Hikari Privacy Policy
Last updated: 9 October 2026 (version 2026-10-v2)
Who is responsible. [COMPANY], [ADDRESS] is the controller of your personal data. Contact: hello@friendsbyframe.com.
What we collect and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Email address and password | Account sign-in; account and moderation emails. Passwords are stored only as a salted hash by our login provider | Contract | Until you delete your account |
| Your settings and choices (level, history, progress and improvement settings, record of accepting the terms and confirming you are 18+) | Run the app as you set it up; show we have your agreement | Contract; legal obligation | Until you delete your account |
| Your photo (sent for each critique) | To generate your critique | Contract | Not kept. Processed, then discarded |
| Context you enter (genre, intent, camera settings, replies) | To tailor the critique | Contract | With the critique (see below) |
| Critique results | To show you and, if "Keep history" is on, your history | Contract | With "Keep history" on: until you turn history off or delete your account. With it off: the content is removed within about 24 hours (kept briefly only so you can reply to it). A minimal record (date and status, no content) remains to enforce daily limits and moderation, until you delete your account |
| Your history and progress notes | With "Keep history" and "Track my progress" on (both on by default), a short summary of your recent critiques is sent with each new critique so feedback can be tailored, and a short progress note is written after 5 saved critiques | Your choice (settings) | With the critique. Erased if you turn history off, or when you delete your account |
| Thumbnail (about 400 px, made by our server from your photo) | History view | Your choice ("Keep history", on by default) | Your newest 20 are kept until you turn off history or delete your account; others are removed after 90 days, newest 100 only |
| Feedback (thumbs, reasons, comments) | Improve the service | Legitimate interests; free text and replies only with your consent ("Help improve Hikari") | Until you delete your account |
| Improvement data (critiques, feedback, replies, optional thumbnails) | Improve prompts and quality | Consent ("Help improve Hikari", off by default) | Anonymised export without name or email; withdraw by turning the setting off |
| Moderation flags | Enforce acceptable use, protect others | Legitimate interests; legal obligation | 12 months. Flagged images (not illegal content) kept privately up to 30 days, or until an open review is decided. A one-way hash of your email address is kept with each flag for those 12 months, even if you delete your account, so the rules can't be avoided by signing up again |
| Hash of email of removed accounts | Stop barred users re-registering | Legitimate interests | Indefinitely (one-way hash only) |
| Technical data (IP address, device, logs) via our providers | Security, reliability | Legitimate interests | As set by each provider |
We do not sell your data and do not use it for advertising.
Who we share it with (processors)
- Supabase (database, storage, login, hosting of our server functions)
- Anthropic (AI model that analyses your photo and text; under its commercial terms, inputs are not used to train its models)
- Resend (transactional email)
- Apple (app distribution and TestFlight)
Some providers process data outside the UK/EEA; we rely on UK/EU-approved safeguards such as standard contractual clauses or adequacy decisions.
Automated decisions
An AI check flags content that may break our rules. The first flag pauses your account for 3 days. A second flag within 12 months triggers a human review before anything permanent happens. You can contest any flag at hello@friendsbyframe.com.
Your rights
You can access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time. Turn off "Keep history" in Settings to erase your saved thumbnails, critiques and progress at any time. Delete your account in Settings to remove your account, critiques and stored images. Or email hello@friendsbyframe.com. You can complain to the ICO (ico.org.uk).
Children
Hikari is for adults only (18+). If we learn a user is under 18 we will delete the account.
Security
Traffic is encrypted; access to stored data is restricted; stored thumbnails are private to your account.
Changes
We will tell you in the app about material changes.