Privacy Policy · FanKit
Last Updated: 2026/10/5
1. Introduction
FanKit is an app provided by Tunahan Aktay (“we”, “us”, or “our”), who is committed to protecting your privacy. This Privacy Policy applies to FanKit and its various versions and is part of our Terms of Use. This policy explains what data the app processes, why, and your choices. Before your first photo is sent for AI processing, the app asks for your permission and names the AI providers involved; if you decline, no photo is sent. FanKit shows no ads and does not track you across other companies’ apps or websites.
None of the data collected by this app is linked to your identity: we never collect your name, email address or account.
2. Who We Are
FanKit is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.
3. Data We Collect
We collect the following categories of data, none of which is linked to your identity:
User Content
Photos or Videos: Used for App Functionality
You may upload or capture photos solely to create AI fan photos: jersey swaps, match and fan zone scenes, and landmark portraits in a national team’s colors. Photos are sent to our AI providers (see section 4) for processing. We never store them on our own servers, and section 4 explains how long the providers keep them. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app. We do not store, extract, or analyze facial features for identification or profiling purposes.
Identifiers
Device ID: Used for App Functionality, and Analytics
A device identifier is collected to keep AI requests secure and to prevent abuse. Firebase also assigns a random identifier for analytics. These identifiers are random and not linked to your name, email address or account.
Location
Coarse Location: Used for Analytics
Firebase Analytics estimates your approximate country and city from your IP address. We do not request or collect your precise location.
Purchases
Purchase History: Used for App Functionality, and Analytics
If you make in-app purchases, transaction data is processed by Apple and RevenueCat to manage your subscription. This data is used to provide access to premium features and to analyze purchasing trends in aggregate. RevenueCat also receives Apple’s install attribution token, which tells us whether the app was found through an Apple Search Ads campaign; Apple provides it without identifying you.
Usage Data
Product Interaction: Used for Analytics
We collect data about how you interact with the app (e.g., screens viewed, features used) through Firebase Analytics. This helps us understand how the app is used and identify areas for improvement.
Diagnostics
Crash Data: Used for App Functionality
Crash reports are collected through Firebase Crashlytics to help us identify and fix issues that affect app stability.
Other Diagnostic Data: Used for App Functionality, and Analytics
Additional diagnostic information (e.g., error logs) may be collected to monitor app health and improve reliability.
Other Data
Other Data Types: Used for App Functionality
Your IP address is used to keep AI requests secure and to prevent abuse.
4. Face Data Collection, Use, and Retention
This section describes in detail how FanKit handles face data in compliance with Apple’s App Store Review Guidelines (5.1.1).
What face data does the app collect?
FanKit does not collect, store, or share face data. Photos you send for a fan photo are processed as whole images; no face-specific data is extracted from them.
How is face data used?
Photos containing faces are used solely to create the fan photo you choose. The processing is entirely automated by AI models that apply visual transformations to the image. The app does not perform facial recognition, identity analysis, or any form of biometric identification. No face data is used for advertising, profiling, or any purpose beyond delivering the requested transformation.
Is face data shared with third parties?
Photos you choose to transform are sent through AIProxy, a secure relay that forwards the request without storing it, to OpenRouter, Inc., which passes it to Google’s AI model that creates your result. AIProxy and OpenRouter do not store the photo. Google may keep request data, including the photo, for a limited period under its own terms, for example to detect abuse, and then deletes it. No face data, biometric identifiers, or facial features are extracted.
No other third party receives your photos.
How long is face data retained?
No face data is extracted, so none is retained. We do not keep any copies, backups, or derivatives of your photos on our servers. Google may keep request data, including the photo, for a limited period under its own terms, for example to detect abuse, and then deletes it.
Summary
| Question | Answer |
|---|---|
| Face data collected? | No. Photos processed as whole images; no face data extracted. |
| Face data stored? | No. No face data is extracted. Google may keep the photo itself for a limited period, as described above. |
| Biometric analysis performed? | No. No facial recognition or identity analysis. |
| Face data shared? | Photos are relayed by AIProxy and OpenRouter and processed by Google to create your result. |
| Providers store face data? | AIProxy and OpenRouter do not store photos. Google may keep request data for a limited period under its own terms. |
| Face data used for profiling? | No. Used solely for visual transformation. |
5. How We Process Your Photos
- Temporary processing: Uploaded photos are sent through AIProxy to OpenRouter, Inc. and processed by Google’s AI model to create your fan photo.
- No storage on our servers: Once the transformation is complete, the image is returned to your device. We do not store photos on our own servers. Google may keep request data, including the photo, for a limited period under its own terms, for example to detect abuse, and then deletes it. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app.
- No biometric analysis: The app does not extract or analyze facial features for identification or profiling purposes. No biometric identifiers are created, inferred, or retained.
- No human review: All processing is handled by automated AI models. No person views your photos, unless you choose to send one to us when asking for support.
- Legal bases: We process photos with your consent, given in the app before your first transformation; analytics and crash data on our legitimate interest in keeping the app working and improving it; security data, such as your IP address, on our legitimate interest in preventing abuse; and purchase data to provide your subscription.
6. Third-Party Services
We use the following third-party services:
- OpenRouter, Inc.: AI-powered photo transformations. Passes each photo to the AI model and does not store or reuse it.
- Google: Runs the AI model that creates your result. Google may keep request data, including the photo, for a limited period under its own terms, for example to detect abuse, and then deletes it.
- RevenueCat: Subscription and purchase management. Collects device identifiers and purchase history to manage entitlements, and Apple’s install attribution token for Apple Search Ads.
- Firebase Analytics: Usage analytics. Collects device identifiers, product interaction data, and approximate location derived from your IP address.
- Firebase Crashlytics: Crash reporting and diagnostics. Collects crash data and diagnostic information.
- Firebase Remote Config: Delivers app settings; receives a Firebase installation ID and IP address to do so.
- AIProxy: Secure AI service routing. Uses a random, stable device identifier and your IP address for security. Photos pass through without being stored.
- Apple In-App Purchases: Secure transaction handling.
These services process data only to the extent required for their core functions. None of the data collected is linked to your personal identity.
7. Data Retention
- Photos: Never stored on our servers. Google may keep request data, including the photo, for a limited period under its own terms, for example to detect abuse, and then deletes it. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app.
- Face data: Not retained. No face data is extracted, stored, or retained at any point.
- Analytics and diagnostics: Analytics events and diagnostics are kept by Firebase Analytics and Crashlytics under random identifiers for as long as their retention settings allow, and are then deleted.
- Purchase information: Managed by Apple and RevenueCat under their respective privacy and retention policies.
- No user data is linked to personal identity.
8. Data Security
- All data transmission between your device, our services, and third-party providers is encrypted.
- We never receive your photos, unless you send one to us for support; they go only to the AI providers named above, and stay on your device in History.
- We do not store or share biometric or facial data, and we never analyze it to identify you.
- We apply appropriate technical and organizational measures to protect your data. While no system can guarantee 100% security, we continuously work to safeguard your information.
9. Children’s Privacy
FanKit is not intended for children under 13, or under the minimum age of digital consent in your country if higher. We do not knowingly collect any data from children. If you believe data was shared with us in error, please contact us at tunahanaktay.apps@gmail.com and we will help delete it.
10. International Transfers
Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.
11. Your Rights
Depending on where you live, including Turkey, the EU, the UK and California, you can ask to access, correct or delete your personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because the data we collect is not linked to your identity, we may be unable to find records that belong to you; email us and we will help as far as we can. You can delete all stored photos from History or by deleting the app. We do not sell your personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: tunahanaktay.apps@gmail.com