Last updated: 4/3/2026
1. Introduction
AI Pranks ("we", "us", "our") is operated by Freiste AS, a company registered in Norway (organization number 836919092). We are committed to protecting your privacy and personal data in compliance with the General Data Protection Regulation (GDPR) and applicable laws.
This Privacy Policy explains how we collect, use, store, and protect your information.
2. Data Controller
The data controller responsible for your personal data is:
Freiste AS
Organization number: 836919092
View in Brønnøysundregistrene
For contact information, please reach out through the app.
3. Information We Collect
Content Data:
- Photos you upload to create pranks
- AI-generated prank images
- Associated metadata (timestamps, file information)
Device Information:
- Device identifiers for authentication
- Device type, operating system version
- iOS DeviceCheck tokens
Account Information:
- User ID (generated, not personal)
- Session tokens
- Purchase history and credit balance
Usage Data:
- App usage patterns and feature interactions
- Error logs and performance data
4. How We Use Your Information
Service Operation:
- Process your photos and generate AI pranks
- Manage your account and credits
- Authenticate your device
Safety and Compliance:
- Monitor all content (input, output, generated) for abuse and misuse
- Prevent fraud and enforce our Terms of Service
- Protect users, third parties, and the public
- Respond to legal requests from authorities
Service Improvement:
- Improve AI safety and content moderation
- Analyze usage to enhance features
- Fix bugs and optimize performance
5. Legal Basis for Processing (GDPR)
| Processing Activity | Legal Basis |
|---|
| Service delivery | Contract performance |
| Content monitoring | Legitimate interest (safety, abuse prevention) |
| Purchase processing | Contract performance |
| Security & fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
| Service improvement | Legitimate interest |
| Analytics (optional) | Consent |
6. Data Retention
| Data Type | Retention Period |
|---|
| Uploaded photos | 12 months |
| Generated images | 12 months |
| Account data | Duration of account + 12 months |
| Purchase records | 7 years (legal requirement) |
| Usage analytics | 24 months |
Content under active safety review may be retained longer as necessary.
7. Content Monitoring
By using AI Pranks, you acknowledge and consent that:
- All uploaded and generated content is monitored for safety
- Content is stored for up to 12 months for abuse prevention
- We may review content at any time without notice
- Content may be used to improve content moderation systems
- You have no expectation of privacy for content processed through our service
8. Third-Party Data Processing
Your data is processed by the following service providers acting on our behalf under data processing agreements:
AI Image Generation:
- Replicate, Inc. - Your selected images and text may be sent to Replicate's AI models to generate prank images. Replicate documents that prediction inputs, outputs, files, and logs are automatically removed after about one hour by default. See Replicate's data retention documentation at replicate.com/docs/topics/predictions/data-retention
- fal - Features & Labels Inc. - Your selected images and text may be sent to fal.ai's AI models to generate prank images. We configure fal.ai requests to disable stored input and output payloads and to expire media after one hour. See fal.ai's inference payload and media expiration documentation at fal.ai/docs/documentation/model-apis/inference/payloads and fal.ai/docs/documentation/model-apis/media-expiration
Depending on the selected model or service configuration, we may route requests to one or more third-party AI processing providers acting on our behalf. Our current AI providers include Replicate and fal.ai.
Cloud Infrastructure:
- Cloudflare, Inc. - Your photos and generated images are stored securely on Cloudflare R2 storage. All data is encrypted in transit and at rest. See their privacy policy at cloudflare.com/privacypolicy
Payment Processing:
- Apple Inc. - For iOS in-app purchases
Analytics (Optional - Consent Required):
- PostHog - We collect anonymous usage data to improve the app experience. This data is processed in the EU and does not include personal identifiers. Analytics is enabled by default and can be disabled at any time in the app settings. See their privacy policy at posthog.com/privacy. PostHog is used solely for first-party product analytics — it is not used for advertising, cross-app tracking, or sharing data with data brokers. We do not collect Apple's Advertising Identifier (IDFA) or any other advertising identifier.
We do not sell your personal data. We do not use data for advertising or share it with data brokers. We do not collect advertising identifiers (IDFA or similar).
9. International Transfers
Your data may be processed outside the EEA. We ensure appropriate safeguards through:
- EU Standard Contractual Clauses
- Adequacy decisions
- Other approved transfer mechanisms
10. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data (subject to legal retention requirements)
- Restrict processing in certain circumstances
- Data portability for data you provided
- Object to processing based on legitimate interest
- Withdraw consent at any time (where applicable)
- Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)
To exercise your rights, contact us through the app.
Note: Requesting deletion may result in account termination. Content under safety review may be retained as legally necessary.
11. Data Security
We implement appropriate technical and organizational measures including:
- Encryption in transit and at rest
- Access controls and authentication
- Regular security assessments
- Incident response procedures
12. Children's Privacy
AI Pranks is rated 13+ and is not intended for children under 13. We do not knowingly collect data from children under 13. If we discover such data, we will delete it promptly.
13. Changes to Privacy Policy
We may update this policy. Material changes will be communicated through the app. This includes updates to the third-party AI providers we use. Continued use constitutes acceptance.
14. Contact Us
For privacy inquiries, please contact us through the app.
Norwegian Data Protection Authority:
Datatilsynet
www.datatilsynet.no
15. AI-Generated Content and Data Processing
When you use AI Pranks to create images, the following data processing occurs:
- Your photos are uploaded to Cloudflare R2 storage (encrypted)
- Your selected images and text are sent to one or more AI processing providers, currently including Replicate and fal.ai
- Generated prank images are stored on Cloudflare R2
- You must grant explicit permission before any selected images or text are transmitted to these services
Your Consent: By accepting our Terms of Service and Privacy Policy, and by approving AI features in the app, you consent to your selected images and text being processed by the service providers listed above. This processing is necessary to provide the AI Pranks service. You can stop granting this permission by not using AI image generation features. Previously processed data will be retained according to our retention policy above.
Our current AI providers and cloud providers are required to provide data protection commitments under applicable contracts and data processing terms. If we add or change AI providers, we will update this policy accordingly and, where required, request new consent before sending your data to them.