Privacy policy

Last updated: September 7, 2026

This policy explains what data Vignette collects, how it is used and protected, and the rights you have. The data controller is Psartech, the publisher of Vignette.

Data we collect

• Account: a stable Apple identifier via Sign in with Apple, your email address on first login, and a record of our invitations to rate the app (date and version; your rating itself is never shared with us). No password.
• Photos: the photos you import to generate your portraits.
• Generated portraits: the images created, including the versions offered for your choice with their previews and thumbnails, stored in your account.
• Purchases: a record of your credit purchases (Apple transaction identifier). Payment data is handled by Apple; we never have access to it.
• Paper prints: if you order a print, the order record (format, amount, status). Card payment is handled by Stripe; your shipping address is entered on the Stripe payment page and passed to the print lab for delivery, we do not keep it in our systems.
• Notifications: if you choose to receive notifications, the technical token Apple provides to reach your device, along with the device language. It is deleted when you sign out or delete your account.
• Technical data: minimal logs required for operation and security.

Your photos: processing and deletion

The photos you import are sent to our AI provider to generate the requested portrait, then deleted after processing. The generated portraits are kept in your account (and served through temporary signed links) until you delete them or delete your account. Each generation produces several versions: the ones you do not keep are deleted as soon as you choose, or automatically after seven days (the first version is then kept).

How we use your data

• Generate your portraits from your photos.
• Manage your account, your credit balance and your purchases.
• Keep the service secure and running properly.

We do not run targeted advertising and we do not sell your data.

Legal basis (GDPR)

• Performance of the contract: providing the requested service.
• Consent: the processing of your photos, collected when you accept this policy at sign-up.

Sharing with third parties (processors)

We rely on providers that process data on our behalf, solely to deliver the service:

• Apple: authentication, in-app payments and delivery of notifications to your device.
• Google: image generation (Gemini model), called through Vercel's AI gateway.
• Vercel: hosting, image storage, processing queues.
• Neon: database.
• Stripe: card payments for paper prints.
• Prodigi: printing and shipping of your prints (receives the ordered portrait file, your name and your shipping address).

We do not sell or rent your personal data.

Retention

• Imported photos: deleted after generation.
• Generated portraits and account: until you delete them.
• Versions not kept: deleted as soon as you choose, at the latest seven days after generation.
• Purchase and print order records: kept to meet our legal and accounting obligations (without the shipping address).

Your rights

You have the right to access, rectify, erase, port, object to and restrict the processing of your data. From the app, you can delete your account: this erases your photos and your portraits and anonymizes your identity (the financial record is kept to meet our legal obligations). To exercise your rights, write to contact@getvignette.app. You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), the Luxembourg supervisory authority.

International transfers

Some providers (Apple, Google, Vercel, Stripe) may process data outside the European Union, under appropriate safeguards (standard contractual clauses). Prints are produced by Prodigi in the United Kingdom, which is covered by a European Commission adequacy decision.

Cookies

This website sets no cookies and embeds no audience measurement tool.

Security

Images are stored in a private space, accessible only through time-limited signed links, and all traffic is encrypted in transit (HTTPS).

Minors

The service is not intended for children under 15. We do not knowingly collect data about them.

Changes

We may update this policy. For any significant change, the date above is updated.

Contact

For any question about this policy or your data: contact@getvignette.app.