Privacy Policy · Photo Editor Studio Pro

CloudEx Inc. ("we", "us", or "our") operates the "Photo Editor Studio Pro" app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. By using the Service, you are deemed to have agreed to the practices described in this Policy.

1. Our Core Principle

Photo Editor Studio Pro is a photo editing app for finishing a single photo — from adjustments and beauty retouching to AI object removal and design. Its editing tools other than the AI features — adjustments, filters, curves, HSL, selective adjustments, light, auto enhance, cutout and background replacement, blur and mosaic, healing, skin smoothing, face shaping, makeup, wrinkle and dark-circle retouching, text, stickers, drawing, effects, frames, canvas, collage (2–9 photos), and batch editing — run entirely on your device. When you use these tools, we never view, collect, upload, or transmit your photos to our servers. There is no account and no sign-up.

The AI features are the only exception. Only when you tap an AI button does the app send a reduced copy of that photo, together with the other input described in Section 2, to our server for processing. If you do not tap an AI button, nothing is sent for AI processing.

Specifically, we do not have access to any of the following:

The photos on your device, or the photos you edit and save, other than the reduced copy sent when you tap an AI button
Your drafts in progress, your list of works, or your settings
The photos you do not choose in the system photo picker

2. AI Features (Processed on Our Server)

Photo Editor Studio Pro offers the following AI features, available with a subscription or during the free trial: AI Eraser, AI Backdrop, AI Expand, AI Enhance, AI Retouch, AI Art, AI Auto Fix, AI Text, and AI Caption. These features are processed on our server and by the AI providers listed below, not on your device. Data is sent only when you tap an AI button. If you do not, nothing is sent.

2.1 What is sent

Your photo, reduced: A JPEG copy of the photo with its longest side at most 1024 px (512–640 px for AI Auto Fix, AI Text, and AI Caption). Because the JPEG is newly created on your device, it does not contain EXIF metadata such as the date the photo was taken or its location.
Other input for the feature you use: For AI Eraser, a mask image (PNG) of the area you painted; the ID of the template or style you choose; a short request you enter (such as the words, mood, or tone you want); for AI Auto Fix, numbers such as the brightness distribution of the photo; for AI Expand, how far and in which direction to extend the photo; and the language for the results.
Sent with it: A hash of your device identifier (see Section 2.4), an anonymous user ID (from Firebase Authentication's anonymous sign-in), an App Check token, and, for subscribers, the subscription's purchase token.

2.2 Where it is sent

Our server: Firebase Cloud Functions and Cloud Firestore on Google Cloud, in the Tokyo region (asia-northeast1). The connection is encrypted (HTTPS).
AI providers: Our server forwards your input to the provider that handles the feature you use. The app never connects to these providers directly.
- Anthropic, PBC (Claude) — the values for AI Auto Fix and the text for AI Text and AI Caption
- fal (Features & Labels, Inc., fal.ai) — AI Eraser, AI Expand, and AI Backdrop
- Replicate, Inc. — AI Art, AI Retouch, and AI Enhance

We send your input to these providers only so that they can create the result. Each provider handles the data it receives in accordance with its own terms and privacy policy; please refer to them for details.

2.3 What we do not keep

We do not store the input you send (photos, masks, and requests) or the AI results on our server, and we do not write them to our server logs, except for results you report in the app (Section 2.4).

2.4 What we keep on our server

Device identifier hash and free trial: A hash of your device identifier, computed as SHA-256 of a fixed salt plus Android's SSAID. The original identifier is never sent, and it cannot be recovered from the hash. With it we keep the start time of your free trial, the number of times you used it, and the total processing cost, so that each device gets only one free trial.
Anonymous user ID: The link between your anonymous user ID and the device identifier hash, and the start time of the free trial.
Subscription status: Keyed by a hash of the purchase token — the status, plan, start and expiry, whether it renews automatically, whether the purchase has been acknowledged, this week's AI usage, and the number of light uses.
Request counters: Counts per anonymous user ID, per minute and per day, to prevent rapid repeated requests and abuse.
Daily totals: The number of requests and the processing cost for each type of AI processing. These totals do not identify individuals.
Results you report: Only when you report an AI result in the app — the type of processing, the reason, the text the AI returned, a reduced image (longest side at most 512 px), the note you write (up to 500 characters), the app version, and a short hash that tells reporters apart. We use these to improve quality and to investigate inappropriate results.

2.5 Results

AI results are returned to your device. When you confirm a result with ✓, it becomes an ordinary edit. Even after your subscription or free trial ends, you can still save and share the results you have confirmed. AI Caption results are kept only on your device.

3. Information We Collect

3.1 Information Collected Automatically

Anonymous crash reports: Via Firebase Crashlytics. When the app crashes, we collect the stack trace, device model, OS version, and app version. This does not include your photos or personally identifiable information.
Anonymous sign-in: The app uses Firebase Authentication's anonymous sign-in to obtain an anonymous user ID for requests to our server. No email address or name is involved.
App Check: Firebase App Check uses Google Play Integrity to confirm that requests to our server come from the genuine app.
Purchase information: We use the purchase token issued by Google Play to verify your subscription, checking it on our server with the Google Play Developer API (purchases.subscriptionsv2). Payment is handled by Google Play, and we never receive payment information such as credit card numbers.
Google ML Kit: Cutout (subject segmentation) and face detection for the beauty tools use Google ML Kit, which runs on your device; your photos are not sent. According to Google, ML Kit may contact Google's servers, for example to update its models, and sends metrics about the performance and usage of the API (not the content of your photos) to Google.
List of our other apps: To show our other apps, the app downloads their names, descriptions, and icons from our content server (static files hosted on Cloudflare Pages). The request contains no personal data from the app. As with any request to a web server, the server receives your device's IP address as part of the connection. Tapping an app in the list opens its page on Google Play.

3.2 Information Stored Only on Your Device

Your saved photos: Edited photos are saved to your device's Pictures/PhotoEditorStudio folder as new files. The original photo is never overwritten.
Drafts and works: Edits in progress (drafts you can continue later) and your list of works are stored only on your device.
App settings: The theme, default save options, the language for AI results, and similar settings are stored only on your device.
AI Caption results: Stored only on your device.
When you uninstall: Uninstalling the app or clearing its data deletes the drafts and settings kept in the app. Photos saved to the Pictures folder remain.

3.3 Information We Explicitly Do Not Collect

Your photos, other than the reduced copy sent when you tap an AI button (Section 2)
Your name, email address, phone number, or contacts (the app has no account or sign-up)
Your device's advertising ID (AAID)
Location data — photos sent for AI processing are newly created on your device and contain no EXIF metadata such as location
Payment information such as credit card numbers

Photo Editor Studio Pro does not use Google Analytics.

3.4 Permissions the App Requests and Their Purposes

Internet (INTERNET) — Used only for AI processing, crash reports, Google Play purchase verification, in-app reviews and in-app updates, downloading the list of our other apps, ML Kit model downloads, and showing this privacy policy in the app.
Storage (WRITE_EXTERNAL_STORAGE / READ_EXTERNAL_STORAGE, Android 9 and earlier only) — Saves your edited photos to Pictures/PhotoEditorStudio. Not requested on Android 10 and later.

To choose photos, the app uses Android's system photo picker, so it does not request permission to read all of your photos — only the photos you choose are passed to the app. The app does not have the camera permission; when you take a photo, it asks your device's standard camera app to take it.

4. How We Use Information

The limited information we collect is used only for the following purposes:

Operating and maintaining the Service
Processing the AI features you request
Limiting the free trial to one per device, and managing subscribers' weekly AI usage
Verifying your subscription purchase
Preventing rapid repeated requests and abuse
Keeping track of the volume and cost of AI processing in aggregate
Investigating reported AI results and improving quality
Diagnosing and fixing crashes
Responding to support inquiries
Complying with applicable laws

5. Third-Party Services

Photo Editor Studio Pro uses the following third-party services. Each service has its own privacy policy.

Anthropic (Anthropic, PBC) — AI Auto Fix, AI Text, and AI Caption; receives your input forwarded from our server when you use these features
fal (Features & Labels, Inc.) — AI Eraser, AI Expand, and AI Backdrop; receives your input forwarded from our server when you use these features
Replicate (Replicate, Inc.) — AI Art, AI Retouch, and AI Enhance; receives your input forwarded from our server when you use these features
Google Cloud / Firebase (Google LLC) — our server (Cloud Functions and Cloud Firestore, Tokyo region), anonymous sign-in (Firebase Authentication), and App Check (Google Play Integrity)
Firebase Crashlytics (Google LLC) — anonymous crash diagnostic data
Google Play Billing (Google LLC) — the subscription; payment is completed on Google Play, and we receive only a purchase token
Google Play In-App Review and In-App Updates (Google LLC) — let you rate the app and install updates without leaving it; handled by Google Play
Google ML Kit (Google LLC) — on-device cutout (subject segmentation) and face detection
Cloudflare Pages (Cloudflare, Inc.) — hosts the static list of our other apps

Photo Editor Studio Pro does not display ads within the app and does not share your data with advertising networks in order to show you ads.

6. Data Retention

Crash reports: retained for 90 days, then deleted.
Free trial records (device identifier hash, start time, and number of uses): kept after the trial ends, so that each device gets only one free trial.
Subscription records: kept for as long as they are needed to verify your subscription and provide support.
Request counters: overwritten with the next value once that minute or day has passed.
Reported results: kept for as long as they are needed for investigation and improvement; deleted upon request.
Input sent to the AI features and the AI results: not stored on our server (Section 2.3). The AI providers handle the data they receive under their own terms.
Support emails: retained for 12 months after the last reply, then deleted (except where legally required).
Data on your device (drafts, works, settings, and AI Caption results): kept until you delete it or uninstall the app.

7. International Data Transfers

We are based in Japan, and our server for the AI features runs on Google Cloud in the Tokyo region. The AI providers (Anthropic, fal, and Replicate) are located in the United States and other countries, and the infrastructure used for crash diagnostics and for hosting the list of our other apps may be located in various countries. When you use the Service, the information described above may be processed outside your country of residence.

8. Your Rights

Depending on where you reside (e.g., the EEA, UK, California, Japan), you may have the right to request access to, correction of, or deletion of the limited information we hold. You can:

Choose not to use the AI features — nothing is sent for AI processing unless you tap an AI button
Uninstall the app or clear its data to erase the drafts and settings stored on your device
Ask us to delete an AI result you reported
Contact us at the address below to make a request regarding the information we hold

9. Children's Privacy

Photo Editor Studio Pro is not directed to children under the age of 13 (or the minimum age applicable in your region). If we inadvertently collect information from such a child, we will delete it promptly upon being contacted.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version is always published at this URL together with its effective date. We will also notify you within the app of significant changes as appropriate.

11. Contact

For questions about privacy, data requests, or to report concerns, please email us at .

CloudEx Inc. (Japan)

Effective Date: November 2, 2026