AI Pre-Wedding Photo

Privacy Policy

Last updated: 20 October 2026

This policy covers the AI Pre-Wedding Photo app and its website, aiprewedding.sortedsystems.in. It is written to describe what the software actually does — every claim here matches the code that runs.

We are Sorted Systems, the publisher of AI Pre-Wedding Photo ("we", "us"). You can reach us at info@sortedsystems.in about anything on this page.

The short version

  • We collect your email address, the photos you upload, the images we generate, any wedding details you choose to add, and your credit and purchase history.
  • Your photos go to our AI providers only to make the images you asked for.
  • We do not train our own models on your photos, and we never sell them or use them for advertising.
  • Uploaded photos are deleted seven days after the shoot that used them finishes, unless you delete that shoot or ask us for help with it — then we keep them for up to 30 days so we can look into it.
  • You can delete your account at any time, from inside the app, without asking us. It stops working at once, and everything in it is erased 30 days later.

The rest of this page is the detail. Where a specific number appears — a retention period, a response time — that number is what the software enforces, and we change the number here in the same release we change it in the code.

What we collect

Your account

  • Your email address, and a name if you set one.
  • If you sign in with Google: the name, email address and account identifier Google gives us. If you sign in with Apple: the email address Apple gives us (which may be a private relay address) and an account identifier. Nothing else from either account.
  • Your password, if you use one — stored only as a one-way hash, never in readable form.
  • The styles you save as favourites.
  • If you join through a friend's referral code, the link between your account and theirs, so that both of you can receive the reward.
  • A record of each time you agree to the photo consent — when, and which wording — and of each time you turn offers on or off. This is how we can show what you agreed to.

Photos and images

  • The photos you upload for a shoot, or to train a personal model of your face.
  • The images our AI produces from them, and the in-between images produced while making each one (for example a crop of a face), which are kept with that shoot and deleted with it.
  • If you ask us for help with a shoot: what went wrong, the messages you and our support team exchange, and the details of that shoot.
  • Who is in each photo — whether you marked it Her or Him — and the same for a personal model you train. This is used only to dress each person in the right outfit and to match each face to the right person.

Photographs of people are sensitive personal data, and we treat them that way throughout this policy. To check a result and to keep each person's expression, our systems measure faces — whether a face is present, an estimated age range and gender, the expression (whether it is smiling, whether the eyes and mouth are open, and the apparent emotion), and how closely two faces match. These measurements are biometric in nature. They are computed in memory; we keep only the resulting numbers with the shoot, never a stored face template.

Photos of your partner, or of anyone else

A couple shoot includes a photo of someone other than you. By uploading it you confirm, as the app asks you to, that they have agreed to it being used for that shoot. Their photo is processed exactly as yours is, only for that shoot, and is deleted on the same timetable. They have the same rights over it as you have over yours: they can write to us at info@sortedsystems.in and we will delete it.

Wedding details

If you use the wedding posts feature: your wedding date, and — only if you type them — your partner's name, the venue and a hashtag, plus the card designs you save. These are printed on the cards you make and are not used for anything else.

Purchases

Your credit balance, the packs you hold, and a record of every credit added or spent and every pack granted, with the store's transaction reference, what you paid and in which currency, and the country of the store account you paid from. Card, UPI and bank details are handled entirely by Google Play (or Apple) — we never see or store them.

Device and technical data

Crash reports and error diagnostics, used only to find and fix faults: the device model, operating system version, app version and the technical detail of the fault. They do not contain your photos, your name or your email address.

The app also tells our servers your phone's region setting and its time zone offset from UTC. We keep the region to know which country you are most likely in (the country of a store purchase takes its place once you buy), and the offset so that day counts, such as the days left to your wedding, are counted on your own calendar.

Like any online service, our servers also record each request they receive — the IP address it came from, the time, and the address requested — to keep the service secure and to diagnose faults. The IP address is also used, for a minute at a time, to limit how many requests one device can make.

How you use the app

Which screens and features are used, and how often; an app instance identifier and our internal identifier for your account (never your name or email address); the device model, operating system and app version; and an approximate location (country or city) derived from the IP address. See *Advertising and analytics* below.

Advertising identifier

The Android advertising ID (or the equivalent on other devices), used only to measure whether our advertisements lead to people installing and using the app. You can reset or delete it at any time — see *Advertising and analytics* below.

How you found the app

On Android, after you sign in, the app asks Google Play how it was installed — for example from one of our advertisements on Google, Facebook or Instagram and which campaign, from a link, or straight from the Play Store. We keep this with your account to see which of our advertisements work. Nothing about you is sent back to the advertiser by this.

Why we process it, and on what basis

We process your photos and account data with your consent, which you give when you create an account and confirm the photo consent statement, and again each time you choose to start a shoot. Consent is the basis under India's Digital Personal Data Protection Act, 2023, and because photographs and face measurements are sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, that consent is explicit and is asked for before any photo is processed.

We also process a limited amount of data because we have to — a record of a purchase, for instance, so that we can answer a payment dispute or meet a tax or accounting obligation, and anything a court or public authority lawfully requires.

If you live outside India

The app is offered in other countries too, and wherever you live we process your data in the way this policy describes. Where the law of the country you live in asks for a legal ground for each use of your data, these are ours:

  • Your photos, face measurements and personal models — your explicit consent, given in the app before any photo is processed.
  • Your account, purchases and credits — what we need to provide the service you signed up for and paid for.
  • Purchase and tax records — what the law requires us to keep.
  • Security logs, crash reports and abuse prevention — our legitimate interest in keeping the service safe and working, which does not override your rights.
  • Offers and news, and usage analytics — your consent, which you can switch off in the app at any time.

You can withdraw consent at any time by deleting your account. Because processing photographs is the entire function of the service, withdrawing consent means the service can no longer be provided to you. Withdrawal does not affect processing that happened before it.

How we use your photos

Uploaded photos are sent to our AI processing providers for the sole purpose of producing the images you requested. Before anything is generated they are checked automatically for the presence of a face, for unsafe content, and to detect apparent minors, which we do not permit. A photo that fails a check is refused before anything is charged.

After an image is generated we compare it against your uploaded photo to measure how closely the likeness came out, so that we can tell a good result from a bad one and improve the product.

If you train a personal model, your training photos are used to make a model of your face that only your account can use. It is used only for the shoots you start with it.

Every styling instruction sent to an AI model is written by us. The app does not send any text you type to a model, so nothing you write can end up in an image.

Our staff may look at a shoot — its photos, its result and its in-between images — only to investigate a fault, a problem you reported or a safety flag. Only authorised staff can do this; they sign in to our dashboard with a password and a second authentication code, and every action there is recorded.

When you save an image to your phone or share it to another app, that copy is yours. What the receiving app does with it is governed by that app's own policy, and deleting a shoot here does not delete copies you have already saved or shared.

We do not use your photos or generated images to train our own models, we do not publish them, and we do not share them with anyone outside the providers described below.

Automated checks

Two things in the service happen automatically, without a person reviewing them: the safety check on what you upload and on what is generated, and the likeness scoring described above. A safety check can refuse a photo or discard a generated image; when it does, you are not charged, or you are refunded. No automated decision here has a legal effect on you, and if you believe a check was wrong, write to us — see *Reporting a problem*.

Who else processes your data

We use a small number of specialist providers. Each receives only what it needs to do its job, is bound by contract to use it only for that job, and may not use it for its own purposes. We may change a provider within a category — for a better model, better availability or a better price — without changing anything about what is processed or why; when we do, we update this list.

Hosting and safety checks — Amazon Web Services

Runs our servers and database, which hold your account, purchase records and wedding details. Its image analysis service (Amazon Rekognition) receives your photos and generated images to run the safety checks and face measurements described above. Privacy notice

AI image generation — Replicate

Hosts the AI models that make your images. Receives your uploaded photos and the styling instruction we wrote, and, if you train one, your training photos. The personal model a training produces is held in our account there until you delete it, or until your account is erased; deleting it there removes it with everything it made. Privacy policy

Storage — Cloudflare

Stores your photos, generated images and training photos, in storage that is not publicly listed. Privacy policy

Crash reporting — Sentry

Receives the technical diagnostics described above when the app or our servers hit an error — never photos, and never your name or email address. Privacy policy

Payments — Google Play and RevenueCat

Google Play takes your payment and tells us it succeeded. RevenueCat, which manages in-app purchases for us, receives your account's identifier and the store's record of each purchase (product, price, currency and transaction reference), so that the right credits reach the right account. Google Privacy Policy · RevenueCat privacy policy

Email — Resend

Sends the verification and password-reset codes we email you. Receives your email address and the message. We send no marketing email. Privacy policy

Sign-in — Google and Apple

Used only if you choose to sign in with them. They confirm who you are and give us the details listed under *Your account*. Google Privacy Policy · Apple Privacy Policy

Photo check — Google ML Kit

When the photo check runs on your phone, Google ML Kit looks for a face in the photo you picked, entirely on the device — the photo is not sent anywhere for this check. ML Kit may send Google anonymous information about how the feature performs, which contains no photos. Google Privacy Policy

App integrity — Google Play Integrity and Apple App Attest

When this check is switched on, the app asks Google Play (or Apple) to confirm that it is the genuine app on a genuine device when you sign up or verify your email, to stop automated abuse. Google or Apple receives information about the app and device to answer; we receive only the answer. Google Privacy Policy

Analytics — Google Analytics for Firebase

Receives the usage information described under *How you use the app* so that we can see which features are used and where the app goes wrong. It never receives photos. How Google uses information from apps that use its services

Crash reporting — Firebase Crashlytics

Receives crash reports — the device model, operating system, app version, the state of the app when it crashed, an installation identifier and our internal identifier for your account — to help us fix faults. It never receives photos, your name or your email address. Firebase privacy and security

Notifications — Firebase Cloud Messaging

Delivers the notifications we send you, such as a photo being ready. Receives a device token that identifies the app on your phone, and the notification. Firebase privacy and security

Advertising measurement — Meta

The Meta SDK sends Meta Platforms, Inc. events from the app — such as the app being installed or opened, an account being created and a purchase being made — together with the advertising identifier, IP address, device model and operating system. We use it to measure and improve our advertisements on Facebook and Instagram. It never receives photos. Meta Privacy Policy

We and these providers process data in India and in other countries, including the United States, so wherever you live your data may be processed outside your country. Where that happens the protections in this policy travel with it, and where the law where you live requires particular safeguards for such transfers, we rely on the data processing terms our providers offer for that purpose.

If we ever want to use your data for a new purpose not described in this policy, we will ask you first. We do not sell your personal data, and we never will. We would disclose data to a court or a public authority only where the law compels it.

If Sorted Systems's business is ever merged, acquired or transferred, your data would move to the new owner only under the protections in this policy, and we would tell you before it did.

Advertising and analytics

We advertise the app on Facebook and Instagram and use the Meta SDK, described above, to measure how those advertisements perform. Your photos, generated images and wedding details are never shared for advertising.

You can limit this at any time. On Android, open Settings → Google → Ads to delete or reset your advertising ID; with no advertising ID, events cannot be linked to it. In Facebook or Instagram, Accounts Centre → Ad preferences controls how Meta uses information from apps to show you ads.

We use Google Analytics for Firebase, described above, to understand which features are used and where the app fails. The results are never sold. The advertising ID controls above also apply to it.

You can switch off usage analytics and advertising measurement at any time under Profile → Share usage data. Crash reports are still sent, because they are how we find and fix faults.

Permissions the app asks for

The app asks for each of these only when you use the feature that needs it, and works without any you decline.

  • Photos — to pick the photos you upload, through your phone's own photo picker, which gives the app only the photos you choose.
  • Camera — if you choose to take a new photo, through your phone's own camera app.
  • Notifications — to tell you when your photos or a trained face are ready, to remind you of your wedding countdown posts, and, unless you turn them off under Profile → Offers and news, to tell you about new styles and offers. Every notification we send is also kept in the app's inbox.
  • Saving to your gallery — to save the images you download. Only older versions of Android ask for this.

How long we keep things

  • Uploaded source photos — deleted seven days after the shoot that used them finishes. They are removed from storage, and the record of where they were is cleared at the same time. Two exceptions, both so that we can look into a problem: if you delete the shoot, they are kept until 30 days after you delete it; and if you ask us for help with a shoot you have not deleted while they are still kept, they are kept until 30 days after your request is closed. Then they are deleted.
  • Photos used to train a personal model — kept for as long as that model exists, because retraining and improving it needs them. Deleting the model deletes them from our storage and stops the model ever being used again.
  • Generated images, and the in-between images of each shoot — kept in your gallery until you delete them or delete your account. A shoot you delete leaves your gallery at once and is kept for 30 days, visible only to our support staff, so that we can answer a question about it; then it is erased.
  • Help requests — your messages with our support team and the details of the shoot they are about, kept with your account.
  • Wedding details and saved card designs — kept until you change them or delete your account.
  • Your account record, meaning the email address, purchases and credit history, the record of what you agreed to, and your country and time zone offset — kept for 30 days after you ask to be deleted, then erased permanently.
  • Crash diagnostics — kept by our crash-reporting providers for up to 90 days, and not linked to your photos.
  • Usage analytics — kept by Google for up to 2 months.
  • Server access logs (IP address, time, address requested) — kept for 14 days, then deleted automatically. Our application's own diagnostic logs refer to accounts and shoots by an internal identifier, never contain photos, and are overwritten automatically.

Deleting your account

You do not have to delete your account to delete something in it. From inside the app you can delete a single shoot and its images, an uploaded photo, a personal model or a saved card at any time. An uploaded photo, a personal model or a saved card is removed from our storage straight away, unless another of your shoots or models still uses the same photo, in which case it goes when that one does. A shoot is removed from your gallery straight away and erased 30 days later.

You can delete your account at any time from Profile → Delete account in the app, or by following the steps on our website at aiprewedding.sortedsystems.in/delete-account. You do not need to ask us, and we do not ask you why.

The moment you confirm it:

  • The account can no longer be signed into, on any device, immediately — not at the end of a session — and we stop sending it notifications.
  • Your email address is released, so you may sign up again with it straight away if you change your mind.

Everything else in the account — your photos, generated images, the photos a personal model was trained on, your wedding details and saved cards, what was purchased, the credit history and your help requests — is held for a further 30 days, visible only to our support staff, so that a question, a refund request or a payment dispute made after you leave can still be answered. After 30 days all of it is erased permanently, including any personal model held at our AI provider. Google Play and RevenueCat keep their own record of a purchase, under their own policies.

Any credits or unused pack shoots are forfeited on deletion. They have no cash value and are not refundable.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can, at any time:

  • Know what personal data we hold about you and how it is processed — ask us and we will send it.
  • Correct, complete or update it — most of it from Profile in the app.
  • Erase it — a single shoot, photo or model, or your whole account, as described above.
  • Withdraw consent, by deleting your account.
  • Nominate someone to exercise these rights on your behalf in the event of your death or incapacity.
  • Have a grievance redressed by our Grievance Officer, below.
  • Complain to the Data Protection Board of India, once our grievance process has been used.

Write to info@sortedsystems.in for any of these. We answer within 30 days. There is no charge for a reasonable request.

Wherever you live

Whatever country you are in, you can ask us to:

  • tell you what personal data we hold about you, and send you a copy of it in a common, machine-readable format;
  • correct it, or delete it — most of this you can do yourself in the app;
  • stop using it for something you object to, or limit how we use it while a question about it is settled;
  • stop sending you offers — also under Profile → Offers and news.

You may also complain to the data protection authority in the country where you live. We would rather you came to us first, so that we can put it right.

Write to info@sortedsystems.in for any of these. We answer within 30 days, sooner where the law where you live requires it. There is no charge for a reasonable request.

Grievance Officer

We have a Grievance Officer who handles complaints about how your personal data is processed, as the Information Technology Act, 2000, the rules made under it and the Digital Personal Data Protection Act, 2023 require.

Email: info@sortedsystems.in

Put "Grievance" in the subject line. A grievance is treated as a formal complaint: it is acknowledged, and answered within 30 days.

Reporting a problem

If something is wrong — a generated image that should never have been produced, a photo you believe should have been deleted, a safety check that refused something it should not have, or anything else — tell us at info@sortedsystems.in and we will investigate.

We take reports about AI output seriously and treat them as faults to be fixed, not as complaints to be managed. Where an image should not have been generated, we will remove it from our storage. Where a check is behaving wrongly, we fix the check. Where a shoot went wrong, we refund it.

Children

The service is for adults. You must be 18 or older to use it, and our automated checks reject photos that appear to show a minor. We do not knowingly collect data from anyone under 18, and we do not track, profile or advertise to children. If you believe a child has used the service, write to us and we will delete the account.

Security

Photos and images are stored in private cloud storage that encrypts them at rest and cannot be browsed or listed; each sits at a long random address that cannot be guessed, and is only ever opened through a time-limited link that stops working within hours. Data travels between the app, our servers and our providers encrypted. Our staff dashboard requires a password and a second authentication code, and every action in it is logged. Passwords are stored only as a one-way hash. Sign-in tokens are held in the device's secure keystore, not in ordinary app storage, and stop working the moment an account is deleted.

No system is perfect. If a breach affects your data we will tell you, the Data Protection Board of India and any other authority the law of your country requires, promptly, with what happened and what to do about it.

The website

Our website — the home page, this policy, the terms and the account deletion page — sets no cookies and runs no analytics, advertising or tracking scripts. Like any website, our server records the IP address, time and page of each visit, kept for 14 days for security.

Changes to this policy

The service will change: new styles, new AI models, new features. This policy is written to describe what happens to your data rather than which model produces an image, so most product changes need no change here.

When we do change it, the date at the top changes with it. If a change is significant — a new purpose, a new category of data, a shorter protection — we will tell you in the app before it takes effect, and where the law requires it we will ask for your consent again. Continuing to use the service after a change means you accept the updated policy. Nothing in a future version will apply retroactively to data we have already deleted.

Contact

Sorted Systems — info@sortedsystems.in

For a formal complaint, put "Grievance" in the subject line.