Privacy and personal data
How your data is used and protected.
Data controller
PrankX is operated by Kevan Alliaume. For questions about your data, email support@prankx.app.
Account, photos and creations
PrankX processes your email address, account identifier, sign-in method and, if provided, your name. Selected photos, optional face references, instructions and generated images are used for content safety checks, the creation you request and your history. PrankX does not build biometric profiles, identify people from faces or use your photos to target advertising.
Creation and hosting providers
Supabase provides authentication, the database, private storage and server processing. Depending on the workflow, Google Cloud Vision, OpenAI, Gemini and Replicate/Nano Banana Pro assist with validation or generation. Data sent to these providers and their retention depend on their role, terms and service settings. PrankX does not train its own models on your photos. Deletion by a provider does not automatically delete copies in your PrankX history.
Rewarded advertising and consent
Rewarded ads use Google AdMob. Its SDK may transmit IP addresses, approximate location derived from IP, device identifiers, interactions and diagnostics to provide ads, measure their operation and prevent fraud. An account identifier and session information allow server verification and allocation of the reward. Google UMP handles applicable consent requests; advertising privacy choices are available in Profile when required by Google. Non-personalized ads may also require technical data. Watching an ad is optional.
Purchases, credits and subscriptions
Apple and Google process payments. PrankX keeps transaction references and proofs, subscription status and credit movements to verify purchases, restore access, apply refunds and prevent abuse. PrankX does not collect your payment card number. Finite plans and purchased credit packs are tracked separately; store refund decisions follow each store’s procedures.
Retention, security and rights
Account information, photos and history are retained to provide the service. Some unused source images may be cleaned up to limit storage. Backups and certain purchase, security or dispute records may require separate retention. Data is not automatically deleted within 90 days. You can request access, correction, a copy or deletion at support@prankx.app using your account email and specifying the affected data. Identity verification may be required. The current deletion button opens an email request and disconnects the device; it does not immediately delete the server account. Subscriptions must also be canceled in the store. In the EEA, you may contact your data protection authority. Some providers may process data outside your country; contact us for details of applicable transfers and safeguards.