mai1. Who operates mai
mai and this support website are operated by Doan Van Phuong. For privacy questions and requests, contact doanvanphuong@gmail.com. This policy describes the app and website; third-party services have their own terms and privacy notices.
2. Information we process
Account information: account identifiers, email address, display name, profile details you choose to supply, and authentication information needed by your selected sign-in method. Password authentication is handled by Firebase Authentication.
Creation content: prompts, selected model and settings, images you choose to upload, generated outputs, task identifiers, status, timestamps, safety information, and associated history or notifications.
Purchase and credit records: Apple transaction identifiers and verification data, product and quantity, purchase time, credit balance, deductions, and refunds. Apple processes your payment details; mai does not receive your full payment-card number.
Device, security, and diagnostic information: installation or device-related identifiers, app attestation information, hashed guest identifiers, trial usage counters, and technical information needed for service operation, crash diagnosis, and abuse prevention. Infrastructure providers may process IP addresses and request metadata.
Support communications: your email and the information you choose to send when contacting support. Please avoid sending unnecessary sensitive information.
AI permission: the app stores the disclosure version and acceptance time locally on your device, separately for guest use and each signed-in account. This permission record is not a server-side consent history.
3. Why we process it
We use information to authenticate users, process requested generations and image tools, return results, maintain account and credit records, verify purchases, restore credits after confirmed failures, provide support, diagnose problems, and protect the service.
Guest identifiers and usage records enforce trial allowances and security limits. A guest session does not mean online requests are anonymous to the services that process them.
Where applicable, processing relies on providing the service you request, your consent where required, legitimate operational and security interests, or legal obligations. The applicable basis depends on the processing and your jurisdiction.
4. AI processing and service providers
Before your first generation or AI input-image upload, mai asks you to choose Allow AI processing or Not now. If you allow, your prompt, generation settings, and selected input images are sent to mai’s Google Firebase / Google Cloud backend for processing and storage and to the provider for your selected model. Declining stops that request before upload or generation. Browsing models and selecting a photo locally do not grant permission. Price previews replace prompt content and image links with placeholders before sending a pricing request.
When you submit a generation, the prompt, selected settings, and any required input images or image links are sent through mai’s backend to the provider for your selected model. mai currently integrates FAL and Replicate. Processing may involve the model operator or infrastructure used by that provider. The providers do not need your mai password or payment-card details to generate an image.
Google Firebase and Google Cloud provide authentication, databases, file storage, backend hosting, App Check, diagnostics, and related infrastructure. Generated images may also be processed by Google Cloud Vision safety checks where used. Apple provides In-App Purchase processing and transaction verification services.
Provider processing and retention can differ by model, account configuration, and provider terms. We do not make a blanket promise that every provider keeps no data or never uses any content for model improvement. Do not submit sensitive material unless you understand the processing involved and have the necessary permissions.
Read the provider notices: fal.ai, Replicate, Firebase, Google Cloud, and Apple.
5. Storage, links, and guest history
Signed-in generation content and account records can be stored in Firebase databases and Cloud Storage. Uploaded input images may be stored so the provider can access them. Guest task tracking and result references are also stored locally on the device, while the backend maintains guest task and usage records.
Images may be served through download links. Someone who obtains a usable link may be able to access its image, so avoid sharing links to content you want to keep private. Version 2.0.0 does not automatically publish your results to a public Featured gallery.
Removing the app can remove local guest history, but it does not necessarily erase backend usage records or reset trial limits. Images you save to Photos or share outside mai are controlled by you and the receiving service.
6. Retention and deletion
Account information, creation content, and operational records are stored as needed to provide and secure the service or until a deletion request is processed. There is no single fixed retention period covering all app records or all third-party providers.
Use Account → Account Settings → More → Delete account to request deletion of your account and associated app data. Recent authentication is required. Once accepted, you are signed out, new account activity is blocked, and a retryable background process removes your Firebase sign-in identity, profile, account-linked tasks and prompts, stored input/result images and thumbnails, notifications, and other associated records. Account-linked social references and identifiable device-account links are also cleaned up.
The cleanup waits 15 minutes for in-flight requests before processing; it ordinarily completes after that waiting period, but outages and retries can delay it. It is not immediate erasure or a guaranteed completion deadline. Contact support if you need help checking a request.
We retain minimal records for transaction integrity and security: an already-consumed Apple transaction identifier with consumed/deleted flags to prevent repeat crediting, a server-only account identifier with deletion status and completion time to reject stale writes, and device anti-abuse counters/timestamps and used-bonus markers without the deleted account’s UID/email links. Deleting an account does not reset trial or bonus eligibility.
Operational logs, backups and recoverable storage versions, Apple transaction records, third-party AI-provider copies, and images you save to Photos or share outside mai follow separate retention and deletion processes. App deletion does not erase those copies. Historical content that cannot be linked to an account may require manual investigation; email us if you identify such content. Re-registering with the same email does not restore deleted account data or credits.
For guest data, legacy content, deletion assistance, access, correction, or other privacy requests, email doanvanphuong@gmail.com. We may need proportionate verification and will explain any applicable retention or deletion limitations. Signing in is not required to contact us about your rights.
7. Your choices and rights
Use guest trials if you do not want to create an account. Only select images you intend to process, review model information before submitting, and avoid putting unnecessary personal information into prompts.
AI-processing permission is separate for guest use and each account on this device; it does not transfer when you sign in or switch accounts. When signed in, Account → Legal → AI Processing lets you review the disclosure and withdraw saved AI permissions on this device, including guest permission. Guest Account does not show this settings item. Withdrawal makes the next generation or AI input upload ask again, and does not cancel work already sent or erase content previously processed. You can also contact us about withdrawing consent without signing in.
You can manage photo-library permissions in iOS Settings. You may also contact us to request access, correction, deletion, or other rights available under your local law, or to withdraw consent where consent is the processing basis. Withdrawal does not change earlier lawful processing and may affect features that require the information.
Depending on your jurisdiction, you may have a right to complain to your local data-protection authority. We do not require you to disclose extra sensitive information simply to ask about your rights.
8. Diagnostics and this website
The app integrates Firebase services that can process technical and diagnostic information, including crash and performance information. These services can receive app and device information needed to diagnose errors and maintain reliability.
This support website does not add advertising trackers, analytics scripts, contact-form databases, or optional cookies. Hosting infrastructure can still process ordinary access and security logs. Email support opens your email application; information you send is handled through email services.
9. International processing and security
Google, Apple, AI providers, and their infrastructure may process information in countries outside your own. Applicable legal and contractual safeguards depend on the service and your jurisdiction; we do not promise that all processing stays in one country.
We use service access controls and encrypted network connections, but no storage or transmission system is completely secure. Contact us promptly if you believe information has been exposed or misused.
10. Children, updates, and contact
mai is not designed specifically for children. Follow the app’s age rating and applicable age and parental-permission requirements. If you believe a child has submitted personal information without required permission, contact us so we can investigate.
We will update this policy when practices change and provide additional notice where required. For questions, contact Doan Van Phuong at doanvanphuong@gmail.com.