Privacy Policy
This Privacy Policy explains how DVOLV AI (SMC-PRIVATE) LIMITED ("Altr," "we," "us") handles information when you use the Altr website and web app and our mobile applications (together, the "App"). We do not sell your data.
1. Accounts and sign-in
You can browse Altr without an account. To generate or edit images, or to buy credits or a subscription, you sign in with email and password, Google, or Apple through Firebase Authentication. Signing in links your credits, purchases and history to your account so they follow you across devices. We never receive or store your password: authentication is handled by Firebase, Google and Apple.
2. Information we handle
Account data. When you sign in we receive a verified login token containing a unique account identifier and, depending on your sign-in method, your email address and display name. We read your email from the token to identify you when you use our API.
Images and prompts. The images you upload and the prompts you write are sent over encrypted HTTPS to our servers and to our AI processing providers to perform the task you asked for. Source images are used only to fulfil your request. Results (Generations) are saved to your Creations history so you can view, download and delete them; deleting a Generation removes it from your history. We do not sell your images and we do not use them to train AI models.
No biometric data. Altr does not run facial recognition and does not collect, map or retain biometric identifiers or facial geometry. Images are processed as flat pixel data solely to apply the transformation you request.
Account records. We store the minimum needed to run the service: your account identifier, credit balance, subscription status (tier, expiry, store of purchase), a ledger of credit transactions, and the purchase and transaction identifiers linked to your payments. We use these to credit your account correctly, prevent duplicate crediting and fraud, and handle refunds.
Feedback and reports. If you send feedback or report an image, we store what you submit (including any message you write) so we can review it.
Usage analytics and device data. On the web we may use Firebase Analytics to understand which features are used (for example, that a job was submitted or completed). We do not collect advertising IDs or precise location. Your browser stores some data locally on your device (for example, your theme choice, whether you have seen the welcome screens, in-progress job IDs and draft inputs) and it can be cleared in your browser settings.
Notifications. If you allow browser notifications, we use Firebase Cloud Messaging and a device token to tell you when your image is ready. You can turn this off in your browser at any time.
3. Payments, subscriptions and credits
Web purchases are handled by our Merchant of Record, Paddle.com Market Limited and its affiliates ("Paddle"). Paddle collects and processes your payment details, name, email, billing address and tax information, and acts as an independent controller under its own privacy policy. We never receive or store your full card or bank details. Paddle shares with us the details we need to deliver your purchase, such as the product, transaction and customer identifiers, amounts, and renewal and expiry dates.
App purchases are handled entirely by the Apple App Store or Google Play.
Our subscription provider, RevenueCat, manages entitlements across web and mobile and sends us purchase details (product, transaction identifiers, purchase, renewal and expiry timestamps). We link these to your account so that credits and Pro status are applied correctly, purchases are not credited twice, and refunds or chargebacks revoke the matching credits and access.
4. Service providers
- Firebase (Google): sign-in, remote configuration, analytics, push notifications and feedback storage.
- Paddle: payment processing, tax and invoicing for web purchases (Merchant of Record).
- RevenueCat: purchase and subscription management.
- Apple App Store and Google Play: payment processing for mobile purchases.
- Cloud AI and storage providers (for example DigitalOcean Spaces and Kie.ai): image generation, editing, background removal, upscaling and storage. We require them to treat your data confidentially and not use it for their own purposes.
We do not share your images or personal data with data brokers or advertisers. We may disclose information if required by law.
5. Security
Data is encrypted in transit (HTTPS/TLS) and stored with access controls on our servers. Payment data is held by Paddle, Apple or Google, not by us. No method of transmission or storage is completely secure, but we work to protect your information.
6. Children
Altr is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will remove it.
7. Your rights and choices
You can sign out, delete individual Generations, and ask us to access, correct or delete the account and purchase records we hold about you, or to stop a specific kind of processing, by emailing support@dvolvai.com. We will respond within a reasonable time. Deleting account records does not undo payments already processed by Paddle, Apple or Google. You may also have additional rights under the law where you live.
8. Changes to this policy
We may update this Privacy Policy. Changes will be posted here with a new "Last updated" date, and continued use of the App after a change means you accept the updated policy.
9. Contact
support@dvolvai.com
DVOLV AI (SMC-PRIVATE) LIMITED, Office no. 26, 3rd Floor, Silver City Plaza, G11 Markaz, Islamabad, Pakistan