Privacy Policy

Last updated: 2/23/2026

1. Introduction

AI Pranks ("we", "us", "our") is operated by Freiste AS, a company registered in Norway (organization number 836919092). We are committed to protecting your privacy and personal data in compliance with the General Data Protection Regulation (GDPR) and applicable laws.

This Privacy Policy explains how we collect, use, store, and protect your information.

2. Data Controller

The data controller responsible for your personal data is:

Freiste AS
Organization number: 836919092
View in Brønnøysundregistrene

For contact information, please reach out through the app.

3. Information We Collect

Content Data:

  • Photos you upload to create pranks
  • AI-generated prank images
  • Associated metadata (timestamps, file information)

Device Information:

  • Device identifiers for authentication
  • Device type, operating system version
  • iOS DeviceCheck tokens

Account Information:

  • User ID (generated, not personal)
  • Session tokens
  • Purchase history and credit balance

Usage Data:

  • App usage patterns and feature interactions
  • Error logs and performance data

4. How We Use Your Information

Service Operation:

  • Process your photos and generate AI pranks
  • Manage your account and credits
  • Authenticate your device

Safety and Compliance:

  • Monitor all content (input, output, generated) for abuse and misuse
  • Prevent fraud and enforce our Terms of Service
  • Protect users, third parties, and the public
  • Respond to legal requests from authorities

Service Improvement:

  • Improve AI safety and content moderation
  • Analyze usage to enhance features
  • Fix bugs and optimize performance

5. Legal Basis for Processing (GDPR)

Processing ActivityLegal Basis
Service deliveryContract performance
Content monitoringLegitimate interest (safety, abuse prevention)
Purchase processingContract performance
Security & fraud preventionLegitimate interest
Legal complianceLegal obligation
Service improvementLegitimate interest
Analytics (optional)Consent

6. Data Retention

Data TypeRetention Period
Uploaded photos12 months
Generated images12 months
Account dataDuration of account + 12 months
Purchase records7 years (legal requirement)
Usage analytics24 months

Content under active safety review may be retained longer as necessary.

7. Content Monitoring

By using AI Pranks, you acknowledge and consent that:

  • All uploaded and generated content is monitored for safety
  • Content is stored for up to 12 months for abuse prevention
  • We may review content at any time without notice
  • Content may be used to improve content moderation systems
  • You have no expectation of privacy for content processed through our service

8. Third-Party Data Processing

Your data is processed by the following service providers acting on our behalf under data processing agreements:

AI Image Generation:

  • Replicate, Inc. - Your uploaded photos are sent to Replicate's AI models to generate prank images. All inputs, outputs, and logs are automatically deleted after one hour. See their privacy policy at replicate.com/privacy

Cloud Infrastructure:

  • Cloudflare, Inc. - Your photos and generated images are stored securely on Cloudflare R2 storage. All data is encrypted in transit and at rest. See their privacy policy at cloudflare.com/privacypolicy

Payment Processing:

  • Apple Inc. - For iOS in-app purchases

Analytics (Optional - Consent Required):

  • PostHog - If you opt in to analytics, we collect anonymous usage data to improve the app experience. This data is processed in the EU and does not include personal identifiers. Analytics is disabled by default and requires your explicit consent. You can enable or disable analytics at any time in the app settings. See their privacy policy at posthog.com/privacy

We do not sell your personal data.

9. International Transfers

Your data may be processed outside the EEA. We ensure appropriate safeguards through:

  • EU Standard Contractual Clauses
  • Adequacy decisions
  • Other approved transfer mechanisms

10. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure of your data (subject to legal retention requirements)
  • Restrict processing in certain circumstances
  • Data portability for data you provided
  • Object to processing based on legitimate interest
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

To exercise your rights, contact us through the app.

Note: Requesting deletion may result in account termination. Content under safety review may be retained as legally necessary.

11. Data Security

We implement appropriate technical and organizational measures including:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Incident response procedures

12. Children's Privacy

AI Pranks is rated 13+ and is not intended for children under 13. We do not knowingly collect data from children under 13. If we discover such data, we will delete it promptly.

13. Changes to Privacy Policy

We may update this policy. Material changes will be communicated through the app. Continued use constitutes acceptance.

14. Contact Us

For privacy inquiries, please contact us through the app.

Norwegian Data Protection Authority:
Datatilsynet
www.datatilsynet.no

15. AI-Generated Content and Data Processing

When you use AI Pranks to create images, the following data processing occurs:

  • Your photos are uploaded to Cloudflare R2 storage (encrypted)
  • Your photos are sent to Replicate for AI processing
  • Generated prank images are stored on Cloudflare R2
  • You must grant explicit permission before any photos are transmitted to these services

Your Consent: By accepting our Terms of Service and Privacy Policy, you consent to your photos being processed by the service providers listed above. This processing is necessary to provide the AI Pranks service. You can revoke this consent at any time by deleting the app. Previously processed data will be retained according to our retention policy above.

Both Replicate and Cloudflare are required to provide equivalent data protection as described in this policy through our data processing agreements.