Privacy policy
Last updated: 28 October 2026
This policy covers Little Finds for iPhone and iPad and littlefinds.kids. The app is currently in testing; paid purchases are not yet available.
Operator and data controller
AI Solutions Piotr Truszkowski
ul. Duchnicka 3/16, 01-796 Warszawa, Poland
contact@littlefinds.kids
Your collection
Photos, cutouts, generated images, names and stories are saved on your device. Background removal is local. We do not provide cloud backup or collection sync. Deleting a find removes it from the app’s local collection; removing the app can remove the entire collection. Exported pictures, shared copies and device backups are managed separately by you and the services you choose.
Optional AI
Ordinary collecting works without AI. Before AI features are enabled, we ask permission to send images and relevant information through our backend to OpenAI. Recognition uses an image, language and existing category vocabulary to suggest names and categories. Optional enchantment produces a fictional name, story and transformed image. This is not factual identification or a decision about a person.
Permission also covers recognition of waiting finds, not just the image currently on screen. Turn AI off in Settings to stop future AI processing. Withdrawal does not undo completed processing or automatically delete data previously sent to a provider.
OpenAI states that API data is not used for model training by default. Its standard abuse-monitoring logs may retain content for up to 30 days, with longer retention for certain legal or safety reasons. Images flagged for possible child sexual abuse material may be retained for review. We do not promise zero retention. See OpenAI’s API data controls.
Technical records and purchases
Network services process IP addresses, request times and technical errors to deliver and protect the service. Our application logs include processing duration, request size, status and model usage, not intentionally your photographs or stories.
For limits, the app uses a random installation identifier and authentication secret in the device Keychain. The server stores the identifier, a hash of the secret, request fingerprints, attempt status and delivery records. These identifiers are pseudonymous, not guaranteed anonymous. No email or password account is required.
When purchases are enabled, Apple handles payment. For the one-time Full Chest unlock, StoreKit verifies ownership on your device; this does not upload your collection to our server. For Magic Plus, we verify transaction identifiers, product, purchase and expiry dates, status and installation links on our backend to administer enchantment allowances and restore access. We do not receive payment card details. The usage database does not contain your photo collection, generated images or stories.
Purposes and legal bases
We rely on consent for optional AI image processing (GDPR Article 6(1)(a)); performance of the service contract for requested service delivery, support and purchase administration (Article 6(1)(b)); legitimate interests in security, preventing fraud and duplicate charges, and resolving disputes (Article 6(1)(f)); and applicable legal obligations (Article 6(1)(c)). You may object to processing based on legitimate interests. AI does not make decisions about you with legal or similarly significant effects.
Providers and international processing
We use Render for the backend and PostgreSQL database, OpenAI for AI processing, and OpenAI Sites hosting infrastructure for this website. Support mail is forwarded through Namecheap to Gmail. Apple handles App Store payments and device backups you enable under its own terms.
Providers may process information outside Poland and the European Economic Area, including the United States. Applicable provider data-processing terms and transfer safeguards, such as standard contractual clauses where relevant, govern that processing. Contact us for information about safeguards applicable to your data. A European backend does not mean all AI and email processing stays in Europe.
Retention
- Local collection: until you delete it or remove the app, subject to separate backups and shared copies.
- Images and results on our backend: processed in memory, with a temporary retry cache eligible for cleanup after approximately 15 minutes and cleared on process restart. Cleanup is activity-driven, not a guaranteed deletion deadline. We do not maintain a permanent server image gallery.
- Usage and subscription records: retained to administer welcome and recurring allowances, prevent duplicate processing, restore purchases and resolve disputes. There is currently no automatic time-based deletion. We assess deletion requests against those purposes and legal obligations. An expired reservation is not a deleted database record.
- Support correspondence: retained while handling a request and necessary follow-up or related disputes. You can ask us to delete correspondence no longer needed.
- Hosting/security logs and provider records: retained under the relevant provider’s practices and legal or safety requirements, including OpenAI’s rules above.
Families and children
Little Finds is intended for shared use on a parent or guardian’s device. An adult should control AI permissions, purchases and sharing. We do not ask children to create accounts or provide names, ages or contact details. Photograph objects rather than people; do not submit children’s faces, identity documents, addresses or other sensitive information to AI.
Parental supervision and the in-app prompt do not replace protections or consent required by law. If you believe a child’s personal data was sent without appropriate authorization, contact us so we can investigate and address the request, including with the relevant provider.
Your rights and deletion requests
Depending on applicable law, you can request access, correction, erasure, restriction or portability, object to processing, or withdraw consent. Email contact@littlefinds.kids. We may request proportionate information to locate and verify records; never email passwords, authentication secrets or card details. Deleting a local find does not automatically delete separate server or provider records.
We respond within applicable legal deadlines, normally one month for GDPR requests, and explain any lawful exception or extension. You may complain to the Polish supervisory authority, UODO, or your local authority. We cannot recover a collection stored only on your device.
Website and sharing
We have not added advertising pixels or analytics scripts to this website. It has no account or photo-upload form. Hosting infrastructure may use technical logs and essential security mechanisms. App Store links and email support lead to external services. Sharing from the app sends the picture and text you choose to the destination you select; check the content and recipient before sending.
Changes
We update this page as practices change and provide additional notice or request new consent where required. Publishing an update does not itself authorize new processing.