Privacy Policy

Introduction

CurlyCorn LLC ("we", "our", or "us") operates Image to 3D. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

We collect minimal information necessary to provide our services:

• Images & Text Prompts: Photos you upload and text prompts you enter are sent through our servers to AI processing providers (fal.ai, Modal, and Runware) for image generation and 3D conversion. Your images may be temporarily stored on our cloud storage (Cloudflare R2) to facilitate processing. We do not permanently store your images or prompts, except content you choose to report (see Your Rights).
• Generated Content: AI-generated images and 3D models are hosted temporarily on our cloud storage (Cloudflare R2) or our AI providers' servers (fal.ai, Runware), then downloaded directly to your device. Files on our own cloud storage are deleted automatically within a few days; copies hosted by our AI providers are deleted according to their own retention policies.
• Subscription & Credit Data: We store an anonymous device identifier (derived from your device's vendor identifier on iOS or its Android ID, or a random ID if neither is available) along with your subscription status and credit balance to operate the service. The same identifier is your anonymous user ID with RevenueCat. This is not personally identifiable information — no name, email, or IP address is stored.
• Subscription Information: If you subscribe to Pro, payment processing is handled by Apple/Google through their respective app stores. We receive only subscription status, not payment details.
• Device Identifiers: Anonymous identifiers for subscription management through RevenueCat.

Device Permissions

The app may request the following device permissions:

• Camera: To take photos for 3D conversion.
• Photo Library: To select existing images for 3D conversion.
• Notifications: To alert you when 3D model generation is complete. If you allow notifications, a push token for your device is stored on our servers with your anonymous app user ID and used to send these alerts through Expo's push service.

Local Storage

Your generated 3D models are stored locally on your device. We do not have access to your saved models, except when you run the 3D print check: the model is then uploaded to our temporary cloud storage (Cloudflare R2) and analyzed or repaired on our mesh-processing server. You can delete your models at any time through the app.

Third-Party Services

We use the following third-party services:

• fal.ai: AI image generation and 3D model conversion. Your images and text prompts are sent to fal.ai for processing and may be temporarily stored on their infrastructure.
• Modal: GPU compute infrastructure for 3D model generation. Your images are sent to Modal for processing.
• Runware: AI compute infrastructure for image generation and 3D model generation. Your images and text prompts are sent to Runware for processing.
• Cloudflare R2: Cloud storage for temporarily hosting uploaded images and generated 3D models. Files are automatically deleted within a few days.
• RevenueCat: Subscription and purchase management. Collects anonymous device identifiers and purchase history.
• Vercel: Hosting and infrastructure for our API servers.
• Hetzner: Server hosting for our 3D print check. Models you submit for mesh analysis or repair are processed there.
• Expo: Push notification delivery. If you allow notifications, your device's push token and the notification are sent through Expo's push service; the notification contains its text, a link to the finished model and identifiers of the generation.
• MongoDB Atlas: Database storage for anonymous subscription and credit data.
• Apple App Store / Google Play: Payment processing.
• Plausible Analytics (website only): Our marketing website uses self-hosted Plausible Analytics for aggregate traffic measurement. No personal data is collected, no cookies are set, and data stays on our own infrastructure — nothing is sent to Plausible's servers. This applies to the website only — not the app.

Each service has its own privacy policy that governs their handling of your data. We encourage you to review their policies.

Data Security

We implement appropriate security measures to protect your data during transmission and processing. All API communications use HTTPS encryption.

Your Rights

• We do not store personally identifiable information on our servers. Server-side data tied to your device is limited to an anonymous identifier, your credit and subscription status, a history of credit transactions (for example which model a generation used and when), and, if you use these features, your push token and any content reports you submit, which we keep for moderation (for an image: its prompt and a link to the image; for a 3D model: the AI model used and the model's name). Short-lived records of in-progress generation and print-check requests (including the submitted input) are deleted automatically within 24 hours.
• Your saved 3D models are stored on your device, and you can delete them at any time through the app. Copies that exist temporarily on our or our providers' servers during generation or a print check are deleted as described above.
• You can cancel your subscription at any time through your app store.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy, please contact us at:

privacy@imageto3dapp.com