AI Photo Editor - PhotoArt

""Location Data" is information that we collect regarding your location (when you use a location-enabled service), including: the location of your device when you use Application, such as from the GPS, Wi-Fi, compass, accelerometer or other sensors in your mobile device; the IP address of the device or internet service you use to access Application; and other information made available by you or others that gives an indication as to where you are or have been located."

A photo collage app collects location data from GPS, WiFi, compass, accelerometer, IP address, and even inferred location from other users' posts — far beyond what core photo editing functionality requires.

"Non-Personal Information is any information that relates to you but from which it is not practicable to directly or indirectly identify you, which may include the information about your devices (such as Your hardware model, operating system version, unique device identifiers, and mobile network information), the list of installed apps on your devices, and technical information about users means of connection to our apps."

Collecting the list of installed apps and unique device identifiers goes well beyond what a photo collage app needs, and classifying this as 'non-personal information' downplays its sensitivity.

"The data we collect can include SDK/API/JS code version, browser, Internet service provider, IP address, platform, timestamp, application identifier, application version, application distribution channel, independent deice identifier, iOS ad identifier (IDFA), Android ad master identifier, network card (MAC) address, and international mobile device identification code (IMEI)."

Collecting IDFA, Android advertising ID, MAC address, and IMEI enables cross-service and cross-device tracking and user profiling far beyond what a photo editing app requires.

"To improve our product and provide you better service, we also share personal data with vendors or agents working on our behalf for the purposes described in this privacy policy. For example, companies we've hired to provide data analytical services may need collect and access to personal data to provide those functions. ... We and our affiliate companies may share your Personal Information within our group of companies and with joint venture partners and third party service providers, marketing partners, contractors and agents."

Personal data is shared with a broad range of third parties including data analytics companies, marketing partners, joint venture partners, and contractors with vague limitations.

"We may revise this Privacy Policy from time to time. By continuing to access or use the Services after those changes become effective, you agree to be bound by the revised Privacy Policy."

The company can change the privacy policy at any time without requiring explicit consent or providing meaningful notice — continued use is treated as acceptance of new terms.

"We retain your Personal Data as long as needed to provide services or products to you, or as required or permitted by applicable laws, such as tax and accounting laws."

There is no specific deletion timeline, and the broad 'as permitted by applicable laws' language allows effectively indefinite data retention with no clear commitment to delete data after account closure.