Privacy Policy

Privacy Policy

This policy explains which personal data is processed when you use INS·AI and why. Controller: Ironkent Yazılım Teknoloji Reklam ve E-Ticaret Limited Şirketi.

Data collected

• App account: INS·AI does not require sign-up. When you first open the app, a user ID is created for you that contains no name, email or password.
• Face photos: only the photos you add to create content.
• Creations: the videos and photos you create, the prompts you write and the reports you send.
• Consent and moderation records: your pre-generation confirmations with date, time and IP address, and automated moderation decisions.
• Credit and purchase records: credit transactions and store transaction IDs. Card details never reach INS·AI; Apple or Google take payment.
• Device identifier: so that the welcome gift is given only once per phone, an identifier of your phone is stored in a one-way transformed form that cannot be reversed.
• Support messages: what you write in the app's Support screen and the replies.
• Usage data: session length, screens and templates viewed, device type and operating system. Kept for 90 days.
• If you allow notifications, your device's push token.

INS·AI does not collect advertising IDs or track you across other apps or websites.

Why data is used

• To provide the service: creating videos and photos with your face and managing credits.
• Safety and abuse prevention: automated checks of face photos, prompts and results, reviewing reports, preventing misuse of gifts and credits, mandatory reports to authorities.
• Support: solving your problems and replying to you.
• Improving the service: tailoring the Explore screen and fixing errors.
• If you allow it, sending campaign notifications. You can turn this off in Settings at any time.

Face data

Your face photos are used only to create what you ask for and to run safety checks. They are never used for facial recognition, identity verification or advertising, never sold and never used to train AI models. Photos are kept in a private space only you can access and can be deleted at any time.

Third-party AI service providers

During generation and safety checks, your face photo, prompt, chosen template and the result are processed on the servers of the third-party AI service providers abroad that INS·AI runs on. This happens only after you accept the Face Data Consent. These providers use the data only to process your request, never for advertising or model training.

Other recipients

• Database and file storage, payment and notification service providers.
• Competent authorities where required by law or in cases of suspected crime such as child abuse.

Some providers are located abroad. International transfers rely on your explicit consent and the safeguards of article 9 of the Turkish data protection law and the GDPR.

Retention

• Creations: 20 days, then deleted automatically.
• Face photos: until you delete them or delete your data.
• Usage data: 90 days.
• Support messages: up to 2 years after your request is resolved.
• Transformed device identifier: while your account exists; deleted when you delete your data.
• Consent, moderation and report records: for limitation periods, to prevent abuse, defend legal claims and meet legal obligations.
• Purchase and credit records: for the period required by tax and commercial law.

You can delete your account and data at any time in Menu → Settings → Delete my data. Removing the app from your phone does not delete your server data. If you have a subscription, cancel it separately in the App Store or Google Play.

Your rights

You have the right to access, correct and delete your data, object to processing, contest an automated decision and ask for human review, and to data portability. The Turkish data protection notice applies to users in Türkiye, the GDPR to users in the EU and UK, and the relevant state laws to users in the US. Your data is never sold.

Requests: destek@insai.online

Age limit

INS·AI is only for people aged 18 or over. If data of someone under 18 is found to be processed, the account is closed and the data deleted.

Changes

This policy may be updated; for significant changes your consent is asked again in the app.

Turkish data protection notice

Under Turkish Law No. 6698 on the Protection of Personal Data, Ironkent Yazılım Teknoloji Reklam ve E-Ticaret Limited Şirketi informs you as the data controller.

Personal data processed

• Identity: the user ID created by the app and your 18+ declaration.
• Visual records: face photos and generated videos and photos.
• Customer transactions: credit transactions, purchase records and support messages.
• Transaction security: session, IP, device and operating system information, transformed device identifier, consent records, automated moderation decisions and report records.
• Marketing: your notification preference, if you allowed it.

Purposes

Providing the service and performing the contract; AI generation; automated safety checks of face photos, prompts and results; credit and payment operations; preventing misuse of gifts and credits; answering support requests; information and content security; reviewing reports; evidence in legal disputes; meeting legal obligations and notifying authorities; marketing notifications if you consent.

Legal grounds

Article 5/2-c performance of a contract, article 5/2-ç legal obligation, article 5/2-e establishing, exercising or protecting a right, article 5/2-f legitimate interest. Your explicit consent under articles 5/1, 6 and 9 for face photos and international transfers.

Transfers

Your personal data may be transferred to the AI service providers used for generation, database and file storage providers, payment providers, notification providers and competent authorities. You can ask for the list of providers by writing to the address below. Some providers are abroad; international transfers rely on your explicit consent and the conditions of article 9.

Collection method

Data is collected electronically through the mobile app, by automated and partly automated means.

Automated decisions

Face photos, prompts and results pass through automated, AI-assisted moderation, which may reject a creation. You can contest the outcome and ask for human review.

Your rights under article 11

You have the right to learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, request correction, deletion or destruction, object to a result against you arising from automated analysis, and claim compensation for damages.

Send your requests to destek@insai.online. Requests are concluded within 30 days.

Face Data Consent

Please read and accept the following before adding a face photo.

What it is used for

Your photo is used only to create videos and photos from the templates and requests you choose and to run safety checks. It is never used for facial recognition, identity verification, advertising or AI model training, and is never sold.

Automated safety check

Your photo is checked automatically on first use: it must show a single real face of a person who appears to be over 18, with no nudity, and must not be a celebrity or public figure. Photos that fail cannot be used.

Where it is processed

Your photo is processed only to create what you asked for, on the secure servers of the third-party AI service providers abroad that INS·AI runs on. These providers use your photo only for that job; they never sell it or use it for advertising or model training. You give your explicit consent to this processing and international transfer.

How long it is kept

The photo is kept in a private space only you can access until you delete it or delete your data. You can delete it at any time in My faces; deleting it withdraws your consent. Withdrawal does not affect processing done before.

Your statements

• The face in the photo is mine, or I have the explicit permission of the person shown and can prove it if needed.
• The person shown is over 18 and is not a celebrity, politician or public figure.
• I will not use creations to deceive, humiliate, harass, create sexual content or defraud anyone.
• I am solely responsible for any consequences if these statements are untrue.

Cookies

The INS·AI mobile app does not use cookies.

What is stored on your phone

• Session information: stored on your phone so your user ID is recognised each time you open the app.
• Preferences: your language and appearance choices are stored on your phone.

What is not used

INS·AI does not use advertising, retargeting or third-party tracking tools.

You can remove this information by deleting the app from your phone; to delete your server data use Menu → Settings → Delete my data.

This website does not use cookies; Google Fonts is used for typefaces only.