PicElite Privacy Policy
1. Who operates PicElite
PicElite is operated under the business name FZL Labs by a sole proprietor based in Thrissur, Kerala, India.
Privacy, support, deletion, and grievance contact:
picelite.in@gmail.com
This Privacy Policy explains how PicElite collects, uses, shares, protects, and deletes personal data when you use PicElite.
2. Information we process
Depending on how you use PicElite, we may process the following information.
Account information
For registered Consumer accounts this may include:
- Name;
- canonical Username;
- Firebase Authentication UID;
- an internal Firebase Authentication identifier derived from the canonical Username;
- authentication/session state;
- account status information; and
- applicable legal-acceptance records.
The internal Firebase Authentication identifier is a system identifier used for Username/Password authentication. It is not the Consumer's contact email address.
Current Consumer registration and sign-in do not require a user-provided email address, Phone OTP, email verification, or Google Consumer sign-in.
Passwords are handled by Firebase Authentication and are not intended to be stored in PicElite's ordinary Firestore data, product analytics, logs, or documentation.
Registered profile
Registered users provide:
- date of birth; and
- sex.
Date of birth is used to apply PicElite's requirement that registered users are 18 or older.
PicElite does not use date of birth or sex for advertising, content ranking, search ranking, or product analytics.
Regional information
PicElite may process:
- country; and
- optional state or region.
You may choose a region manually. Where you permit approximate foreground location access, PicElite may also use a temporary location result to derive country and state or region.
PicElite does not use background location or maintain precise-location history. Latitude and longitude used for regional derivation are discarded after the coarse region is derived.
Activity and requests
Depending on the feature, PicElite may process information such as:
- models you save;
- reports you submit;
- legal acceptance records;
- support or privacy requests; and
- account-deletion information.
Technical information
PicElite and its service providers may process limited technical information needed to operate, secure, diagnose, measure, or advertise the service. This may include app or device identifiers, app version, operating system, IP/network information, crash or performance information, security events, and advertising-related information where permitted.
Product analytics and measurement
PicElite uses approved privacy-safe product Analytics as normal operational measurement for guest and registered application usage.
The normal Consumer Settings UI does not provide a general Usage Analytics on/off switch.
On Android, when Google Mobile Ads is active, Firebase Analytics collection starts disabled until the applicable Google UMP / Consent Mode privacy boundary has been resolved.
Where applicable provider privacy or consent authority limits or denies Analytics storage, PicElite preserves that real state and does not convert a denial into a grant.
Outside applicable consent requirements, approved product Analytics may collect automatically.
Product functionality, account access, Saved, For You personalization, and protected prompt delivery do not depend on Analytics being available.
PicElite product Analytics must not contain protected prompt text, raw Search queries, passwords or authentication credentials, App Check material, precise coordinates, DOB, sex, private-profile values, Consumer contact email, For You interest terms or weights, or copied-model recommendation history.
Applicable Analytics/provider processing may include approved lifecycle and app interaction events, app-instance or similar installation identifiers, device and operating-system information, and coarse geographic information derived from permitted general-location signals such as masked IP.
Protected prompt-copy advertising and verification
PicElite may use Google AdMob Rewarded Ads for protected prompt-copy operations.
A protected prompt is not released merely because the client reports that an advertisement was shown or that a reward callback occurred.
Protected prompt release remains backend-authoritative and requires the applicable Google server-side verification plus PicElite's other required security and account checks.
Rewarded verification provides only one-time continuation of the current protected-copy operation. It does not create points, credits, balances, payments, wallets, permanent prompt unlocks, reusable entitlements, or an advertisement-free right.
3. How we use information
We use personal data for purposes such as:
- creating and securing registered accounts;
- confirming age eligibility;
- providing saved models and protected prompt access;
- providing search and other app features;
- applying coarse regional context;
- preventing fraud, abuse, and unauthorized access;
- responding to reports, support, privacy, or legal requests;
- operating account deletion;
- complying with applicable law;
- diagnosing and improving PicElite; and
- providing and measuring advertising where permitted.
Legal acceptance is separate from advertising consent.
PicElite does not intentionally place passwords, authentication tokens, protected prompt text, date of birth, sex, precise location, or clipboard contents in ordinary product analytics.
4. Advertising and service providers
PicElite is advertisement-supported.
PicElite uses Google and Firebase services for functions such as authentication, data storage and delivery, security, diagnostics, analytics, and advertising.
Advertising services may include Google AdMob. Google User Messaging Platform may be used to manage advertising privacy choices where required.
These providers may process technical, device, diagnostic, usage, authentication, network, or advertising information as necessary to provide their services and under their own privacy terms.
PicElite does not sell personal or sensitive user data for monetary consideration.
5. Sharing and international processing
Personal data may be made available to:
- service providers used to operate PicElite;
- advertising providers where advertising is legally permitted;
- authorities where disclosure is legally required; or
- parties reasonably necessary to protect PicElite, users, or legal rights.
Technology and cloud providers may process information in countries other than your own, subject to applicable law and their safeguards.
Your private account information, date of birth, sex, saved models, private reports, and protected prompts are not intended to be publicly displayed.
6. External apps and websites
PicElite may allow you to open an external AI service or another third-party website or application.
If you paste a prompt or provide other information to an external service, that service processes the information under its own privacy policy.
PicElite does not control the data practices of independent external services.
7. Retention and account deletion
PicElite keeps personal data only for as long as reasonably necessary for the purpose for which it was collected, security, dispute handling, or applicable legal requirements.
Ordinary account information, private profile data, and account-owned saved models are intended to be deleted through the account-deletion process unless limited retention is legally permitted or required.
Some minimized legal, privacy, security, dispute, or compliance records may be retained for a defined period where necessary. Certain such records may be retained for up to three years, or longer where applicable law or a valid legal hold requires it.
Precise latitude and longitude used only to derive a coarse region are discarded after that derivation.
Service-provider-controlled information may follow the provider's own retention periods.
Registered users can request account deletion using PicElite's in-app account settings. PicElite also provides a public Account Deletion page for an external deletion request route.
Deleting an account is intended to delete the account and associated ordinary user data, not merely disable access.
8. Security and your choices
PicElite uses reasonable technical and organizational safeguards designed to protect personal data. No system can guarantee absolute security.
Depending on applicable law, you may have rights to request information, access, correction, deletion, withdrawal of consent where applicable, or to raise a privacy complaint.
Supported profile information may be updated through PicElite where that feature is available.
Advertising privacy options may be presented when required by law or the advertising provider.
Registered PicElite accounts are intended only for users aged 18 or older.
9. Changes and contact
We may update this Privacy Policy when PicElite's services, providers, data practices, or legal obligations materially change.
Where required, we will provide appropriate notice or request a new legal acknowledgement or consent.
For privacy questions, correction, deletion, or complaints, contact:
FZL Labs
Thrissur, Kerala, India
picelite.in@gmail.com