Effective 23 August 2026 · Version 1.0 · Applies to the Instix app for iOS and Android (app.trivix.aiphoto) and to trivix.app
Instix turns your selfies into styled portraits and lets you edit short videos on your phone. That means handling your photographs, which is about as personal as data gets. Below is the plain account of what we take, what we do with it, who else touches it, and how you get rid of it.
| 🟣 We do not sell you | 🔴 Your face is not training data | 🟡 Erase it yourself |
|---|---|---|
| No data broker, no ad network buying your profile, no list your address ends up on. | Your photos are used to make your pictures and for nothing else. We do not train AI models on them. | Settings → Delete Account wipes the photos, the account and the history. No email, no waiting. |
Trivix is operated by ⟨legal entity name, registered address, company number⟩, the controller of the personal data described here. Questions, requests and complaints go to [email protected].
This policy covers the Instix mobile app and our website. It does not cover Apple, Google, Instagram or anyone else you hand a file to — once a picture leaves for another app, that company's own policy governs it.
Everything below is either something you gave us on purpose or something the app cannot work without. There is no hidden category.
| What | Detail | Why it exists |
|---|---|---|
| Account | Your email address and a user id we generate. Signing in with Apple gives us the relay address you chose, not your real one, if that is what you picked. There is no password on a normal account — we mail you a one-time link instead. | So your photos, credits and history survive a reinstall and follow you to a new phone. |
| Photos you upload | The selfies you pick for a generation, and the images the AI produces from them. Section 03 covers these on their own. | They are the input and the output of the product. Without them there is nothing to generate. |
| Two intake answers | Gender (female, male, other) and an age bracket (up to 18, 18–24, 25–34, 35–44, 45+). Answered before you sign in, stored on your phone, and attached to your account the first time you sign in. | To put the right styles in front of you and to understand who the app is for. A bracket, never a birth date. |
| Generation history | Which style you ran, when, how many pictures came back, whether it succeeded, and what it cost in credits. | To draw your History tab, to refund credits when a run fails, and to find out why it failed. |
| Purchases and credits | Product bought, store (App Store or Google Play), price and currency, transaction id, whether it was a trial, a renewal or a refund, and every movement of your credit balance. We never see your card number — Apple and Google take the money, we are only told that they did. | To give you what you paid for, to keep the balance honest, to handle refunds, and for our own accounting. |
| Referrals | Your invite code, who invited you, and the chain above them. Only if you use an invite link. | To credit the person who brought you in. |
| Notification tokens | A push token for your device, plus a short-lived token per run for the iOS Live Activity. Only after you allow notifications. | To tell you your photos are ready without you sitting on the progress screen. |
| Install attribution | Through AppsFlyer: device and install identifiers, the campaign or link that brought you here, coarse device and network facts. On iOS the advertising identifier (IDFA) is included only if you allow tracking when asked; on Android the advertising id can be reset or blocked in system settings. | To know which advertising is worth paying for. It is measurement, not a profile we sell. |
| Technical logs | IP address, timestamps, app version, platform and language, and an anti-abuse attestation confirming the request came from a genuine copy of the app. | To keep the service up, to stop scripts burning our AI budget, and to debug failures. |
This is the part worth reading twice.
What leaves your phone. Only the selfies you actually select for a generation. They go to our storage, held under your account and readable by nobody else, and are sent to Google Gemini models running on Google Cloud Vertex AI — first a quick check that there is a usable face in the frame, then the generation itself. The finished pictures come back to the same private storage and appear in your History.
What never leaves your phone. Browsing your camera roll, the Video Editor, every trim, filter, rotation and export — all of it runs locally. Videos you edit are never uploaded to us. Saving a result to your gallery and handing a file to Instagram are local operations too; we are not told that you did either.
We do not train on your face. Your photos are not used to train, fine-tune or improve any AI model, ours or anyone else's. Google processes them as our service provider under an enterprise agreement, on our instructions, and does not use them to train its models.