Privacy Policy
Effective Date: October 11, 2026
EraserApp Operator: Yao Xie Contact: eraserapp@outlook.com Effective Date: October 11, 2026
This Policy describes how EraserApp handles information when you use the EraserApp iOS app and related support pages.
This Policy is the full legal disclosure. The in-app Cloud AI consent sheet is only a short summary plus a link to this page.
1. About EraserApp and this Policy
EraserApp is an iOS photo editor operated by Yao Xie. You do not need to create a username-and-password account. We issue an app-specific identifier for the service functions described below. You can contact us at eraserapp@outlook.com.
The controlling idea is simple:
On-device features keep your photos on your device. Content leaves your device only when you choose a cloud-powered feature or you send us something, such as a support message.
Granting photo-library access does not upload your camera roll.
2. On-device processing
These flows are designed to stay on your iPhone:
- browsing and selecting photos;
- on-device object removal;
- Basic Enhance;
- local preview, undo/redo, and export to your library.
We do not treat that on-device use as collecting your photos for EraserApp’s servers. Export is designed to strip GPS location from saved JPEGs.
3. Information we process
Depending on how you use EraserApp, we may process:
| Category | Examples | When |
|---|---|---|
| Photos you choose for Cloud AI | The image you send to Pro Enhance or similar cloud modes | Only after you start that feature and accept Cloud AI consent |
| Text you submit for Cloud AI | AI Edit prompts | Only when you send an AI Edit request |
| Compressed analysis copies | Reduced-size copies of cloud inputs and each cloud result, plus limited metadata about the request, such as the processing capability, terminal task status, relevant timestamps, and whether an archived input or result copy is available | After a cloud task you requested |
| Purchase and subscription data | Subscription status, products, trial eligibility, purchase/restore status, and Apple-signed transaction information used by EraserApp cloud services for verification, regional usage allowances, and identity recovery | When you subscribe or restore; processed with Apple, EraserApp cloud services, and RevenueCat |
| Technical identifiers we issue | An opaque canonical_user_id that is not your Apple ID or a transaction number |
When identity / subscription / analytics services are used |
| Product-interaction and usage data | Feature usage and usage events, without photo or prompt content | When you use the app |
| Feedback and support | Feedback text, an email address you provide, attachments you choose to submit, and limited technical information needed to investigate the issue | When you submit feedback or contact support |
You choose a photo for Cloud AI only when you start that feature; we upload only the photo you selected, not your whole library.
The canonical_user_id is an app-specific identifier EraserApp issues. It is not your Apple ID, it is not a payment card number, and we do not use a raw App Store transaction identifier as an analytics identity.
When you submit feedback, we use the information you provide to respond to your feedback, investigate reported issues, maintain support records, and improve EraserApp.
If you provide an email address, we may use it to contact you about that feedback, including to ask for additional information or provide updates related to the issue you reported.
We do not use an email address provided through feedback for advertising, marketing, newsletters, or promotional messages.
4. Cloud AI processing
Cloud AI features (including Pro Enhance modes and AI Edit) run only after:
- you explicitly start the feature;
- you accept Cloud AI consent (or we already have a valid backend consent record); and
- the request is admitted (including any entitlement and fair-use checks).
Then the photo you selected, and for AI Edit the prompt you typed or chose, is uploaded to EraserApp’s cloud infrastructure and may be sent to third-party AI processing providers so we can return a result.
Consent is required before reserve, payload generation, or upload. Cancel means we do not upload for that request.
Cloud processing is used to provide, improve, and protect EraserApp’s AI features:
- Provide means complete the edit or enhancement you asked for.
- Improve means the limited product and scene analysis described in Section 5.
- Protect means security, abuse prevention, and operating the service safely.
5. Product and scene analysis
For each cloud task, we may keep compressed copies of:
- the input image; and
- each cloud processing result,
together with limited metadata about the request, such as the processing capability, terminal task status, relevant timestamps, and whether an archived input or result copy is available.
Purpose: product analysis, understanding editing and use cases, service improvement, and security / abuse prevention.
Period: up to 30 days, then deletion. Limited metadata stored as part of an analysis archive is deleted with that archive. This image-copy limit does not set the retention period for prompts or the separate business records described in Section 10.
These copies are not full-resolution originals kept “just in case,” and they are not a public gallery.
Within EraserApp-controlled cloud storage, input uploads are deleted as soon as practicable after a task finishes, fails, or is canceled; abandoned uploads are deleted within 24 hours. Full-resolution result images are retained for no more than one hour. These shorter windows are separate from the 30-day compressed analysis copies. Third-party processing and storage are addressed separately in Sections 6 and 9.
6. AI training and model improvement
EraserApp does not use your photos or prompts to train generative AI models.
The 30-day analysis copies in Section 5 are not used to train EraserApp generative models.
We use third-party AI processing providers (including fal.ai, and possibly other model providers behind that infrastructure). Those providers receive the content needed to run the job you requested. We do not promise that no provider may ever use any derived or aggregated usage data in their own systems. Provider contracts can allow anonymized or aggregated usage data for their analytics or product development. The restrictions that apply to a provider depend on the applicable service and model terms, including any exceptions for particular models. This Policy does not promise that every provider uses no derived data for any model-related purpose.
7. Subscriptions
If you subscribe, Apple processes your App Store payment.
EraserApp uses RevenueCat to manage subscription status, purchase verification, entitlement access, introductory-offer eligibility where available, and restore functionality.
RevenueCat may process purchase history and an app-specific user identifier that EraserApp provides. EraserApp cloud services also receive Apple-signed transaction information to verify subscription-related claims, determine regional usage allowances, and recover an app-specific identity. The original signed transaction is processed for verification rather than kept as a business record; necessary derived verification and identity fields may be retained. EraserApp does not use your Apple ID or raw App Store transaction identifiers as analytics identities.
Prices, trial eligibility, renewal terms, and billing are those shown by Apple at the time of purchase.
You can manage or cancel your subscription through your Apple ID subscription settings.
8. Analytics
EraserApp uses PostHog for product analytics to understand feature usage, product performance, and reliability.
We may collect limited product-interaction and usage information, such as which features are used and whether product flows complete successfully.
We do not send your photos, AI prompts, image URLs, or raw App Store transaction identifiers to PostHog.
EraserApp does not use PostHog for cross-app tracking or advertising. Session replay is disabled.
9. Service providers and data sharing
We share information only as necessary to operate EraserApp.
- Cloudflare — cloud hosting, storage, service infrastructure, and hosting of EraserApp’s public legal and support pages.
- AI processing providers — including fal.ai and models or processing infrastructure they host or route to, to perform Cloud AI edits requested by you.
- Apple — App Store distribution, purchases, subscription billing, and system services.
- RevenueCat — subscription verification, entitlement management, purchase status, and restore functionality.
- PostHog — product analytics and reliability measurement.
- Professional advisers or authorities — where required by law or reasonably necessary to protect EraserApp or its users.
We do not sell your photos.
Third-party AI providers may process both the image and prompt and may store request information and media under their applicable terms and technical settings. Deletion of an EraserApp-controlled copy does not itself delete a provider-controlled copy. Provider safeguards, subprocessors, transfers, and deletion arrangements depend on the applicable processing agreement and model terms. We handle requests concerning provider-held information through the arrangements available for the relevant provider and applicable law.
AI providers and models may change as we improve EraserApp. We may change service providers as EraserApp’s infrastructure evolves. When a change materially affects how personal data is processed, we will update this Policy.
10. Data retention
| Data | Retention |
|---|---|
| On-device photos and edits | Remain on your device until you delete them |
| Cloud input/upload images in EraserApp-controlled storage | Deleted as soon as practicable after the task reaches a terminal state; abandoned uploads within 24 hours |
| Cloud result images in EraserApp-controlled storage | No more than one hour |
| Compressed analysis images and their accompanying archive metadata | Up to 30 days, then deleted |
| AI Edit prompts | Kept with the task record as needed to handle the requested task, investigate failures, protect the service, and meet applicable legal requirements; no automatic 30-day deletion period |
| Task records and operational task metadata | As needed for service operation, support, security, reconciliation, and legal obligations |
| Usage ledgers, usage accounts and periods, and regional usage tiers | As needed to operate usage allowances, reconcile service activity, prevent abuse, and meet legal obligations |
| App-specific identity, recovery anchors, and consent records | As needed for identity and subscription recovery, recording Cloud AI permission, service security, and legal obligations |
| Subscription records handled by Apple and RevenueCat | Under the applicable processor arrangements and legal requirements |
| Feedback and support records | Up to 365 days, subject to earlier deletion requests and applicable legal requirements |
| Feedback attachments | Up to 90 days, subject to earlier deletion requests and applicable legal requirements |
Prompts and necessary business records do not have the periodic image-deletion timetable. We retain them only for as long as needed for the purposes stated here and applicable legal requirements, and address deletion requests as required by law. They are not retained unconditionally forever. Retaining a task record does not extend the availability of an expired EraserApp-controlled image.
Third-party AI processing and storage follow the applicable provider arrangements discussed in Sections 6 and 9; the EraserApp image-deletion windows above do not represent verified deletion periods for provider-controlled copies.
You may ask us to delete cloud, feedback, or support information we hold by emailing eraserapp@outlook.com. Device-only photos are deleted by you on the device.
11. International data transfers
Cloud infrastructure and AI providers may process data in countries other than where you live. Where we transfer information, we do so to provide the service you requested and the limited analysis described above.
12. Security
We use access controls, least-privilege server keys (clients do not hold AI provider keys), and short-lived working files. No method of transmission is perfectly secure. Do not upload content you are not allowed to process.
13. Your choices and privacy rights
You can:
- cancel Cloud AI consent at the sheet and refuse upload;
- avoid Cloud AI features entirely and stay on-device;
- manage notifications and photo access in iOS Settings;
- cancel subscriptions in Apple subscription settings;
- email eraserapp@outlook.com to ask what cloud information we hold or to request correction or deletion.
Canceling the consent sheet prevents upload for that attempt. The current app does not provide an in-app control to revoke an already accepted Cloud AI consent record. You can stop future cloud uploads by not using Cloud AI features. You may contact us to exercise rights available under applicable law, including any right to withdraw consent; we will assess and respond to the request under that law.
Depending on where you live, local law may give you additional rights. We will not discriminate against you for exercising rights the law provides.
14. Children
EraserApp is not directed to children under 13. Where local law requires a higher age, that higher age applies.
Cloud AI features are currently available only to users who are at least 18 years old, or the age of legal majority where they live if higher. See also the Terms of Use.
15. Changes to this Policy
We may update this Policy. The Effective Date at the top will change. Material changes that affect Cloud AI will be reflected in this page; we may also ask for consent again if the purpose of upload changes.
16. Contact us
Yao Xie eraserapp@outlook.com