Privacy Policy

Data we collect

We only process what is needed to provide the service:

• Account details: name, e-mail address, hashed password, chosen avatar and app language.
• Sign-in with Google or Facebook: the account ID, name and e-mail address that service sends us. We never see your password; you can remove linked accounts in the app at any time.
• Usage data: favourites, reactions, auto-rotation list, nCoin activity and purchase records.
• AI Studio: the descriptions (prompts) you write, any reference image you choose and the generated images.
• Technical data: IP address, sign-in time and device type (for security notices and abuse prevention).
• Reports and feedback: when you report content or write to us, the reason you pick, your description, up to 3 screenshots you add, the device model and system version, and, if you want a reply, your e-mail address. Wallpapers and categories you hide are kept on your account or device.
• Advertising: for free users, Google AdMob may process data such as the advertising ID, depending on your consent.
• App statistics and crash reports: Firebase Analytics records which screens and features are used; Firebase Crashlytics records the device model, system version and error details when the app crashes.

Why we use it

To run your account, deliver wallpapers and AI creations, verify purchases and Pro membership, send security notices (e.g. new sign-in, password change), prevent fraud and improve the app.

Service providers we share with

We do not sell your data. We share only what is necessary with these providers:

• Google Play and RevenueCat: subscriptions and in-app purchases.
• Google and Meta (Facebook): only if you choose to sign in with them, to verify the sign-in. The Facebook SDK is used in the app for sign-in only; automatic app events and advertising ID collection are turned off.
• Google AdMob: ads and rewarded-ad verification (Pro members see no ads).
• Google Firebase: notifications (Cloud Messaging), usage statistics (Analytics) and crash reports (Crashlytics).
• fal.ai: AI Studio image generation (only the prompt and reference image are sent).
• OpenRouter and the AI model providers it uses (e.g. Google): AI Studio content checks (only the prompt and image are sent, not your name or e-mail address).
• Cloudflare: content and image storage and delivery.
• E-mail service provider: sending verification, password and notification e-mails.

AI Studio content checks

To keep AI Studio safe and in line with app store rules, the descriptions you write, the images you add and the generated images are checked against our content rules. These checks are made by automated AI systems; our authorized administrators may also view this content when needed, in particular to look into a report or suspicious content. Requests and images that break the rules are blocked, and generated images may be removed. You see only a blurred copy of a removed image and can appeal within 7 days; during that time the original is kept for review only, then deleted completely. Your creations are not shown to other users.

Retention

Your data is kept while your account is open. When you delete your account, your account data and AI creations are permanently deleted after a 7-day grace period. Purchase records held by stores and payment providers are subject to their policies. If an account is permanently banned for serious breaches of our rules, its e-mail address, linked Google and Facebook account IDs and device IDs are kept as irreversible hashes, even after the account is deleted, to prevent it from signing up again.

Security

Passwords are stored with one-way hashing, connections are protected with HTTPS and session keys are kept in secure storage on your device. No system is risk-free; tell us right away if you notice anything suspicious.

Your rights

You have the right to access, correct and delete your data and to object to its processing (including your rights under the GDPR and Turkey’s KVKK). You can edit your details and delete your account in the app, or write to destek@wallnivo.com.

Children

Wallnivo is not directed at children under 13 and we do not knowingly collect data from them.

Changes and contact

We may update this policy and will announce significant changes in the app or by e-mail. Questions: destek@wallnivo.com