Privacy Policy

Last updated: 18 July 2026

1. Introduction

This Privacy Policy explains how Saraswati Javalkar, operating under the business name Iris Studio and Services (“Iris Studio”, “we”, “us” or “our”), collects, uses, stores, shares and protects information when you use our:

• mobile applications;

• websites;

• photo, video, audio and graphic-design tools;

• invitation, event and RSVP services;

• artificial-intelligence and automated editing features;

• customer-support services; and

• related products and services.

Together, these are referred to as our “Apps” or “Services”.

This Privacy Policy applies to all Apps published or operated by Iris Studio unless a particular App provides a separate or supplemental privacy notice.

Not every App collects or uses every category of information described in this policy. The privacy information displayed on the relevant App Store or Google Play product page and any notice presented inside the App provide additional information about the practices applicable to that particular App.

By using an App, you acknowledge that your information will be handled as described in this Privacy Policy. Where applicable law requires consent, we will request consent separately through an appropriate notice, permission request or consent interface.

2. Data Controller

For the purposes of applicable data-protection laws, the entity responsible for determining how and why personal information is processed is:

Saraswati Javalkar
Operating as Iris Studio and Services
Address: Spaze Itech Park Sohana Road Sector 49, Gurgaon Haryana 122018 India
Email: irisstudio.satish@gmail.com
 

3. Information We May Collect

The information collected depends on the App you use, the features you select, the permissions you grant, your device and whether the App uses advertising, analytics, cloud processing or account-based features.

3.1 Photos, Videos, Audio and Other User Content

Our Apps may allow you to select, capture, import, edit, create, save or export:

• photos and videos;

• audio files and voice recordings;

• documents and PDF files;

• text, logos and designs;

• templates and project files;

• contact cards or business-card information;

• invitation and event information; and

• other content you choose to provide.

This information is referred to as “User Content”.

Where an editing feature operates entirely on your device, the User Content is not transmitted to our servers.

User Content may leave your device when you intentionally:

• use a cloud-processing or online artificial-intelligence feature;

• back up or synchronise a project;

• submit content through an account-based service;

• share content with another user;

• publish an invitation or event;

• send content to customer support; or

• use another feature that clearly requires online processing.

Before User Content is uploaded for an optional online feature, the App should inform you that online processing is required.

We do not claim ownership of your User Content merely because it was created, edited or exported using one of our Apps.

3.2 Photo Library and Media Permissions

An App may request access to your device’s photo library or media storage so that you can:

• select an image or video;

• edit selected media;

• save or export a completed file;

• restore a saved project; or

• access another feature you request.

Where supported by the operating system, we may use a system photo picker that allows you to select individual items without granting access to your complete photo library.

We do not intentionally examine, collect or upload photographs or videos that you have not selected for use in the App.

3.3 Camera and Microphone

An App may request camera access to let you capture a photograph or video.

An App may request microphone access when you choose to:

• record audio;

• record a video with sound;

• add a voice-over;

• use an audio-editing feature; or

• use another feature that requires audio input.

Camera and microphone access is used only after you grant device permission. We do not intentionally activate the camera or microphone in the background for unrelated purposes.

3.4 Account and Profile Information

Some Apps do not require an account. Apps offering online, cloud, community, invitation, collaboration or synchronisation features may permit or require account creation.

Depending on the App, account information may include:

• name;

• email address;

• username;

• password or authentication credentials;

• profile image;

• country or language;

• account identifier;

• Sign in with Apple identifier;

• Google or other login identifier; and

• account preferences.

Passwords should be stored in a protected or cryptographically hashed form rather than as readable text.

3.5 Invitation, Event and RSVP Information

Apps providing invitation, event or RSVP services may process information such as:

• host name and contact information;

• event name, date, time and venue;

• invitation design and message;

• guest name and contact details;

• RSVP response;

• attendance status;

• meal or event preferences;

• names of accompanying guests;

• messages submitted to the host; and

• event statistics.

Information included in an invitation may be accessible to people who receive or possess the invitation link. You should avoid including sensitive personal information in a publicly shareable invitation.

3.6 Purchase and Subscription Information

When you purchase an App, subscription or in-app product through the Apple App Store or Google Play, the relevant store processes your payment.

We may receive limited transaction information such as:

• the product or subscription purchased;

• transaction identifier;

• purchase date;

• subscription status;

• renewal or expiry status;

• storefront or country;

• currency; and

• whether a purchase was successfully validated.

We do not receive or store your complete payment-card number, bank-account number or App Store account password when payment is processed by Apple or Google.

3.7 Device, Usage and Diagnostic Information

Depending on the App and the services integrated into it, we or our service providers may collect:

• device model;

• operating-system name and version;

• App name and version;

• device language;

• country or general region;

• IP address;

• device or installation identifier;

• advertising identifier, where permitted;

• consent status;

• subscription status;

• screens or features used;

• session duration;

• button interactions;

• export or processing completion events;

• errors and failed operations;

• crash reports;

• performance data;

• memory and storage information;

• network type; and

• diagnostic logs.

We use this information to operate the App, understand feature usage, diagnose problems, prevent abuse and improve performance.

3.8 Advertising Information

Free versions of some Apps may display advertisements.

Where advertising is enabled, advertising partners may process information such as:

• advertising identifiers;

• device or installation identifiers;

• IP address;

• general location inferred from an IP address;

• device and operating-system information;

• consent signals;

• advertisements displayed;

• ad impressions;

• clicks or interactions;

• purchase or conversion information, where permitted; and

• fraud-prevention information.

Advertising practices vary depending on your location, device settings, consent choices and whether personalised advertising is permitted.

3.9 Customer Support Information

When you contact us, we may receive:

• your name and email address;

• App name and version;

• device and operating-system information;

• purchase information you voluntarily provide;

• screenshots or screen recordings;

• attachments;

• diagnostic information; and

• the contents of your support request.

Do not send us passwords, complete payment-card details, government identification numbers or other unnecessary sensitive information.

3.10 Website and Contact-Form Information

When you visit our website, our hosting provider or website tools may process:

• IP address;

• browser and device information;

• pages visited;

• referring website;

• date and time of access;

• server logs;

• cookies and similar technologies; and

• information submitted through a contact form.

Cookies may be used for essential website operation, security, preferences, analytics or embedded content. Where legally required, non-essential cookies will be used only after appropriate consent.

4. Face Detection and Face-Related Processing

Certain Apps may use Apple’s Vision framework or similar device-level technology to detect a face, person or subject within an image.

This may be used for features such as:

• automatic cropping;

• subject positioning;

• portrait editing;

• background removal;

• face-aware effects; or

• alignment of design elements.

For features described as operating on-device:

• processing occurs on your device;

• we do not receive the source image;

• we do not identify the individual shown;

• we do not perform facial recognition;

• we do not create a facial template;

• we do not create a biometric profile;

• temporary detection results are discarded after processing; and

• only the output you choose to save remains on your device.

Face detection is not used for authentication, surveillance or determining identity.

A separate online feature may upload an image for processing only where the App clearly explains the online processing and requests any permission required by law.

5. Artificial-Intelligence and Automated Features

Some Apps may provide optional artificial-intelligence, machine-learning or automated features, including:

• background removal;

• object or subject detection;

• image enhancement;

• automatic cropping;

• generative image or design features;

• restoration;

• style transformation;

• content suggestions; or

• automated editing.

An AI feature may operate either:

1. entirely on your device; or

2. through an external processing service.

When a feature requires User Content or personal information to be sent to a third-party AI service, the App will provide relevant information about the processing and request explicit permission where required.

We do not intentionally use private photos, videos or other User Content to train our own AI models unless we clearly disclose that purpose and obtain any consent required by law.

Before using an external AI provider, we take reasonable steps to understand:

• what information the provider receives;

• the purpose for which it is processed;

• how long it is retained;

• whether it is used to train models;

• whether it is shared further; and

• what security and contractual safeguards apply.

Automated results may be inaccurate or unsuitable. Users should review an output before publishing or relying on it.

6. How We Use Information

We may process information to:

• provide requested editing, design or content-creation features;

• import, process, save and export User Content;

• create and manage accounts;

• provide cloud or synchronisation features;

• operate invitation, event and RSVP functionality;

• validate purchases and subscription entitlements;

• provide premium features;

• show contextual or personalised advertising where permitted;

• measure advertising performance;

• analyse how Apps are used;

• improve functionality and user experience;

• diagnose crashes, errors and performance problems;

• provide technical and customer support;

• send service-related communications;

• send marketing communications where you have opted in;

• prevent fraud, abuse, security threats and unlawful activity;

• enforce our Terms of Use;

• comply with legal obligations; and

• establish, exercise or defend legal claims.

We will not use personal information for a materially different purpose without providing appropriate notice and obtaining consent where required.

7. Legal Grounds for Processing

Depending on your location and the particular processing activity, we may rely on one or more of the following legal grounds:

Consent

We may rely on your consent for:

• device permissions;

• personalised advertising;

• tracking;

• optional analytics where required;

• uploading content to an external AI service;

• marketing communications; and

• other optional processing.

You may withdraw consent through the App, your device settings or by contacting us. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Performance of a Contract

We may process information where necessary to:

• provide an App or feature you requested;

• operate an account;

• process a subscription entitlement;

• deliver a cloud service; or

• respond to a support request.

Legitimate Interests

Where permitted by law, we may process limited information for legitimate interests such as:

• maintaining App security;

• preventing fraud;

• improving reliability;

• measuring non-sensitive product performance;

• understanding aggregated usage; and

• protecting our legal rights.

We balance these interests against the rights and reasonable expectations of users.

Legal Obligations

We may process or retain information where necessary to comply with laws, court orders, tax requirements, lawful government requests or other legal obligations.

Other Lawful Grounds

We may rely on other grounds permitted under applicable law, including specified legitimate uses under Indian data-protection law.

8. Third-Party Services

Depending on the App, we may use third-party services for app distribution, payments, hosting, analytics, advertising, crash reporting, communications, support or optional AI processing.

Services currently or commonly used across our Apps may include the following. This list must be reviewed against the SDKs actually included in each App.

Apple

Apple may process information relating to:

• App Store distribution;

• purchases and subscriptions;

• StoreKit transactions;

• Sign in with Apple;

• device permissions;

• App Tracking Transparency; and

• App Store analytics.

Apple’s handling of information is governed by Apple’s own privacy terms.

Google Services

Some Apps may use Google services, including:

• Google AdMob;

• Google User Messaging Platform;

• Firebase Analytics;

• Firebase Crashlytics;

• Firebase Remote Config;

• Firebase Cloud Messaging; and

• Google Play Billing.

Depending on the service and configuration, Google may process device information, identifiers, consent status, usage information, advertising data, diagnostics and approximate location.

Remove any Google service from this list that is not actually included in your Apps.

Hosting and Cloud Providers

Apps with accounts, cloud processing, invitations, websites or server-based features may use cloud-infrastructure providers such as Amazon Web Services.

A hosting provider may process:

• IP addresses;

• server logs;

• account records;

• database information;

• uploaded content;

• request and response data; and

• security information.

Email and Support Providers

We may use third-party email, support or communication providers to deliver authentication codes, respond to requests or send service communications.

Artificial-Intelligence Providers

Where an optional App feature uses a third-party AI provider, the relevant App will disclose that User Content is being transmitted and request explicit permission where required.

Insert the names of every external AI provider currently used: [INSERT AI PROVIDERS OR STATE “NONE”].

Advertising Partners

Advertising-supported Apps may use advertising networks or mediation providers.

Insert all advertising and mediation providers: [INSERT PROVIDERS].

We require service providers to process information only for legitimate and disclosed purposes and to maintain protections consistent with this Privacy Policy, applicable contracts and applicable law.

Third-party services also operate under their own privacy policies. We encourage you to review those policies.

9. App Tracking Transparency and Advertising Choices

Where an iOS App engages in tracking as defined by Apple, the App will request permission through Apple’s App Tracking Transparency framework before tracking or accessing the device’s advertising identifier.

You may deny tracking permission without losing access to the App’s core functionality.

Depending on your choice:

• personalised advertising may be disabled;

• advertisements may still be displayed;

• ads may be contextual or non-personalised; and

• limited information may still be processed for security, fraud prevention, frequency control or measurement where legally permitted.

You can review or change tracking permission through your device’s privacy settings.

Users in locations requiring advertising consent may also be shown a consent-management screen. You may be able to change your choice through the App’s privacy or consent settings.

10. Sale and Sharing of Personal Information

We do not sell personal information in exchange for money.

Some privacy laws define “sale”, “sharing” or “targeted advertising” broadly. The use of certain advertising identifiers or the disclosure of information to an advertising partner for cross-context behavioural advertising may be treated as sale or sharing under those laws.

Where legally required, eligible users may opt out through:

• the App’s privacy or consent settings;

• Apple’s App Tracking Transparency choice;

• device-level advertising settings;

• a “Privacy Choices” or “Do Not Sell or Share My Personal Information” page; or

• a request sent to our privacy contact.

Where applicable, we will recognise legally required browser-based opt-out signals for our website.

We do not knowingly sell or share the personal information of children for targeted advertising.

11. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required by law.

User Content Stored Only on the Device

User Content processed and stored only on your device remains there until you:

• delete the file;

• clear the App’s data;

• delete a project; or

• uninstall the App.

We cannot recover content that was never uploaded to us.

Uploaded or Cloud-Stored User Content

Uploaded content is retained while needed to provide the requested feature or while the relevant account or project remains active.

Temporary processing files should ordinarily be deleted after processing is completed, subject to reasonable technical, security and backup periods.

Cloud projects are deleted when you delete them or close the associated account, subject to backup deletion periods and legal obligations.

Account Information

Account information is retained while the account remains active.

Following a valid account-deletion request, we aim to remove active account information within 30 days. 

Residual copies may remain in protected backups for up to 90 days before being overwritten, unless longer retention is legally required.

Purchase Records

Transaction and subscription records may be retained for the period required for:

• entitlement validation;

• fraud prevention;

• accounting;

• taxation;

• dispute resolution; and

• legal compliance.

Analytics and Diagnostic Information

Analytics and diagnostic records are retained according to our configured provider settings and should ordinarily be retained for no longer than necessary to analyse performance and resolve problems.

Current intended maximum retention:

• analytics-level user or device information: 30;

• crash and diagnostic reports: 365; and

• aggregated or de-identified statistics: for as long as they remain reasonably useful and cannot reasonably identify an individual.

Support Communications

Support communications may be retained for up to  24 MONTHS after the request is resolved, unless a longer period is needed for a continuing dispute, fraud investigation or legal requirement.

12. Account and Data Deletion

Apps that permit account creation will provide a method for initiating deletion of the account and associated personal information.

The deletion option will normally be available in the App’s account or settings area.

Where deletion must be completed on a website, the App will provide a direct link to the relevant deletion page.

Account deletion may remove:

• profile information;

• saved cloud projects;

• uploaded User Content;

• invitations and associated data;

• account preferences; and

• other information linked to the account.

Certain information may be retained where reasonably necessary or legally required for:

• transaction records;

• fraud prevention;

• security;

• tax and accounting;

• dispute resolution; or

• compliance with legal obligations.

Deleting an account does not automatically cancel an Apple App Store or Google Play subscription. Subscriptions must be cancelled through the store through which they were purchased.

Apps that do not create or maintain accounts may not have an account-deletion function. For those Apps, local information can generally be removed by deleting saved files, clearing the App’s data or uninstalling the App.

Account-deletion page: [INSERT ACCOUNT-DELETION URL]

13. Your Privacy Rights

Depending on where you live, you may have the right to:

• know whether we process information about you;

• request access to your personal information;

• receive information about how it is used and shared;

• correct inaccurate or incomplete information;

• request deletion;

• request a portable copy;

• object to or restrict certain processing;

• withdraw consent;

• opt out of targeted advertising;

• opt out of sale or sharing;

• limit certain uses of sensitive personal information;

• appeal a decision concerning a privacy request;

• nominate another person to exercise certain rights where applicable; and

• lodge a complaint with a data-protection authority.

To exercise a privacy right, contact:

Email: irisstudio.satish@gmail.com
Subject: Privacy Request

Please state:

• the App you use;

• the right you wish to exercise;

• the account email or identifier, if applicable;

• the country or state where you live; and

• enough information for us to understand the request.

We may need to verify your identity before responding. We will request only the information reasonably necessary for verification.

Where permitted, an authorised agent may submit a request on your behalf. We may ask for proof that the agent is authorised to act for you.

We will not discriminate against you for exercising an applicable privacy right.

14. Additional Information for Users in India

Where Indian data-protection law applies, you may have rights relating to:

• access to information about processing;

• correction and updating;

• erasure;

• withdrawal of consent;

• grievance redressal; and

• nomination of another individual to exercise rights in circumstances recognised by law.

Privacy and grievance contact us via contact email mentioned below.

 

15. Additional Information for the European Economic Area and United Kingdom

Users in the European Economic Area or United Kingdom may have rights under applicable data-protection law, including access, correction, deletion, portability, restriction, objection and withdrawal of consent.

Where processing is based on legitimate interests, you may object to that processing.

Where we transfer personal information outside the European Economic Area or United Kingdom, we take reasonable steps to use recognised safeguards where required, such as contractual protections.

You may also lodge a complaint with the data-protection authority in your country. We encourage you to contact us first so that we can try to address the concern.

16. Additional Information for California Residents

Where the California Consumer Privacy Act applies to us, California residents may have the right to request:

• the categories of personal information collected;

• the sources of that information;

• the purposes for which it is used;

• the categories of recipients;

• specific pieces of personal information;

• correction of inaccurate information;

• deletion;

• opt-out of sale or sharing;

• limitation of certain uses of sensitive personal information; and

• freedom from discriminatory treatment.

The categories described in this Privacy Policy may include identifiers, internet or network activity, commercial information, approximate location, user content and inferences based on App activity.

We do not sell personal information for money. Advertising disclosures that may legally constitute “sharing” are addressed in Section 10.

17. Children’s Privacy

Our general-audience Apps are not directed primarily to children under the age of 13.

We do not knowingly collect personal information online from a child under 13 without appropriate parental consent where such consent is required.

Where Indian law applies, additional requirements may apply to processing personal information relating to a person under 18.

If an App is specifically offered in Apple’s Kids Category or is otherwise directed to children, it will use a separate child-appropriate privacy notice and will follow the applicable restrictions on advertising, analytics, collection and parental consent.

If you believe that a child has provided personal information without the required permission, contact us. We will investigate and delete the information where appropriate.

18. Security

We use reasonable administrative, technical and organisational safeguards designed to protect information against:

• unauthorised access;

• accidental loss;

• improper disclosure;

• alteration;

• misuse; and

• destruction.

Measures may include access controls, encryption in transit, protected credentials, restricted administrative access, backups, monitoring and software updates.

No electronic transmission or storage system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered or destroyed despite our safeguards.

Users are responsible for protecting their account credentials and maintaining backups of important original files.

19. International Processing and Transfers

We are based in India, and our service providers may process information in India, the United States, the European Economic Area or other countries where they operate.

Privacy and data-protection laws may differ between countries.

Where legally required, we take reasonable steps to use appropriate contractual, technical or organisational safeguards for international transfers.

20. Public and User-Directed Sharing

Some Apps allow users to create links, invitations, designs, events or other content intended to be shared.

Information you intentionally make available through a public or shareable link may be viewed, copied, forwarded or saved by other people.

We cannot control how another person uses information after you intentionally share it with them. Review the content and recipients carefully before sharing.

21. Third-Party Websites and Services

Our Apps or website may contain links to third-party websites, advertisements, services or applications.

We do not control the privacy practices of independent third parties. Their collection and use of information are governed by their own privacy policies.

A link does not mean that we endorse or control the third party.

22. Notifications and Marketing

An App may request permission to send push notifications for service updates, processing completion, account activity, reminders or other App-related messages.

You can disable push notifications through your device settings.

We will send promotional email or marketing communications only where permitted. You may unsubscribe using the method provided in the communication or by contacting us.

Service-related communications, such as security, subscription, account or support notices, may still be sent where necessary.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• new App features;

• changes to our data practices;

• new service providers;

• legal or regulatory requirements;

• security improvements; or

• changes to App Store or platform requirements.

The updated policy will be posted with a revised “Last updated” date.

Where required by law, we will provide additional notice or request renewed consent before applying a material change.

24. Contact and Complaints

For privacy questions, complaints or requests, contact:

Iris Studio and Services
Attention: Privacy and Grievance Contact
Email: irisstudio.satish@gmail.com
Address: Spaze Itech park Sohana Road Sector 49 Gurgaon Haryana 122018 India
 

Please include the name of the App concerned and enough information for us to understand your request.

We will acknowledge and respond to privacy requests within the period required by applicable law.