Privacy Policy · Fanfy
Last Updated: 2026/10/17
1. Introduction
Fanfy is an app provided by Tunahan Aktay (“we”, “us”, or “our”), who is committed to protecting your privacy. This Privacy Policy applies to Fanfy and its various versions and is part of our Terms of Use. This policy explains what data the app processes, why, and your choices. Before your first photo is sent for AI processing, the app asks for your permission and names the AI providers involved; if you decline, no photo is sent. Fanfy shows no ads and does not track you across other companies’ apps or websites.
None of the data collected by this app is linked to your identity: the app has no accounts and never asks for your name or email address. If you contact support, we receive only what you choose to send.
2. Who We Are
Fanfy is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.
3. Data We Collect
We collect the following categories of data, none of which is linked to your identity:
User Content
Photos or Videos: Used for App Functionality
You may upload or capture photos solely to create AI fan photos: jersey swaps, match and fan zone scenes, and landmark portraits in a national team’s colors. Photos are sent temporarily to our AI providers (see section 4) for processing and are automatically discarded once the transformation is complete. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app. We do not store, extract, or analyze facial features for identification or profiling purposes.
Identifiers
Device ID: Used for App Functionality, and Analytics
A device identifier is collected to keep AI requests secure and to prevent abuse. Firebase and Mixpanel also assign a random identifier for analytics. These identifiers are random and not linked to your name, email address or account.
Location
Coarse Location: Used for Analytics
Firebase Analytics and Mixpanel estimate your approximate country and city from your IP address. We do not request or collect your precise location.
Purchases
Purchase History: Used for App Functionality, and Analytics
If you make in-app purchases, transaction data is processed by Apple and RevenueCat to manage your subscription. This data is used to provide access to premium features and to analyze purchasing trends in aggregate. RevenueCat also receives Apple’s install attribution token, which tells us whether the app was found through an Apple Search Ads campaign; Apple provides it without identifying you. RevenueCat also sends subscription events, such as renewals and cancellations, to Mixpanel under the same random identifier.
Usage Data
Product Interaction: Used for Analytics
We collect data about how you interact with the app (e.g., screens viewed, features used) through Firebase Analytics and Mixpanel. This helps us understand how the app is used and identify areas for improvement.
Diagnostics
Crash Data: Used for App Functionality
Crash reports are collected through Firebase Crashlytics to help us identify and fix issues that affect app stability.
Other Diagnostic Data: Used for App Functionality, and Analytics
Additional diagnostic information (e.g., error logs) may be collected to monitor app health and improve reliability.
Other Data
Other Data Types: Used for App Functionality, and Analytics
Your IP address is used to keep AI requests secure, to prevent abuse, and by AIProxy to measure usage limits.
4. Face Data Collection, Use, and Retention
This section describes in detail how Fanfy handles face data in compliance with Apple’s App Store Review Guidelines (5.1.1).
What face data does the app collect?
Fanfy does not collect, store, or share face data. Photos you send for a fan photo are processed as whole images; no face-specific data is extracted from them.
How is face data used?
Photos containing faces are used solely to create the fan photo you choose. The processing is entirely automated by AI models that apply visual transformations to the image. The app does not perform facial recognition, identity analysis, or any form of biometric identification. No face data is used for advertising, profiling, or any purpose beyond delivering the requested transformation.
Is face data shared with third parties?
Photos you choose to transform are sent through AIProxy, a secure relay that forwards the request without storing it, to OpenRouter, Inc., which passes it to Google’s AI model that creates your result. These requests run with zero data retention: the photo is not stored or used to train models, and it is discarded once the result is returned. No face data, biometric identifiers, or facial features are extracted or retained.
No other third party receives your photos.
How long is face data retained?
Face data is not retained by us or by any third party. Photos exist with our AI providers only for the duration of the transformation (typically seconds) and are discarded upon completion. We do not maintain any copies, backups, or derivatives of your photos on our servers.
Summary
| Question | Answer |
|---|---|
| Face data collected? | No. Photos processed as whole images; no face data extracted. |
| Face data stored? | No. Not retained by us or any third party. |
| Biometric analysis performed? | No. No facial recognition or identity analysis. |
| Face data shared? | Photos are relayed by AIProxy and processed by OpenRouter and Google with zero data retention; discarded after the transformation. |
| Providers store face data? | No. Not stored or used for training; discarded after the transformation. |
| Face data used for profiling? | No. Used solely for visual transformation. |
5. How We Process Your Photos
- Temporary processing: Uploaded photos are sent through AIProxy to OpenRouter, Inc. and processed by Google’s AI model to create your fan photo.
- No storage: Once the transformation is complete, the image is returned to your device and the original photo is discarded by our AI providers. We do not store photos on our own servers. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app.
- No biometric analysis: The app does not extract or analyze facial features for identification or profiling purposes. No biometric identifiers are created, inferred, or retained.
- No human review: All processing is handled by automated AI models. No person views your photos, unless you choose to send one to us when asking for support.
- Legal bases: We process photos with your consent, given in the app before your first transformation; analytics and crash data on our legitimate interest in keeping the app working and improving it; security data, such as your IP address, on our legitimate interest in preventing abuse; and purchase data to provide your subscription.
6. Third-Party Services
We use the following third-party services:
- OpenRouter, Inc.: AI-powered photo transformations. Passes each photo to the AI model and does not store, retain, or reuse uploaded images or any face data derived from them.
- Google: Runs the AI model that creates your result. Requests are processed with zero data retention and are not used for training.
- RevenueCat: Subscription and purchase management. Collects device identifiers and purchase history to manage entitlements, and Apple’s install attribution token for Apple Search Ads.
- Firebase Analytics: Usage analytics. Collects device identifiers, product interaction data, and approximate location derived from your IP address.
- Mixpanel, Inc.: Product analytics. Collects app interactions, a random identifier, and approximate location derived from your IP address.
- Firebase Crashlytics: Crash reporting and diagnostics. Collects crash data and diagnostic information.
- Firebase Remote Config: Delivers app settings; receives a Firebase installation ID and IP address to do so.
- AIProxy: Secure AI service routing. Uses a random, stable device identifier and your IP address for security and to measure usage limits. It does not store the content of requests; it keeps the IP address, request metadata and error responses for 30 days.
- Apple In-App Purchases: Secure transaction handling.
These services process data only to the extent required for their core functions. None of the data collected is linked to your personal identity.
7. Data Retention
- Photos: Never stored on any server. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app.
- Face data: Not retained. No face data is extracted, stored, or retained at any point.
- Analytics and diagnostics: Analytics events and diagnostics are kept by Firebase, Mixpanel and Crashlytics under random identifiers for as long as their retention settings allow, and are then deleted.
- Purchase information: Managed by Apple and RevenueCat under their respective privacy and retention policies.
- No user data is linked to personal identity.
8. Data Security
All data transmission between your device, our services and third-party providers is encrypted. We never receive your photos, unless you send one to us for support; they go only to the AI providers named above, and stay on your device in History. We do not store or share biometric or facial data, and we never analyze it to identify you. We apply appropriate technical and organizational measures to protect your data. While no system can guarantee complete security, we continuously work to safeguard your information.
9. Children’s Privacy
Fanfy is not intended for children under 13, or under the minimum age of digital consent in your country if higher. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, contact us at tunahanaktay.apps@gmail.com and we will help delete it.
10. International Transfers
Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.
11. Your Rights
Depending on where you live, including Turkey, the EU, the UK and California, you can ask to access, correct, delete or receive a portable copy of your personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because we do not link analytics identifiers to your name or email address, we may be unable to find records that belong to you; email us and we will help as far as we can. You can delete all stored photos from History or by deleting the app. We do not sell your personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect, and ask for consent again where the law requires it.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: tunahanaktay.apps@gmail.com