Last updated: 2/23/2026
1. Introduction
AI Pranks ("we", "us", "our") is operated by Freiste AS, a company registered in Norway (organization number 836919092). We are committed to protecting your privacy and personal data in compliance with the General Data Protection Regulation (GDPR) and applicable laws.
This Privacy Policy explains how we collect, use, store, and protect your information.
2. Data Controller
The data controller responsible for your personal data is:
Freiste AS
Organization number: 836919092
View in Brønnøysundregistrene
For contact information, please reach out through the app.
3. Information We Collect
Content Data:
- Photos you upload to create pranks
- AI-generated prank images
- Associated metadata (timestamps, file information)
Device Information:
- Device identifiers for authentication
- Device type, operating system version
- iOS DeviceCheck tokens
Account Information:
- User ID (generated, not personal)
- Session tokens
- Purchase history and credit balance
Usage Data:
- App usage patterns and feature interactions
- Error logs and performance data
4. How We Use Your Information
Service Operation:
- Process your photos and generate AI pranks
- Manage your account and credits
- Authenticate your device
Safety and Compliance:
- Monitor all content (input, output, generated) for abuse and misuse
- Prevent fraud and enforce our Terms of Service
- Protect users, third parties, and the public
- Respond to legal requests from authorities
Service Improvement:
- Improve AI safety and content moderation
- Analyze usage to enhance features
- Fix bugs and optimize performance
5. Legal Basis for Processing (GDPR)
| Processing Activity | Legal Basis |
|---|
| Service delivery | Contract performance |
| Content monitoring | Legitimate interest (safety, abuse prevention) |
| Purchase processing | Contract performance |
| Security & fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
| Service improvement | Legitimate interest |
| Analytics (optional) | Consent |
6. Data Retention
| Data Type | Retention Period |
|---|
| Uploaded photos | 12 months |
| Generated images | 12 months |
| Account data | Duration of account + 12 months |
| Purchase records | 7 years (legal requirement) |
| Usage analytics | 24 months |
Content under active safety review may be retained longer as necessary.
7. Content Monitoring
By using AI Pranks, you acknowledge and consent that:
- All uploaded and generated content is monitored for safety
- Content is stored for up to 12 months for abuse prevention
- We may review content at any time without notice
- Content may be used to improve content moderation systems
- You have no expectation of privacy for content processed through our service
8. Third-Party Data Processing
Your data is processed by the following service providers acting on our behalf under data processing agreements:
AI Image Generation:
- Replicate, Inc. - Your uploaded photos are sent to Replicate's AI models to generate prank images. All inputs, outputs, and logs are automatically deleted after one hour. See their privacy policy at replicate.com/privacy
Cloud Infrastructure:
- Cloudflare, Inc. - Your photos and generated images are stored securely on Cloudflare R2 storage. All data is encrypted in transit and at rest. See their privacy policy at cloudflare.com/privacypolicy
Payment Processing:
- Apple Inc. - For iOS in-app purchases
Analytics (Optional - Consent Required):
- PostHog - If you opt in to analytics, we collect anonymous usage data to improve the app experience. This data is processed in the EU and does not include personal identifiers. Analytics is disabled by default and requires your explicit consent. You can enable or disable analytics at any time in the app settings. See their privacy policy at posthog.com/privacy
We do not sell your personal data.
9. International Transfers
Your data may be processed outside the EEA. We ensure appropriate safeguards through:
- EU Standard Contractual Clauses
- Adequacy decisions
- Other approved transfer mechanisms
10. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data (subject to legal retention requirements)
- Restrict processing in certain circumstances
- Data portability for data you provided
- Object to processing based on legitimate interest
- Withdraw consent at any time (where applicable)
- Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)
To exercise your rights, contact us through the app.
Note: Requesting deletion may result in account termination. Content under safety review may be retained as legally necessary.
11. Data Security
We implement appropriate technical and organizational measures including:
- Encryption in transit and at rest
- Access controls and authentication
- Regular security assessments
- Incident response procedures
12. Children's Privacy
AI Pranks is rated 13+ and is not intended for children under 13. We do not knowingly collect data from children under 13. If we discover such data, we will delete it promptly.
13. Changes to Privacy Policy
We may update this policy. Material changes will be communicated through the app. Continued use constitutes acceptance.
14. Contact Us
For privacy inquiries, please contact us through the app.
Norwegian Data Protection Authority:
Datatilsynet
www.datatilsynet.no
15. AI-Generated Content and Data Processing
When you use AI Pranks to create images, the following data processing occurs:
- Your photos are uploaded to Cloudflare R2 storage (encrypted)
- Your photos are sent to Replicate for AI processing
- Generated prank images are stored on Cloudflare R2
- You must grant explicit permission before any photos are transmitted to these services
Your Consent: By accepting our Terms of Service and Privacy Policy, you consent to your photos being processed by the service providers listed above. This processing is necessary to provide the AI Pranks service. You can revoke this consent at any time by deleting the app. Previously processed data will be retained according to our retention policy above.
Both Replicate and Cloudflare are required to provide equivalent data protection as described in this policy through our data processing agreements.