Privacy Policy
Who is responsible
PMAXX is operated by Vasfı Cem Diren, a sole trader trading as VCD Studios ("we"), who is the data controller for the personal data described here. Contact: cem_diren@hotmail.com.
The short version
You give us a screenshot; we analyse it and keep the result so the app can show your history. There is no login, no name, no email, no tracking, and no advertising. Your data is deleted when you ask. Google's Gemini model performs the analysis under paid API terms that do not allow Google to train on your data.
What we collect
- Screenshots you choose to upload — images of an Instagram profile, selected by you from your photo library. We never access your library beyond what you pick, and we never log into, connect to, or scrape Instagram.
- Analysis results — the score, written analysis, archetype, suggestions, and related data derived from your screenshots.
- An anonymous identifier — the app creates an anonymous account automatically. No name, email, phone number, or password is collected. Your results are keyed to this identifier, which is stored on your device.
- Subscription status — whether you have an active subscription, from Apple via our subscription processor RevenueCat. We never see your payment card or Apple ID details.
- Support correspondence — if you email us, we keep the email to handle your request.
- Technical logs — our infrastructure providers record standard request data (such as IP address and timestamps) for security and reliability, retained for a short period.
We do not collect contacts, precise location, advertising identifiers, or device fingerprints, and we do not use third-party advertising, analytics, or tracking SDKs. We do not track you across other apps or websites.
How we use it, and the legal basis
- Producing your analysis and showing your history — necessary to perform our contract with you.
- Keeping the service secure, enforcing fair-use limits, preventing fraud in the referral programme — our legitimate interest in running the service safely.
- Handling your requests and complaints — legal obligation and legitimate interest.
We do not sell personal data, we do not use it for advertising, and we do not use it to train AI models.
AI processing
Your screenshots are sent to Google's Gemini API to produce the analysis. We use the paid tier of that API, under Google's API terms, which do not permit Google to use your content to train or improve its models. The output is automated; a person at PMAXX does not review your screenshots in the ordinary course of providing the service.
Who processes it (subprocessors)
- Google LLC (Gemini API), United States — AI analysis of uploaded screenshots.
- Supabase, Inc. (infrastructure on Amazon Web Services, United States) — storage of screenshots, results, and the anonymous account.
- RevenueCat, Inc., United States — subscription status processing.
- Apple Inc. — app distribution and payment processing.
Each processes data only on our instructions and under contracts that require appropriate safeguards. We do not share personal data with anyone else, except where the law requires it.
International transfers
If you are in the UK or the European Economic Area, your data is transferred to the United States to the providers above. Those transfers rely on the UK International Data Transfer Agreement / EU Standard Contractual Clauses, and, where the provider is certified, the EU–US Data Privacy Framework and its UK extension.
How long we keep it
Screenshots and results are retained while your account exists, because they power your in-app scan history. They are deleted when you ask us to delete your data (see below), and residual copies are purged from backups within 30 days of that. Support emails are kept for up to 12 months after the request is closed. Retention is tied to your use of the product; nothing is kept "forever".
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent where processing relies on it. To exercise any of these, email cem_diren@hotmail.com from the device you used the app on, and tell us roughly when you scanned and the profile name shown in the screenshot so we can locate your data (because accounts are anonymous, this is how we identify you). We respond within 30 days and do not charge for reasonable requests.
UK residents may complain to the Information Commissioner's Office (ico.org.uk); EEA residents may complain to their national supervisory authority. California residents: this email route is your CCPA access and deletion channel; we do not sell or share personal information as defined by the CCPA, and we do not discriminate for exercising your rights.
Other people in your screenshots
Users must only upload their own profiles. A profile screenshot may incidentally include other people's names, comments, or images; we process these only as part of your analysis and delete them with your data. If your profile or information appears in someone else's upload without your consent, email cem_diren@hotmail.com and we will delete it promptly.
Security
Data is stored in access-controlled infrastructure. Screenshots live in a private bucket readable only by the processing service; results are readable only by the account that created them; data is encrypted in transit. No system is perfectly secure, so we keep retention limited to what the product needs. If a breach affects your data, we will notify you and the relevant authority where the law requires.
Children
PMAXX is for users 18 and over. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
This website
This site sets no cookies and uses no analytics; fonts and images are served from the site itself. The hosting provider keeps standard server logs for security.
Changes and contact
Material changes will be shown by the effective date above and, where practical, notified in the app. Questions or requests: cem_diren@hotmail.com.