This Policy explains how AutoLab AI processes photos, AI instructions, anonymous identifiers, and subscription information when you create car visualization concepts.

Effective: 15 July 2026

AI processing notice. AutoLab AI sends the photo and generation instructions you choose to Google Firebase and OpenAI solely to produce and deliver the requested result. The app asks for your explicit consent before the first AI submission.

1. Scope and operatorThis Privacy Policy applies to AutoLab AI, an iOS application operated by Hopefy Tech ("AutoLab AI," "we," "us," or "our"). AutoLab AI lets you select or capture a vehicle photograph and request an AI-generated visualization of paint, wraps, wheels, lighting, body components, window tint, carbon-fiber details, or interior modifications.
Hopefy Tech is the controller of information handled for AutoLab AI, except where a service provider acts as an independent controller under applicable law.

2. Information we process

Information contained in a photo
A photo may incidentally contain a face, license plate, location clue, property, or other personal information. Only upload content you are authorized to use. Avoid submitting sensitive or confidential information that is unnecessary for the requested vehicle visualization.

Information we do not request
AutoLab AI does not require a profile, contacts, precise location, advertising identifier, or payment-card number. We do not use advertising SDKs and do not track you across apps or websites owned by other companies.

3. How we use information
To create, process, recover, download, and display the AI visualization you request.
To keep the vehicle identity, image composition, and requested modification parameters associated with the correct generation job.
To provide one eligible free Paint generation and verify Premium entitlements.
To maintain a protected local Garage when you explicitly save a build.
To secure the service, enforce reasonable technical safeguards, investigate errors, and prevent fraud or abuse.
To process data-deletion requests and respond to support or legal requests.
Where applicable, we rely on performance of the service you request, your consent for AI processing, our legitimate interests in operating and securing AutoLab AI, and compliance with legal obligations. You may withdraw consent for future AI submissions by not submitting additional photos or instructions. Use Settings → Delete my data to request deletion of existing AutoLab AI data.

4. AI and third-party processing
AI generation cannot occur entirely on the device. When you start a generation, AutoLab AI temporarily uploads a resized version of the selected photo and the requested modification instructions to private Google Firebase infrastructure. Our Google Cloud Function sends the photo and server-controlled instructions to the OpenAI API to create the result.

OpenAI receives the submitted image and instructions as an API service provider. According to OpenAI's published API data controls, API inputs and outputs are not used to train OpenAI models by default unless the API customer explicitly opts in. OpenAI may retain abuse-monitoring logs containing customer content for up to 30 days by default, unless a different approved retention control applies or longer retention is legally required. See OpenAI API data controls.

AI results are probabilistic. They may be inaccurate, may not precisely match a preview or prompt, and may contain unexpected artifacts. AutoLab AI does not use your photos or generated images to create a public gallery or a cloud Garage.

5. Storage and retentionLocal storageThe app may keep protected local copies of a pending source photo, request information, status, errors, and downloaded result so an interrupted generation can recover safely. Pending data remains until the flow completes and is closed, you retry or discard it, you use Delete my data, or you remove the app and its data. A build enters your Garage only when you tap Save to Garage. Garage originals, results, and build details remain in the app's local storage and are excluded from AutoLab AI's cloud history until you remove them.
Temporary cloud storageThe resized source JPEG, generated JPEG, generation instructions, and limited job record are temporary. The source is normally deleted after processing. After the app safely caches the result, it acknowledges delivery so the cloud source, result, and job record can be deleted. Job-associated artifacts are scheduled for cleanup after their 24-hour expiry. Storage lifecycle controls may remove orphaned temporary files after they become one day old; actual provider cleanup can occur later because scheduled and lifecycle operations are not instantaneous.
Operational recordsMinimal anonymous operational metadata, including entitlement, free-use, rate, concurrency, security, and webhook state, may remain while you use the service and as reasonably necessary to operate it, enforce rights, prevent fraud, resolve disputes, or comply with law. Google Cloud, OpenAI, RevenueCat, Apple, and support-email providers may separately retain security, billing, transaction, abuse-monitoring, diagnostic, or legal records under their own retention rules.
Delete My DataSettings → Delete my data requests deletion of the local Garage, local pending-generation data, temporary cloud generation artifacts, operational profile, Firebase anonymous account, and linked RevenueCat customer record. A limited deletion marker containing the former anonymous identifier and deletion timestamps may be retained solely to prevent late subscription webhooks or retries from recreating deleted records. It does not contain photos, prompts, generated images, Garage data, or profile information. This control cannot delete records that Apple or another provider must retain independently for transactions, security, abuse prevention, or legal compliance.
If you continue using AutoLab AI after deletion, the app may create a new anonymous identifier for new requests. Deleting AutoLab AI data does not cancel an active App Store subscription; subscription billing must be managed separately through Apple.
6. Sharing and disclosureWe do not sell personal information, share it for cross-context behavioral advertising, or use it for third-party advertising. We disclose information only as described below:
Google Firebase and Google Cloud: anonymous authentication, App Check, private generation storage, job state, Cloud Functions, scheduled cleanup, and service security.OpenAI: processing the selected image and instructions to generate a requested visualization.RevenueCat: subscription product, entitlement, purchase, renewal, restore, and customer-deletion handling.Apple: App Store distribution, in-app purchases, subscription management, refunds, App Attest, and device permission controls.Legal and safety: when reasonably necessary to comply with law, enforce our terms, protect rights and safety, investigate abuse, or respond to valid legal process.Business transfer: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate notice and safeguards required by law.When you use the iOS Share Sheet, the exported result is provided to the destination you choose. That destination's privacy practices apply after the transfer.
7. Permissions and choicesPhotos: you choose which photo to provide. iOS may allow limited-library access.Camera: used only when you choose to capture a new photo.AI consent: the app explains third-party AI processing and requests consent before the first AI submission.Garage: saving is optional, and saved builds can be removed locally.Subscriptions: purchase and restore are optional and handled through Apple and RevenueCat.Deletion: use the in-app deletion control or contact us for assistance.You can change camera and photo-library permissions at any time in iOS Settings. Disabling a permission may limit the related feature but does not remove information already submitted; use the deletion control for that purpose.
8. Your privacy rightsDepending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to appeal certain decisions or complain to a data-protection authority. California residents may also request information about categories of personal information collected and disclosed. AutoLab AI does not sell or share personal information as those terms are defined by California privacy law.
Because AutoLab AI uses an anonymous identifier rather than a conventional profile, we may need information from your current app installation to verify and fulfill a request. We will not discriminate against you for exercising applicable privacy rights. Contact .hcet.yfepoh%40troppus
9. Security and international transfersWe use encrypted network transport, owner-scoped authentication, Firebase App Check, Apple App Attest where available, restricted database and storage rules, short-lived delivery paths, server-side secrets, and automatic cleanup. No electronic service can guarantee absolute security.
Hopefy Tech and its service providers may process information in the United States and other countries. Where required, transfers are handled using legally recognized safeguards and provider contractual protections.
10. Children and familiesAutoLab AI has a 4+ App Store content rating and is suitable for a general audience, including families. A child who is not legally able to consent to data processing in their country may use AutoLab AI only with authorization and supervision from a parent or legal guardian. The parent or guardian must review this Policy, approve the photo and AI processing, and approve any subscription purchase.
AutoLab AI does not ask for a child's name, date of birth, precise location, contacts, advertising identifier, or profile. It processes only the photo, instructions, anonymous identifier, subscription state, and limited technical information described in this Policy. A parent or guardian can use Settings → Delete my data or contact us at hcet.yfepoh%40troppus to request deletion.
11. Changes to this PolicyWe may update this Privacy Policy to reflect changes to AutoLab AI, its service providers, or legal requirements. We will update the effective date and provide additional notice when required. Continued use after an update is subject to the revised Policy, but we will request new consent where required by law.
12. ContactHopefy TechEmail: hcet.yfepoh%40troppus