Privacy Policy

Effective Date: October 15, 2025

Last Updated: February 13, 2026

Illustrate ("we," "us," "our," or "Avgeek, Inc.") operates the Illustrate mobile application and related services (collectively, the "App" or "Services"). This Privacy Policy explains how we collect, use, disclose, process, and safeguard your personal information when you use our App.

By using Illustrate, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

1. Information We Collect

We collect various types of information in connection with the Services we provide, including:

1.1 Information You Provide Directly

When you use the App, you may provide or generate the following information:

AI Provider API Keys: API keys you enter to connect to AI image generation providers, stored locally on your device and synced via iCloud Keychain
Text Prompts and Generation Parameters: Prompts, model selections, and configuration parameters you use to generate images
Generated Images and Metadata: AI-generated images and associated metadata (model used, generation parameters, timestamps, cost estimates)
App Preferences and Settings: Your chosen settings, display preferences, and provider configurations
Support Communications: Information you provide if you contact us for support (e.g., email address, description of the issue)

1.2 Information Collected Automatically

The App collects minimal information automatically:

Device Information: Device model and operating system version, collected solely for compatibility and troubleshooting purposes
Crash Reports and Diagnostics: Crash logs and diagnostic data collected through Apple's standard crash reporting framework, if you have opted in to share diagnostics with app developers via your device settings

The App does not use any analytics SDKs, advertising identifiers, or tracking technologies. We do not collect IP addresses, location data, usage analytics, or browsing behavior.

1.3 Information from Third Parties

The App interacts with the following third-party services:

AI Image Generation Providers: When you use the App to generate images, your prompts and generation parameters are sent to the AI provider you have configured using your own API key. Responses (generated images, usage data) are returned to the App. These are user-initiated API calls made directly from your device.
Apple App Store: Purchase verification and receipt validation to confirm your license
iCloud: If you have iCloud enabled, the App syncs your data (images, prompts, settings) across your Apple devices via iCloud

2. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide our Services and fulfill our contractual obligations to you
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Services, preventing fraud, and ensuring security
Consent: Where you have provided explicit consent for specific processing activities (e.g., marketing communications, location tracking)
Legal Obligations: Processing necessary to comply with applicable laws and regulations
Vital Interests: Processing necessary to protect your vital interests or those of another person

You have the right to withdraw your consent at any time where we rely on consent as the legal basis.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision and Management

Provide, maintain, and operate the App and its features
Create and manage user accounts
Authenticate users and maintain security
Process transactions via the Apple App Store
Provide customer support and respond to inquiries
Personalize your experience and content
Facilitate AI image generation via third-party providers
Sync your data across devices via iCloud
Provide customer support

3.2 Communication

Send transactional emails (account verification, password resets, receipts)
Send service-related notifications and updates
Respond to your comments, questions, and requests
Send newsletters and marketing communications (with your consent)
Conduct surveys and gather feedback

3.3 Analytics and Improvement

Analyze usage patterns and trends
Conduct research and development
Test new features and improvements
Monitor and analyze App performance
Debug and fix technical issues
Generate aggregated, anonymized statistics

3.4 Advertising and Marketing

Illustrate does not display advertisements, conduct marketing tracking, or use any advertising identifiers. There is no ad-supported tier and no marketing automation within the App.

3.5 Security and Compliance

Detect, prevent, and investigate fraud, abuse, and security incidents
Verify user identity and prevent unauthorized access
Enforce our Terms of Service and policies
Comply with legal obligations and requests
Protect our rights, property, and safety
Conduct audits and maintain records

3.6 Business Operations

Facilitate mergers, acquisitions, or asset sales
Manage business relationships with partners
Maintain business records and analytics
Exercise or defend legal claims

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

The App interacts with the following service providers:

Apple (iCloud and App Store): For data synchronization across your devices and purchase/license verification
AI Image Generation Providers: Your prompts and generation parameters are sent directly from your device to the AI provider you have configured, using your own API key. We do not proxy, store, or have access to these API calls. The AI providers' own privacy policies govern their handling of your data.

We do not use cloud hosting, analytics, advertising, or email marketing service providers for this App.

4.2 Analytics and Advertising Partners

The App does not use any analytics or advertising partners. No user data is shared with analytics services, ad networks, or data brokers.

4.3 Sharing Content

If you choose to share generated images via the system share sheet (e.g., to social media, messaging apps, or other destinations), this is a user-initiated action handled by your device's operating system. We do not control or track how shared content is used by those recipients.

4.4 Legal Requirements and Protection of Rights

We may disclose your information:

To comply with laws, regulations, court orders, or legal processes
To respond to government or law enforcement requests
To protect our rights, property, or safety, or that of others
To investigate and prevent fraud, security issues, or technical problems
To enforce our Terms of Service and other agreements
In connection with legal claims, disputes, or litigation

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the business transaction. We will notify you via email and/or prominent notice on our App before your information is transferred and becomes subject to a different privacy policy.

4.6 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, for any purpose including research, marketing, and analytics.

4.7 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

We Do Not Sell Your Personal Information: We do not sell, rent, or trade your personal information to third parties for monetary consideration. This includes compliance with California's "Do Not Sell My Personal Information" requirement.

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

Encryption of data in transit (TLS/SSL) and at rest (AES-256)
Secure authentication protocols and password hashing
Firewalls and intrusion detection systems
Regular security testing and vulnerability assessments
Secure coding practices and code reviews

5.2 Organizational Safeguards

Access controls and role-based permissions
Employee training on data protection and privacy
Confidentiality agreements with employees and contractors
Incident response and data breach procedures
Regular security audits and compliance reviews

5.3 Limitations

Despite our efforts, no security measures are 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activities under your account.

If you become aware of any unauthorized access or security breach, please contact us immediately at support@avgeek.io.

6. Data Retention

We retain your information for as long as necessary to:

Provide our Services and maintain your account
Fulfill the purposes described in this Privacy Policy
Comply with legal, regulatory, tax, or accounting requirements
Resolve disputes and enforce our agreements

6.1 Retention Periods

AI Provider API Keys: Stored locally on your device and in iCloud Keychain until you remove them from the App or delete them from your Keychain
Generated Images and Prompts: Stored locally on your device and synced via iCloud until you delete them within the App or remove them from iCloud
App Preferences and Settings: Stored locally and synced via iCloud until you reset or delete them
Crash Reports and Diagnostics: Retained by Apple according to Apple's standard data retention policies
Support Communications: Retained for as long as necessary to provide ongoing support and resolve issues

Since the App stores data primarily on your device and in your personal iCloud account, you have direct control over your data retention. Deleting data from the App or from iCloud removes it from our reach.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

Request access to the personal information we hold about you
Receive a copy of your information in a structured, machine-readable format
Request transfer of your information to another service provider (data portability)

7.2 Correction and Updates

Correct inaccurate or incomplete personal information
Update your profile and account settings

7.3 Deletion and Erasure

Request deletion of your personal information ("right to be forgotten")
Delete your account through the App settings

7.4 Objection and Restriction

Object to certain processing of your information (e.g., direct marketing)
Request restriction of processing under certain circumstances
Opt-out of targeted advertising

7.5 Withdraw Consent

Withdraw consent for processing based on consent at any time
Unsubscribe from marketing communications
Revoke permissions (e.g., location access) through device settings

7.6 Automated Decision-Making

Not be subject to decisions based solely on automated processing that significantly affect you
Request human review of automated decisions

7.7 Complaint to Supervisory Authority

If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

7.8 How to Exercise Your Rights

To exercise any of these rights:

In-App: Use the privacy settings and account management features
Email: Contact us at support@avgeek.io
Website: Visit our privacy portal at https://www.illustrate.so/privacy

We will respond to your request within:

30 days (GDPR/UK GDPR)
45 days (CCPA), with possible 45-day extension
As required by applicable law

We may require identity verification before processing your request to protect your privacy and security.

8. Children's Privacy

Illustrate is not intended for, and we do not knowingly collect personal information from, children under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@avgeek.io.

If we discover that we have collected personal information from a child under 18, we will take steps to delete such information as quickly as possible.

8.1 Age Verification

We may implement age verification mechanisms to prevent underage access. If you are between 18 and 18 years old, you represent that you have your parent or guardian's permission to use the App.

9. International Data Transfers

Illustrate operates globally, and your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States and other countries where our service providers operate.

9.1 Transfer Mechanisms

We ensure appropriate safeguards for international data transfers:

Standard Contractual Clauses (SCCs): We use European Commission-approved SCCs for transfers from the EEA/UK
Adequacy Decisions: We rely on adequacy decisions where applicable
Data Processing Agreements (DPAs): We enter into DPAs with service providers that include appropriate safeguards
Privacy Shield Replacement Mechanisms: We comply with post-Privacy Shield requirements

9.2 Cross-Border Transfer Consent

By using our App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

10.1 Right to Know

You have the right to request:

Categories of personal information collected
Categories of sources from which information is collected
Business or commercial purpose for collecting information
Categories of third parties with whom we share information
Specific pieces of personal information we have collected about you

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

10.3 Right to Correct

You have the right to request correction of inaccurate personal information.

10.4 Right to Opt-Out

We do not "sell" or "share" your personal information as defined by the CCPA
You have the right to opt-out of the sale or sharing of personal information
To opt-out, visit our privacy portal or email support@avgeek.io

10.5 Right to Limit Sensitive Personal Information

You have the right to limit the use and disclosure of sensitive personal information to that which is necessary to provide our Services.

10.6 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights, including by:

Denying goods or services
Charging different prices or rates
Providing different quality of services

10.7 Authorized Agent

You may designate an authorized agent to submit requests on your behalf. We may require verification of your identity and your agent's authority.

10.8 California Shine the Light Law

California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes without your consent.

11. Nevada Privacy Rights

Nevada residents have the right to opt-out of the sale of certain personal information to third parties. We do not sell your personal information as defined under Nevada law. If you have questions, contact us at support@avgeek.io.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights:

12.1 Data Controller

Avgeek, Inc. is the data controller for the personal information we collect through the App.

12.2 Your Rights

Right of access, rectification, and erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority
Right not to be subject to automated decision-making

12.3 Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer:

Email: dpo@avgeek.io
Address: 8080 Westpark Drive, STE 88366, Houston, TX, 77063 US

12.4 EU Representative

If required, our EU Representative can be contacted at: [EU Representative Contact Information]

13. Other Regional Privacy Rights

13.1 Brazil (LGPD)

Brazilian residents have rights under the Lei Geral de Proteção de Dados (LGPD), including access, correction, deletion, and portability rights.

13.2 Australia (Privacy Act)

Australian residents have rights under the Privacy Act 1988, including access to and correction of personal information.

13.3 Canada (PIPEDA)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA).

13.4 Other Jurisdictions

Residents of other jurisdictions may have additional rights under applicable local privacy laws. Contact us to learn more about your specific rights.

14. Data Storage

Illustrate is a native iOS/iPadOS/macOS application and does not use cookies, web beacons, pixels, or any web-based tracking technologies.

API Keys: Stored securely in your device's Keychain and synced across your Apple devices via iCloud Keychain
Images, Prompts, and Metadata: Stored locally on your device and synced via iCloud if enabled
App Preferences: Stored locally using standard system storage mechanisms
No Cookies: The App does not use cookies of any kind
No Web Tracking: There are no tracking pixels, web beacons, or advertising identifiers
No Advertising Identifiers: The App does not access or collect the IDFA or any advertising identifier

15. Third-Party Links and Services

The App may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website and service you interact with.

15.1 Third-Party Integrations

AI Image Generation Providers: When you configure an AI provider and generate images, your prompts are sent directly to that provider's API. Each provider has its own privacy policy governing how they handle your data. We strongly encourage you to review the privacy policies of any AI provider you connect to the App.
Apple App Store: Your purchase of the App is processed by Apple. Apple's privacy policy governs how they handle purchase and payment information.

We do not integrate with advertising networks, social media platforms for login, or third-party analytics services.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

Notify affected users without undue delay
Notify relevant supervisory authorities as required by law
Provide information about the nature of the breach, potential consequences, and mitigation measures
Take steps to prevent future breaches

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

17.1 Notification of Changes

We will notify you of material changes by:

Posting the updated Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification to registered users
Displaying an in-app notification
Obtaining your consent if required by law

17.2 Continued Use

Your continued use of the App after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the changes, please stop using the App and delete your account.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@avgeek.io

Address: 8080 Westpark Drive, STE 88366, Houston, TX, 77063 US

Website: https://www.illustrate.so

Phone: +1(989)-8000-022

Data Protection Officer: dpo@avgeek.io

Response Time: We will respond to your inquiry within 48-72 hours for general inquiries and within the time period required by applicable law for formal requests.

Acknowledgment: By using Illustrate, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Version: 2.0