Privacy Policy

Effective Date: October 19, 2026
Last Updated: October 25, 2026

Introduction

Welcome to PortalPix ("App," "we," "us," or "our"), operated by LENDORA-24 SQUARE LIMITED ("Developer"). PortalPix transforms your portrait photos into artistic images or videos using artificial intelligence.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App. By using PortalPix, you agree to the terms of this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us at [email protected] (see Section 13).

1. Information We Collect

1.1 Guest Account and Installation Identifier

Guest Account. PortalPix does not require account registration. We do not collect your name, email address, or phone number, and you never sign in. When you first launch the App, we automatically create a guest account for you. This guest account is not a registered account and has no login credentials.

Installation Identifier. The guest account is identified only by a random installation identifier generated on your device. We use it to create and maintain your guest account and to associate your in-app gallery, creation history, and session state with your installation. This identifier is random and does not on its own identify you as an individual; where data protection law applies, data associated with it is treated as pseudonymous data. You can view and copy this identifier at any time in the App's Settings screen.

User Content. When you use PortalPix, you provide:

• Portrait photos you upload for style transformation.
• Style selections and generation parameters you choose.
• AI-generated images or videos produced from your photos ("Generated Content").

Uploaded photos are transmitted to our servers located in the United States to perform the AI style transformation and automated safety scanning. Original photos are kept only for the short period required to produce the result and complete safety checks, and are then automatically deleted from our production systems; residual copies in encrypted backups are purged within 30 days. We do not otherwise retain a copy of the original photo. If an upload is blocked because it is suspected of containing prohibited content, the affected image and the minimum necessary review record may be retained only for as long as required to enforce our content rules, investigate abuse, and comply with applicable law (including any reporting obligations).

Facial Data. Uploaded portrait photos may contain faces and facial features. We do not:

• Extract, store, or create "faceprints" or biometric identifiers.
• Use facial geometry to identify or authenticate individuals.
• Scan faces across different users' photos.
• Retain facial data after content generation is complete.

No faceprint or biometric data is ever generated, stored, or sold.

1.2 Information Collected Automatically

PortalPix contains no third-party analytics, advertising, attribution, or crash-reporting SDKs, and we do not collect your Google Advertising ID or other advertising identifiers.

Server log data. To operate the App and maintain your guest account, our servers automatically record limited technical information when the App communicates with them, including your IP address, request date and time, request type, and basic technical metadata (such as error codes). We use this log data only to diagnose errors, enforce usage limits, keep the service available, and maintain your guest account. Log data is normally retained for no more than 30 days, except that records relating to blocked content or valid legal requests may be retained longer for as long as necessary for those purposes.

Apart from the server log data above and the data transmitted to provide the generation service (your uploaded photos, Generated Content, and the installation identifier described in Section 1.1), we do not automatically collect device information, usage statistics, location data, browsing history, or cross-app tracking information.

When you download or update PortalPix through the Google Play Store, Google LLC may independently collect and process information (such as device and log information). Such processing is governed by Google's own privacy policy, available at https://policies.google.com/privacy, and is not controlled by us.

2. How We Use Your Information

We use the information described above for the following purposes:

1. To provide the AI style generation service. Temporarily processing your uploaded photos on our U.S. servers to produce AI-generated images or videos, and making your Generated Content available in your in-app gallery.
2. To create and maintain your guest account. Associating your gallery, creation history, and session state with your installation identifier, and enabling deletion of your data.
3. To keep the App safe. As part of providing the service, scanning uploads and style selections for prohibited content (such as child sexual exploitation material and non-consensual intimate imagery) and blocking prohibited generations, as required by law and Google Play policy.

We may also disclose information where required by law, as described in Section 5.

We do not use your uploaded photos or Generated Content to train, fine-tune, or improve our or any third party's artificial intelligence or machine learning models.

2.1 Legal Bases for Processing (Where Applicable)

Where a data protection law such as the GDPR applies, our processing rests on one or more of the following grounds:

• Delivering the service to you: Processing that is necessary to carry out the service you have asked for, including turning your uploads into generated images or videos and keeping them available in your in-app gallery.
• Our legitimate business interests: Processing we need in order to run a reliable service — for example, using server logs to diagnose technical faults, enforce usage limits, and keep the service available — but only where these interests do not outweigh your rights and freedoms.
• Your consent: Processing that depends on your consent, such as submitting a portrait photo for style generation. Consent is voluntary and can be withdrawn at any time by deleting the relevant content or erasing your data (see Section 4); anything processed before withdrawal remains lawful.
• Legal obligation: Processing necessary to comply with applicable law, such as responding to valid legal requests or retaining records we are required to keep.

We do not use automated processing to make decisions about you that produce legal or similarly significant effects.

3. Google Play Data Safety Summary

The summary below corresponds to the declarations we make in the Data safety form in the Google Play Console. We are responsible for keeping this section consistent with the Data safety section on our store listing, and we update both together whenever our data practices change.

Security practices: Data in transit is encrypted using HTTPS/TLS, and data at rest is encrypted on our servers.

Deletion: Users can request deletion inside the App, via email, or through our public data-deletion web page (see Section 4.3).

Collection scope: "Collection" covers only data transmitted off your device. Data that remains solely on your device is not collected.

Sharing: We do not sell, rent, trade, or share your data with advertising or analytics third parties. The service is hosted on Google Cloud infrastructure, which acts strictly as our processor; AI generation is operated by us with our own self-hosted AI service, and your photos are never sent to any third-party AI provider.

Audio: Generated videos include background music tracks bundled within the App. No music is streamed from third parties, and the App does not access, collect, or record your voice, music, or other audio from your device, so no user audio files are collected.

4. Data Retention and Deletion

4.1 Photo and Generation Data

• Original uploaded photos: Kept only for the short period required to generate the result and complete automated safety checks, then automatically deleted from our production systems.
• Blocked uploads and review records: If an upload is suspected of containing prohibited content, the affected image and the minimum necessary review record may be retained only for as long as required to enforce our content rules, investigate abuse, and satisfy legal reporting obligations; they are not used for any other purpose.
• Generated Content: AI-generated images or videos are stored on our servers and associated with your installation identifier so they can appear in your in-app gallery. They remain stored until you delete them within the App or request deletion. You can delete individual Generated Content at any time through the gallery interface. Deleted items are removed from our production systems immediately and from encrypted backups within 30 days.
• No AI training: We do not retain or use your photos or Generated Content to train AI models.
• Facial data: No faceprints or biometric data are created or stored; facial processing exists only transiently during style generation.

4.2 Guest Account Data

• Your guest account and the data associated with it (Generated Content, creation history, and session state) can be deleted using the in-app "Delete Account" option in Settings or by contacting us. Deleting your guest account also deletes its installation identifier.
• Preferences and other settings stored locally on your device are removed when you uninstall the App or clear the App's storage through Android settings.
• Uninstalling the App does not delete server-side data. To delete your guest account and its data, use "Delete Account" in Settings before uninstalling, or contact us with the installation identifier shown in Settings. After deletion, the identifier is no longer linked to any content. If you reinstall the App, a new random identifier and a new guest account are generated; previously stored content cannot be linked to the new installation.

4.3 How to Request Deletion

You may delete your data in any of the following ways:

1. Individual items: Delete individual Generated Content from the gallery at any time. Deleted items are removed from our production systems immediately and from encrypted backups within 30 days.
2. Your guest account: Use the "Delete Account" option in Settings to delete your guest account, its installation identifier, and the data associated with it (Generated Content, creation history, and preferences). This cannot be undone.
3. Online or by email: Submit a request through our public data-deletion page at https://portalpix.biz/data-deletion, or email [email protected]. You can use this route if you no longer have the App installed or no longer have your installation identifier.

We aim to complete deletion requests within 7 business days and in any event within 30 days, or within 45 days where applicable law permits an extension.

5. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise commercialize your photos, Generated Content, or installation identifier. We share information only in the limited circumstances below.

Cloud Infrastructure Provider. The generation service is hosted and operated on secure cloud infrastructure provided by Google LLC (Google Cloud), with servers located in the United States. Google Cloud acts as our processor: it processes limited data (including uploaded photos during processing, Generated Content in storage, and server log data) only to provide hosting and infrastructure services on our behalf, under data-processing and confidentiality obligations, and is not permitted to use your data for its own purposes, including advertising or model training. The AI generation capability itself is owned and operated by us using our own self-hosted AI service — we do not send your photos or Generated Content to any third-party AI provider.

Current subprocessor:

If we engage a new subprocessor that can access user data, we will update this list and notify users through an in-app notice or an update to this policy before the change takes effect.

Google Play (Google LLC). PortalPix is distributed through the Google Play Store. Google's operation of the Play Store (including download/update services, device verification, and security) is governed by Google's privacy policy at https://policies.google.com/privacy. PortalPix contains no in-app store or paid digital content.

Legal Requirements. We may disclose information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to (a) comply with a legal obligation, (b) protect our rights, property, or safety, or (c) protect against legal liability.

Business Transfer. In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as part of the transaction, subject to this Privacy Policy and applicable confidentiality obligations.

6. Data Security

We take reasonable measures to protect your information:

• Encryption in transit: All communications between the App and our servers use HTTPS/TLS encryption.
• Encryption at rest: Generated Content and other stored data are encrypted on our cloud infrastructure (AES-256 or equivalent).
• Secure U.S. infrastructure: Data is processed and stored on secured Google Cloud servers located in the United States, isolated and access-controlled.
• Access controls: Access to processing systems is restricted to authorized personnel and service providers on a need-to-know basis.
• Data minimization: Original photos are deleted as soon as generation and safety checks are complete, minimizing the data at risk.
• Backups: Backup copies are encrypted and retained for no more than 30 days, after which they are permanently overwritten or deleted; deletions requested through Section 4 propagate to backups within that period.
• Regular review: We periodically review our information collection, storage, and processing practices.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

PortalPix is operated from Nigeria by LENDORA-24 SQUARE LIMITED. When you use the App, your data may be handled outside the country you are in, in places whose privacy rules may differ from yours. In particular, your uploads and the other data covered by this policy are processed and kept on Google Cloud servers in the United States.

Whenever applicable law requires it, cross-border transfers are supported by recognized safeguards, including standard data-protection contractual clauses recognized for this purpose and any other lawful transfer mechanism available for the route concerned.

By using PortalPix, you understand and accept that your data may be moved across borders in the manner described here.

8. Your Rights and Choices

Depending on your location, applicable data protection laws (such as the GDPR/UK GDPR for users in Europe) may grant you some or all of the following rights:

• Access: Obtain a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion ("Right to be forgotten"): Request deletion of your data (see Section 4).
• Restriction: Request restriction of processing in certain circumstances.
• Data portability: Receive your data in a portable format where applicable.
• Objection: Object to processing based on our legitimate interests.
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time.
• Lodge a complaint: If you are in the EU/EEA, the UK, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority (for example, your national Data Protection Authority, or the UK Information Commissioner's Office).

To exercise any of these rights, email [email protected]. We will respond without undue delay and within the period required by applicable law — generally within 30 days, which may be extended by a further period where the law expressly allows; in any event, within 45 days where that longer period applies. Because PortalPix uses only a random installation identifier and collects no contact information, you may need to provide your installation identifier so we can locate your data; you can view and copy it in the App's Settings screen.

Device permissions. PortalPix requests access to your device's photos/media/storage only to let you select photos for transformation and save Generated Content. You can deny or revoke this permission at any time in Android Settings > Apps > PortalPix > Permissions. Revoking photo access will prevent you from uploading new photos but will not delete data already processed.

Deleting your data. You can delete individual Generated Content at any time, and delete your guest account and its data using "Delete Account" in Settings. Uninstalling the App removes locally stored data only and does not delete server-side data (see Section 4).

No advertising tracking. The App does not collect the Google Advertising ID and contains no advertising or cross-app tracking SDKs, so there is no advertising opt-out to manage.

9. AI-Generated Content and Reporting

PortalPix uses generative AI to create images or videos based on the photos and style selections you provide. AI-generated content may occasionally be inaccurate, unexpected, or offensive. Generated videos include background music tracks bundled within the App; no music is streamed from or shared with third parties. The App does not access, collect, or record your voice, music, or other audio from your device.

In-app reporting. In accordance with Google Play's AI-generated content requirements, PortalPix provides a way for you to report or flag offensive or inappropriate AI-generated content without leaving the App. You can use the "Report" option on any generated image or video (or in the item's options menu). We review these reports and use them to improve our content filtering and moderation.

Prohibited content. We prohibit and use automated filtering to block the generation of restricted content, including:

• Child sexual abuse and exploitation material.
• Non-consensual intimate or sexual imagery ("deepfake"/"nudify" content).
• Content depicting illegal acts, extreme violence, or terrorism.
• Content intended to harass, defame, or deceive others.

Attempts to generate prohibited content may be blocked.

Your responsibility. You agree not to upload photos of other people or generate content depicting other people without appropriate consent, and not to use Generated Content for unlawful purposes, including impersonation or non-consensual intimate imagery.

10. Children's Privacy

PortalPix is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age, or any higher minimum age required in your jurisdiction. The App is not part of Google Play's Families program. If we learn that a person under 18 has provided us with personal information, we will promptly delete it. If you believe a minor may have provided information to us, please contact [email protected].

11. Third-Party Links and Services

The App may contain links to third-party websites or services (for example, our support page). We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will notify you in advance through a prominent in-app notice and, where required by applicable law, ask for your affirmative consent before the changes take effect. If you do not accept the revised policy, you may stop using the App and delete your data as described in Section 4.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your data, or deletion requests, please contact:

LENDORA-24 SQUARE LIMITED
Address: 23, OPP MERRY KIDDIES, IKOLA ROAD, IPAJA, ALIMOSHO, LAGOS, NIGERIA
Email: [email protected]
Data-deletion requests: https://portalpix.biz/data-deletion

We will respond to all legitimate inquiries and requests within the period required by applicable law (generally 30 days, and up to 45 days where that longer period applies).

Last Updated: October 25, 2026