Privacy

Privacy Policy

Updated July 21, 2026

1. Scope and operator

This Policy applies to the PopPose iOS app, poppose.app, and related cloud services. The service operator and, where applicable, data controller is Morphon, LLC, a Delaware limited liability company, at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Contact us at support@poppose.app.

2. Data we process and why

• Account data: the app-specific user identifier from Sign in with Apple and any name or relay email you choose to provide, to create accounts, authenticate you, and provide support.
• Collection content: names, series, categories, numbers, notes, collection dates, favorite status, and cover images, to save, search, sort, sync, share, and export your collection.
• Purchase data: Apple product and transaction IDs plus purchase, expiration, and revocation dates, to verify entitlements, grant creation credits, prevent duplicate grants, and handle refunds. We never receive your payment-card number.
• AI requests: only after you choose and confirm third-party processing, the current image, template, duration, and parameters needed to perform AI cutout or video generation.
• Security and diagnostics: IP address, request time, API path, response status, error summaries, and basic device or network information, to prevent abuse, diagnose failures, and secure the service—not for advertising or cross-app tracking.

Where required by law, our legal bases include performing our contract with you, your consent, legitimate interests in operating and securing the service, and compliance with legal obligations. Before the first optional AI transfer, PopPose identifies the recipient, data, and purpose. Declining does not upload the image or consume credits.

3. On-device processing and permissions

Standard Cutout uses Apple Vision entirely on-device and uploads nothing. Camera and photo-library access are requested only when you photograph, choose, or save content, and can be withdrawn in iOS Settings. PopPose does not request precise location, contacts, microphone, health, or payment-card permissions.

4. Service providers and disclosures

We disclose data only as needed to provide a feature:

• Apple: Sign in with Apple, App Store purchases, and system sharing, subject to Apple’s privacy terms.
• Cloudflare: Workers, D1, private R2 storage, network security, and website hosting. The website uses Cloudflare Web Analytics for aggregate page-performance metrics; that product does not collect or use visitors’ personal data.
• Replicate / BRIA: receives the current image when you choose AI Cutout, subject to the Replicate Privacy Policy and applicable model terms.
• Atlas Cloud / ByteDance Seedance: receives the current image, storyboard, and generation parameters when you choose video generation, subject to the Atlas Cloud Privacy Policy and applicable underlying model-provider terms.

We do not sell or rent personal data, share it with data brokers, or “share” it for cross-context behavioral advertising. Beyond the providers above, we disclose data only at your direction, to comply with law, to protect users or the service, or in a corporate transaction with legally required notice and safeguards.

5. International processing

Morphon, LLC and our primary service providers are based in the United States. Account, collection, media, and AI-request data may be processed in the United States and other locations where providers operate. If you use PopPose from another jurisdiction, data may be transferred outside your region. We use contractual, consent-based, or other safeguards required by applicable law. Mandatory privacy and consumer rights in your home jurisdiction remain unaffected.

6. Retention

Account data, collection indexes, and covers generally remain until you delete your account. PopPose keeps temporary AI inputs, outputs, and job records only briefly for reliable delivery; temporary R2 objects are configured to expire after approximately one day. Providers may retain security, billing, or troubleshooting records under their own policies. Purchase records remain while needed for entitlements and duplicate-grant prevention and may be retained for applicable tax, accounting, or dispute obligations. You control files saved locally.

7. Your choices and rights

You can review and edit collection content in the app and permanently delete your cloud account, collection indexes, media, generation records, and sessions in Settings. Depending on applicable law, you may also request access, correction, deletion, a portable copy, restriction or objection, withdrawal of consent, an opt-out of sale or targeted advertising (which we do not currently conduct), and an appeal of a denied request. We may verify your relationship to the account; an authorized agent may submit a request where permitted.

Email support@poppose.app. We will respond within the period required by applicable law. Withdrawal does not affect processing already lawfully completed or processing necessary for contract, security, or legal obligations. You may also complain to your local data-protection or consumer-protection authority.

8. Security

We use TLS, device Keychain, hashed sessions, account-scoped object paths, private R2 storage, server-side authorization, rate limits, and restricted credentials. No online system can guarantee absolute security; report account or security concerns promptly.

9. Children

PopPose is for general collectors and is not directed to children under 13. We do not knowingly collect their personal data. Contact us if you believe a child submitted data so we can delete it. A higher local minimum age or parental-consent requirement applies where required by law.

10. Changes and contact

Material changes will update the date above and, where appropriate, be communicated in the app or by another reasonable method. Privacy requests and questions may be sent to:

Morphon, LLC
131 Continental Dr, Suite 305
Newark, DE 19713
United States
support@poppose.app