Information you provide
- Creation content: sketches, annotations, prompts, notes, selected options, reference photos, and other content you choose to submit.
- Generated content: stickers and refinements returned from the generation service.
- Optional account data: when you choose Apple or Google sign-in, Pixora receives an account identifier and may receive your name and email address. Google may also provide a profile-photo URL, which Pixora stores with the account and account analytics record. Apple may provide a private relay address when you choose Hide My Email.
- Support messages: information you include when emailing Pixora Support.
- Optional physical orders: the stickers you select, your name, shipping address, email address, optional phone number, order amount and status, and shipment tracking information.
Automatically processed information
If you turn on Share usage analytics in Pixora > Settings > Privacy, Pixora records optional feature and activity reports. These can include sign-in and session events, image generation or refinement, collection sends, feature or tool use, installation/session identifiers, foreground activity, screens viewed and time on screens, creation and local-save outcomes, share-sheet completion/cancellation/error outcomes, Messages-composer insertion outcomes, return visits, the app surface and version, and a device-reported saved-sticker count. These optional reports do not include artwork, prompts, message content, recipients, or the destination app selected in the share sheet. Journey events are retained for up to 90 days; a small first-local-creation marker remains until deletion. An on-device retry queue retains up to 250 events for 48 hours and is cleared when you turn reporting off. Reports may link to your Pixora account when you are signed in. This choice is off by default and applies to Pixora and its Messages extension on this device. Turn it off at any time to stop future optional reports; it does not affect creating stickers, purchases, or account access. Pixora separately processes the account, purchase, generation-job, security, and service records needed to provide the features you request.
If you enable image-ready notifications, Pixora includes an Apple Push Notification service (APNs) device token with a generation request so it can ask APNs to deliver the result notification.
Pixora stores a random guest identifier in shared Keychain storage so the app and iMessage extension can apply the same free-credit balance. The generation service uses a one-way derived identifier for that balance and temporary job reservations. Separate activity reporting may use installation and session identifiers as described above. These identifiers are not used for advertising or cross-app tracking.
When you make a generation request, the server converts the client IP address to a one-way hash and can keep that rate-limit record for up to 15 minutes. Pixora's hosting providers process requests and retain request metadata such as request ID, path and search parameters, user agent, status, and timing in runtime logs used to operate and debug the service.
Purchases, credits, and Pixora Plus
Pixora offers optional consumable credit packs and an optional auto-renewable Pixora Plus subscription through Apple's In-App Purchase system. Apple, not Pixora, processes App Store billing. Pixora does not receive or store your payment-card number, Apple Account password, or full billing information.
To verify and provide a purchase, Pixora processes StoreKit-signed transaction and entitlement data, such as product and transaction identifiers, an app-specific account token, and purchase, expiration, renewal, revocation, and refund-status information. Pixora uses this information to apply a credit pack, provide and restore Pixora Plus access and its included allowance, prevent a transaction from being replayed, and respond to verified refund, revocation, and refund-reversal notices.
Credit packs are consumable and can be purchased with a guest or signed-in Pixora balance. Pixora uses verified transaction records to deliver credits, prevent duplicate delivery, reconcile refunds, and measure purchase outcomes. Pixora Plus, where offered, is an auto-renewable subscription; its current price, billing period, and included allowance are shown by Apple before purchase. You can restore eligible purchases or manage and cancel Pixora Plus through Apple's subscription controls from Pixora. Deleting a Pixora account disables its Pixora entitlements but does not cancel Apple billing or an App Store subscription.
Physical sticker-sheet orders
If you choose to order a physical sheet, Pixora uploads the selected stickers to private storage, combines them into a print-ready sheet, safety-checks the sheet, and calculates Pixora's current item and shipping price. Stripe hosts checkout and processes card or Apple Pay payment information. After Stripe confirms payment through a signed webhook, Pixora places the print file and delivery details in a private fulfillment queue so Pixora can print and ship the order directly. Pixora does not receive your full payment-card number and does not use your shipping address for advertising or tracking.
The physical purchase is separate from Pixora coins, subscriptions, and Apple's In-App Purchase system.
How Pixora uses information
- Generate, moderate, refine, save, sync, and deliver stickers you request.
- Authenticate optional accounts and synchronize account collections.
- Send image-ready notifications when enabled.
- Measure existing feature and service use, prevent abuse, enforce request limits, and apply, restore, revoke, or reinstate credits and Pixora Plus access when verified purchase status changes.
- Quote, charge for, manufacture, deliver, support, and provide tracking for optional physical sticker-sheet orders.
- Respond to support, privacy, and deletion requests.
AI processing and service providers
Pixora sends the content required for a generation or refinement to Pixora's servers. Those servers send the submitted prompt and image content to OpenAI for safety moderation and image generation. By submitting a photo, image, sketch, message, or other content, you represent that you have the rights and permissions needed to use it for the requested generation or refinement. Do not submit sensitive personal information or content that violates another person's intellectual-property, privacy, or publicity rights.
Under OpenAI's standard API data controls, abuse-monitoring logs may contain submitted content and metadata derived from it and may be retained for up to 30 days (or longer when legally required). Pixora's production account may use different approved data controls; the periods below describe Pixora's own application records.
Pixora uses service providers to operate app functionality:
- OpenAI for content moderation and image generation.
- Hosting providers to process generation and other app requests and handle the content and request metadata needed to run, secure, and troubleshoot the service.
- Database and temporary-storage providers to store generation jobs and outputs, credit balances, subscription entitlements, and account records so Pixora can deliver results and maintain access to purchased features.
- Cloud-storage providers to store generated stickers and collection metadata you choose to synchronize with an account, and private sticker and print files used to prepare and fulfill optional physical orders.
- Stripe for secure card and Apple Pay checkout for optional physical products.
- Apple and Google for optional authentication; Apple also processes App Store billing, provides StoreKit purchase and entitlement records, and provides push notifications.
The release build does not include social features, advertising features, or third-party advertising SDKs. Pixora does not use the data described here to track you across other companies' apps or websites for targeted advertising or advertising measurement. Information may also be disclosed when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.
On-device storage and sharing
Drafts, stickers, and history are stored locally on your device and in the shared App Group used by the Pixora iOS app and iMessage extension. The APNs notification token and a random guest credit identifier are stored in shared Keychain items. They remain until you delete them, delete your account through Pixora, or remove the app and its data. Pixora accesses the camera or photo library only after you choose the related feature and iOS grants permission. A sticker leaves Pixora through Messages, Photos, or the share sheet only when you choose to send, save, or share it.
Retention and deletion
- Temporary generation jobs: Pixora stores a job's status and generated output for up to six hours, then expires it automatically. Submitted prompts, sketches, and reference photos are forwarded for processing and are not intentionally added to your Pixora cloud collection.
- Rate limiting: the generation server retains a one-way hash of the client IP address in temporary service storage for up to 15 minutes.
- Credits, purchases, and subscriptions: the service keeps a pseudonymous guest or account credit balance and job reservation state while the balance can be used. Credit-pack balances remain available until used, revoked, or the relevant account is deleted; Pixora Plus entitlement records and allowance balances remain available until they expire, are revoked, or the account is deleted. Pixora retains minimal non-content transaction, entitlement, refund, and idempotency records after account deletion only as needed to prevent a purchase from being replayed, process verified App Store status changes, and meet legal obligations.
- Runtime logs: Hosting providers retain runtime-log request metadata for a configuration-dependent period, ranging from one hour to three days for standard logs or up to 30 days with extended logging. If logs are exported to a logging service, that service's configured retention settings apply.
- Local content: retained on your device until you delete it, delete your Pixora account, or remove Pixora data from the device.
- Cloud collection: account-synced stickers and associated metadata remain until you delete an item or delete your Pixora account.
- Account and analytics records: account profiles and existing account-linked analytics remain until account deletion. Previously collected detailed usage records expire after up to 90 days; activity summaries may remain until the associated account is deleted or you request deletion. Active sessions are invalidated when you sign out or delete your account.
- Support messages: Pixora may retain support correspondence as needed to respond to a request, protect the service, or meet legal obligations.
- Physical orders: encrypted Pixora delivery and tracking records are configured to expire from active application storage after 90 days. Private print files should be removed by the storage bucket's 90-day lifecycle rule. Limited transaction or fulfillment records may be retained longer for taxes, accounting, fraud prevention, refunds, chargebacks, or other legal obligations. Stripe applies its own retention policies to payment records.
You can permanently delete your Pixora profile, cloud stickers, account-linked analytics, and active sessions from Pixora > Settings > Account > Delete account. Pixora makes remaining account credits and Pixora Plus access unusable and clears its local drafts and stickers on that device. For an account created with Sign in with Apple, Pixora also revokes its stored Apple authorization before deleting the account. It retains only minimal non-content purchase records when necessary to prevent a consumed App Store purchase from being credited again or to process verified App Store status changes. Deleting Pixora does not delete your Apple Account or Google Account, and it does not cancel an App Store subscription or stop Apple billing; manage or cancel Pixora Plus separately through Apple's subscription controls. For a privacy request or help with an account you cannot access, email 1andrewh000111@gmail.com.
Deleting an account or the app does not cancel a physical order that has already been paid for or entered production. Contact Pixora Support for delivery, reprint, refund, or privacy help with an order.
Your choices
You may use core local creation features without an account. Optional usage reporting is off until you enable Share usage analytics in Settings > Privacy. You can withdraw that choice there at any time. For deletion of earlier reports, use the privacy contact below. You can decline camera, photo-library, or notification permissions; disable notifications in Pixora or iOS Settings; withdraw AI-processing consent in Pixora Settings; sign out of cloud sync; delete individual content; or delete your account. You can restore eligible App Store purchases and manage or cancel Pixora Plus through Apple's subscription controls. Withdrawing AI consent prevents new generations and refinements but does not delete existing stickers.
Children
Pixora is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
Security and international processing
Pixora uses reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Information may be processed in the United States or other locations where Pixora's providers operate, subject to applicable safeguards.
Changes to this policy
We may update this policy as Pixora changes. The effective date above will be revised when material changes are published.