Privacy Policy

(a) Information you share with us or give us permission to obtain

When you create an account we collect the information you provide us through text fields, including contact and other identifying information such as your first and last name, email address, username, and password. We also require data about your location, which we approximate from your IP address or device settings. We use all of this to securely set up your account and provide our Services to you.

You may also have the option to share demographic information about yourself, such as your gender, age, and preferred language, which we collect to make our Services more relevant to you.

We also collect visual information through the images that you post to our Services, including your profile photos.

With your permission (on download or within one of our apps), we may access and store your device's contact list to help you find your friends on our Services, invite them to our Services, or to share your content with them. If you connect your Apple, Google, Facebook, Snapchat, X, or other third-party accounts to our Services, we use information from those accounts (like your username, friends, or contacts) for the same purpose. You can choose to stop sharing that information with us at any time by going to those third-party accounts and removing our access.

We may also collect information about others if you use our Services to upload, share or distribute content that contains information about them, including their name, image, and contact information. With your prior explicit consent, we may also collect information about others from third party platforms.

If you create an account to use our Services through Apple, Google, Facebook, Snapchat, X, or similar services, with your permission, we collect information from those accounts (like your email and public profile information) to authenticate you within our Services.

(b) Technical information when you use our Services

When you use a website or mobile application like ours, certain internet and electronic network activity information gets created and logged automatically. These are the types of technical information we collect:

• Log data. Our servers passively keep an electronic record of your interactions with our Services. For example, when you visit our website, sign into our Services, or browse content, we collect data about these interactions including where you navigate within our website and apps, your IP address, browser type and settings, the date and time of your visit, search terms, which elements of our site and Services you use the most, device data, and cookie data.
• Cookie data. We use "cookies" and similar technologies to collect log data and operate our Services. You can learn more in "Cookies and similar technologies" below.
• Device data. We collect and combine data about the devices you use to access our Services, and data about your device usage and activity.
• Metadata of visual information. We collect the metadata linked to your content. For example, your images may be accompanied by additional content like comments or a geotag. If you geotag your photo or tag your photo using others' APIs, the latitude and longitude coordinates may be stored with the photo and may be searchable if you make your photo publicly viewable.

We process your information:

(a) To fulfill a contract, or take steps linked to a contract, including to receive, process, and confirm your subscription or registration, communicate with you about your account, allow you to sign in, and verify your identity.

(b) As required to conduct our business and pursue our legitimate business interests, in particular: providing our Services and displaying content you create; helping you when you make customer service requests; protecting our Services and community; preventing fraud, abuse, and misconduct; diagnosing technical issues; conducting research and development; promoting your account for discoverability; and understanding how you use our Services to create a better experience.

(c) With your consent or to pursue legitimate business interests, to market our Services and deliver targeted advertising (unless you opt out), and to send cookies or similar technologies to your device.

(d) For legal reasons, including to verify your identity to comply with law.

Your profile and the posts you make are publicly accessible, which means anyone can see your profile photo, name, and description if you add that information. Creators you follow, creators who follow you, likes, and comments you make are also publicly accessible. We share your information with:

• At your direction, services like Apple, Google, Facebook, Snapchat, or X so that you can link your account and publish content to those services.
• Service providers we use to process information on our behalf — for example, web hosting and maintenance, security and spam detection, data storage, and analytics and advertising. We only engage businesses we believe are trustworthy and who have confirmed their privacy practices are consistent with ours.
• Ad networks and other ad serving providers (collectively, our "Ad Network") that serve ads on behalf of others on our platform.
• Government and law enforcement bodies, when we believe disclosure is reasonably necessary to comply with law, protect safety, property, or rights, or to detect, prevent, or stop illegal activity.
• Our subsidiaries and affiliates, to provide our Services to you. If we engage in a merger, acquisition, bankruptcy, or other transaction, we may share your information with the parties involved.

We use cookies (a small text file placed on your computer or mobile device to identify your computer and web browser) and may use anonymous identifiers, such as tracking pixels or web beacons. Some cookies are "session cookies" that last until you close your browser; others are "persistent cookies" that last until you or your browser deletes them.

We use these technologies to analyze use of and improve our website and Services, to see which features are most popular, to count devices accessing the website, to personalize your experience, and to remember your preferences.

Most web browsers are initially set up to accept cookies. You can set your web browser to refuse all cookies or to indicate when a cookie is being sent; however, certain features of the website or Services may not work if you delete or disable cookies.

We use third-party analytics service providers such as Google Analytics, Google's Crashlytics and Firebase services, and Facebook. We may disclose your site use information to these analytics providers to help us learn more about how you and others use our Services:

• Google Analytics opt-out: support.google.com/analytics/answer/181881
• Crashlytics and Firebase: firebase.google.com/support/privacy
• Facebook: facebook.com/help/325807937506242

Our Ad Network may serve ads on behalf of Mainframe AI, Inc. and others on our platform and non-affiliated platforms. Some of those ads may be personalized based on information ad networks collect about your use of our platform and other websites or apps over time. This type of advertising is known as interest-based advertising.

Our systems do not recognize "Do Not Track" signals, but several of the third-party companies who utilize cookies or beacons on our websites enable you to opt out. We adhere to the Digital Advertising Alliance ("DAA") Self-Regulatory Principles. Visit the DAA Webchoices tool at aboutads.info to learn more and opt out, and aboutads.info/appchoices for the DAA's opt-out program for mobile apps.

We support the ad industry's 2009 Self-regulatory Principles for Online Behavioral Advertising and expect ad networks we directly engage to do the same, though we cannot guarantee their compliance.

If you have registered for an account, you can access, review, and update your personal information by logging into your account and going to your profile. When logged in you can also update notification preferences, manage linked devices, toggle contact syncing, and change other preferences in app settings.

On your iOS or Android device you can open the Settings app to change camera, photos, and other permissions you grant our Services, opt out of targeted advertisements by disabling the advertising identifier, and modify other settings.

You can opt out of receiving marketing emails by using the "unsubscribe" link in marketing emails. You cannot opt out of receiving service announcements and emails about the status of your account.

We provide you the option to delete the personal information we have collected about you. When provided for by applicable law, you may also have the right to confirm we process your personal information, ask what we have, change or correct it, request we stop using it, object to processing, or request a copy in a machine-readable format. To exercise any of these rights, email us at privacy@mainxframe.com.

You are not allowed to use our Services if you are under the age of 13, and our Services are not directed at children under the age of 13. You must also be old enough to consent to the processing of your personal data in your country. If we become aware that we have received personal information from a person under the age of 13, we will delete this information and terminate the person's account.

When you use our Services and apply effects to, or generate images of, your face, you understand and agree that we may use facial geometry or other facial data to produce the image or effect you request. We refer to this as "biometric data." Our technology uses this biometric data to provide the applicable services to you and to improve our Services. We never use this biometric data to identify any individual person or for authentication purposes.

We only collect, use and store your biometric data in accordance with this Privacy Policy. We will not sell, lease, trade, or otherwise profit from your biometric data, and we store it using a reasonable standard of care.

We will destroy your biometric data upon the earliest of: (a) the date when our purpose for collecting it has been satisfied, (b) termination of your account, or (c) within 3 years of the date your account becomes inactive — unless retention is required by law or valid legal subpoena.

We operate worldwide, and we may move, process, and store your data in the United States and any other country where we operate, which may be outside the country where you live. Not all data protection laws are the same. Some countries where we transfer personal data may allow government authorities greater access than your country does.

See the section for EU and UK residents below to learn more about data transfers.

If you reside in the UK or another member state of the European Union, you have certain rights under applicable data protection legislation. You can ask us to:

• Confirm whether we process your personal data and request a copy.
• Change or fix your data.
• Delete your data.
• Stop using some or all of your data if we have no legal right to keep using it.
• Give you a copy of personal data you provided to us, in machine-readable format.

To exercise any of these rights, including to delete your data, email us at privacy@mainxframe.com. You are not required to pay any charge. If you make a request, we have one month to respond. If you think we haven't complied, you also have a right to file a complaint with your local data protection authority.

The data controller is Mainframe AI, Inc., a Delaware company with its registered office at 303 Twin Dolphin Drive, Suite 600, Redwood City, CA 94065. Our data protection officer may be reached at privacy@mainxframe.com.

Because our Services are globally available, we may transfer the personal data of EU residents to a country outside the EU and the UK. When we do, we use the EU's model contracts for the transfer of personal data to third countries ("standard contractual clauses").

If you are a resident of California, Colorado, Connecticut, Oregon, Texas, Utah, or Virginia, you may have the following rights under the applicable privacy laws in your state ("State Privacy Laws"):

• The right to know what personal information we have collected about you, including sources, purpose of collection, and third parties we have shared it with.
• The right to delete your personal information.
• The right to share or sell your information with any third party.

To exercise any of these rights, email us at privacy@mainxframe.com. Use "Request to Know Information", "Right to Know Categories," "Right to Delete," "Right to Opt out of Sale/Sharing," or "Right to Correct Information" in the subject line, as appropriate. Each request must be sent separately.

To designate an authorized agent, send a signed, written authorization containing your first name, last name, email address, and phone number to:

(a) Do Not Sell or Share / Use My Personal Information for Targeted Advertising

Residents in states with State Privacy Laws can opt out of both sales of their personal information and the use of their information for targeted advertising (known as "sharing" in California). Through our participation in digital advertising networks, we may sell or share/use for targeted advertising the following categories of personal information: identifiers, internet and electronic activity, and commercial information. You can opt out by visiting privacy.mainxframe.com or emailing privacy@mainxframe.com.

California users under the age of 18 may request the removal of their content publicly posted in our Services by emailing privacy@mainxframe.com. We do not knowingly sell or share the personal information of minors under the age of 16.

(b) Right to appeal

If you are a Colorado, Connecticut, or Virginia resident and we were unable to fulfill your request, you may appeal by emailing privacy@mainxframe.com within fourteen days of our decision with a detailed reason for your appeal and your state of residence.

(c) Sensitive personal information

We do not collect or process Sensitive Personal Information, as defined by California Law, for inferring characteristics, and we do not "sell" or "share" Sensitive Personal Information.

We will store your personal information for as long as is reasonably necessary to fulfill the purposes described in this Privacy Policy or as required by law.

At Mainframe AI, Inc., we value your privacy and give you full control over your data. If you wish to delete your account and all associated information, please follow the instructions below.

(a) How to request deletion

Please send an email to support@mainxframe.com with the subject line "Account Deletion Request." To protect your security, you must send this request from the email address associated with the Google or Apple account you used to sign up.

In your email, please explicitly state:

• Your name
• The email address linked to your account
• The name of the specific app (e.g., Picturate) you want to remove your records from

(b) What data is deleted?

Upon receiving your request, we will permanently delete:

• Your user profile and account authentication data
• Your account and device metadata
• Crash logs, diagnostics, and app interaction records associated with your account
• Your remaining Credits as outlined in our Terms of Use

Note: Mainframe AI, Inc. does not store or retain your images, photos, or visual media on our cloud servers, as your photo modifications and files are processed without persistent cloud storage.

(c) Timeline and exceptions

Account and data deletion requests are processed within 14 business days. Once deleted, this data cannot be recovered. When you request account deletion, the information detailed in the previous sections will be removed from our databases. However, please note that certain minimal transaction data, purchase history, and financial records will be retained for as long as necessary to comply with applicable legal, tax, accounting, or regulatory requirements.

We may change this Privacy Policy from time to time to reflect our current practices and ensure compliance with applicable laws, so please check back frequently for changes. The most current version will always be at www.mainxframe.com/privacy. If we make material changes, we may notify you through other methods as required by law. If you continue to use our Services after those changes are in effect, you agree to the new policy.

If you have thoughts or questions about this privacy policy, contact our privacy team, including our data protection officer, by emailing privacy@mainxframe.com. You can also write to us at: