which may collect device model, OS version, language, app version, session data, in-app events, crash logs, and an approximate location derived from your IP address.

2. How we use data

• To authenticate you and operate your account.
• To process your image-generation requests and deliver the results.
• To maintain your gallery, token balance, and subscription entitlements.
• To send push notifications you have opted into.
• To analyze aggregate usage, diagnose crashes, and improve the App.
• To detect abuse and enforce our Terms of Use.

3. Third-party services and sub-processors

We rely on the following third-party services. Each processes data under its own privacy policy:

We do not sell your personal data. We may disclose information when required by law or valid legal process, and user data may be transferred as part of a merger, acquisition, or asset sale, subject to applicable legal protections.

4. Data stored on your device

• An onboarding flag indicating whether it is your first launch.
• Your login session token, stored by our authentication provider's SDK.
• Cached network images, temporary captured or compressed photos, and any images you choose to save to your photo library.

5. Device permissions

• Camera & microphone: to take photos and capture video for generation.
• Photo library: to select input images and save generated images.
• Notifications: to send you push notifications.
• Internet access: required for generation and account features.

6. How images are handled

Uploaded reference images are stored temporarily, and generated results are stored separately. Images are delivered to you through short-lived, expiring links rather than public URLs. Access to your data is scoped to your account.

7. Data retention

• Generations (uploaded photos, prompts, and results) are retained until you delete them or delete your account.
• Account, token, and device-token data is retained for the life of your account and removed when your account is deleted (see Section 9).
• Analytics and crash data is retained according to Google's Firebase retention policies.

8. Your choices & rights

• Delete content: You can delete individual generations from within the App at any time.
• Notifications: You can turn push notifications off in the App or your device settings.
• Account deletion: You can request full deletion of your account and associated data (see Section 9).
• GDPR / CCPA rights: Depending on where you live, you may have the right to access, correct, export, or erase your personal data, and to object to or restrict certain processing. Contact us at the address below to exercise these rights.

9. Account and data deletion

You can request deletion of your account at any time. Deleting your account cascades to your generations, tokens, and device tokens. See our Account Deletion page for step-by-step instructions, or email us at info@frostskull.com.

10. Children's privacy

The App is intended for users aged 16 and older. We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal data, please contact us and we will take appropriate action.

11. International data transfers

Your data — including uploaded images and prompts — is processed and stored on servers located in the United States and by the third-party providers listed above. By using the App you consent to these transfers in accordance with this policy and the providers' respective terms.

12. Security

We apply industry-standard measures to protect your data, including access controls that scope data to your account and time-limited, expiring links for image delivery. However, no method of electronic storage or transmission is 100% secure.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice or an updated "Last Updated" date. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

14. Contact

For privacy questions, data requests, or concerns, contact us at: info@frostskull.com

Frostskull AB
Martingalgatan 8
18374 TÄBY
Sweden