Last updated: 26 September 2026
This Privacy Policy explains how CartoonYou ("CartoonYou," "we," "us," or "our") collects, uses, and shares information when you visit https://cartoonyou.art (the "Website") or use the CartoonYou mobile application (collectively, the "App"). CartoonYou lets you turn a selfie into a cartoon-style image using an AI image model.
By accessing or using the App or Website, you agree to this Privacy Policy and our Terms of Use. If you do not agree, please do not use CartoonYou.
1. Information We Collect
- Account Information: CartoonYou does not require you to register, and we do not collect your name or email address. When you first open the App, we automatically create an anonymous account (a randomly generated user ID) on our backend so your purchases, generation history, and settings stay attached to your install. There is no sign-up form and no email/password or Apple/Google sign-in.
- Authentication Data: We maintain an authentication token to keep your anonymous session signed in. This token is stored in secure device storage.
- Photos You Provide: The selfie you pick from your camera or photo library (or a file you choose) is uploaded to our backend and forwarded to our AI image provider to generate the cartoon-style result. The photo is processed to produce your result and is not stored on our servers afterward; the cartoon image is returned to your device and is not retained by us.
- Device and Usage Information: App version, language, in-app events (e.g., which style you picked, screen views), and general interaction data, collected via Firebase Analytics. This usage data is not tied to your anonymous account ID.
- Crash and Diagnostics: Crash reports and performance diagnostics, tied to your anonymous account ID, to help us troubleshoot and improve stability.
- Push Notification Tokens: If you enable notifications, we collect a device push token (Firebase Cloud Messaging) and store it on your anonymous account record to deliver them. You can disable notifications in your device settings.
- Purchase Information: Subscription and purchase status, entitlement information, and related identifiers necessary to provide paid features and restore purchases, linked to your anonymous account ID. In-app purchases are processed by Apple App Store or Google Play. CartoonYou does not receive full payment card details.
- Cookies and Similar Technologies (Website): We use cookies and similar technologies on the Website for essential functionality, analytics, and preference storage. Your browser may offer controls to manage cookies.
2. How We Use Information
- Provide, operate, and improve the App and Website
- Authenticate users, maintain sessions, and secure accounts
- Deliver chat and personalization features
- Process purchases, manage entitlements, and restore access
- Measure performance and usage (analytics) and improve quality (crash logs)
- Show ads (where applicable) and measure ad performance, subject to consent where required
- Send service communications, updates, and, where permitted, marketing messages
- Comply with law, enforce terms, and protect the rights, safety, and security of users and the service
3. Legal Bases (EEA/UK users)
Where GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract, legitimate interests (e.g., to secure and improve the App), consent (e.g., cookies/ads where required), and compliance with legal obligations.
4. Sharing and Disclosures
We do not sell your personal information. We may share information with:
- AI Image Processing: OpenAI, to process the selfie you submit and generate the cartoon-style image. OpenAI receives the photo only for the purpose of producing your result and acts as our processor for this request; it is not used to build an advertising or marketing profile of you.
- Analytics: Google Firebase Analytics, to measure app usage. We do not use Crashlytics.
- Crash and Performance Reporting: GlitchTip (a Sentry-compatible crash and performance reporting service), to receive crash reports and diagnostics.
- Subscription and Purchase Processing: RevenueCat, to manage entitlements, link purchases to your anonymous account, and restore access.
- Push Notifications: Firebase Cloud Messaging, to deliver push notifications to your device.
- Backend: Our own API and database, built on PocketBase, to run your anonymous account, purchases, and the generation request.
- Legal/Compliance: If required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer.
The service providers above process data on our behalf under their own data processing terms; we do not share your data with advertising or attribution networks.
5. Cookies and Choices
On the Website, you can manage cookies via your browser settings. We do not respond to "Do Not Track" signals. In supported regions (e.g., EEA/UK), we use consent dialogs for non-essential cookies/analytics where legally required. You can update your choices at any time via the Website's cookie preferences link.
6. Data Retention
We retain information as long as necessary to provide the App, comply with law, resolve disputes, and enforce agreements. Retention varies by data type, account status (e.g., active vs. deleted), and legal requirements.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your data; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise these rights, contact us at the email below. If you delete your data, some features may no longer work. You may also have the right to complain to a supervisory authority.
8. Security
We use technical and organizational measures appropriate to the risk (e.g., secure storage for tokens, encryption in transit) to protect your information. No method of transmission or storage is fully secure.
9. International Transfers
We may process and store information in countries outside your own. Where required, we implement appropriate safeguards for cross-border transfers, such as the European Commission's Standard Contractual Clauses for transfers to countries without an adequacy decision.
10. Children's Privacy
CartoonYou is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided information, contact us and we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy. We will post updates here and update the "Last updated" date. Material changes will be communicated as required by law.
12. Contact Us
If you have questions or wish to exercise your privacy rights, contact us:
Email: info@pixoby.space
Links: Terms of Use, Privacy
13. California Privacy Rights (CPRA)
California residents have the right to know, access, correct, delete, and port certain personal information, and to opt out of the sale or "sharing" (cross-context behavioral advertising) of personal information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. For any privacy request, contact us at info@pixoby.space. Where supported, we will honor applicable opt-out preference signals (e.g., Global Privacy Control) as required by law.