Privacy Policy
Last Updated: March 10, 2026
Introduction
This Privacy Policy explains how Appthalmology Inc. ("Appthalmology," "we," "us," or "our") collects, uses, stores, and shares information when you use the ModLab mobile application (the "App").
The latest version of this Privacy Policy is intended to be published at: https://modlab.appthalmology.com/privacy
Who We Are
ModLab is operated by Appthalmology Inc., based in Ontario, Canada. If you have privacy questions or requests, you can contact us at modlab@appthalmology.com.
Information We Collect
1. Account and Identity Information
When you use account-gated or paid features, ModLab uses Clerk-backed authentication. In the iOS launch flow, paid/authenticated access is bridged through Sign in with Apple.
Depending on what your identity provider shares with us, we may collect:
- Your Clerk account and session identifiers
- Your App account identifier in our backend
- Your email address, if provided by Apple or another identity provider
- Your display name or profile image, if provided
- A RevenueCat customer identifier used to sync subscription status
2. Content You Provide
When you use ModLab, we may collect and store:
- Car photos you upload
- Prompts and modification instructions you enter
- Template or reference images you choose to use
- Selected output format information such as square, portrait, or landscape
- Generated images returned to your account
- Support messages or other information you send us directly
3. Subscription and Transaction Information
For paid access, we receive and store subscription-related information such as:
- Plan status
- Entitlement status
- Renewal, cancellation, expiry, or billing-issue state
- Product identifiers associated with the purchase
Apple processes payment details directly. We do not receive your full payment card details.
4. Usage, Device, and Analytics Information
The App includes active PostHog analytics. We may collect:
- Screen views and app navigation events
- Taps, feature usage, and paywall interaction events
- Device and runtime metadata such as platform and app version
- Approximate diagnostic context associated with product analytics events
5. Tracking and Attribution
The App includes an App Tracking Transparency permission flow on iOS for advertising attribution.
If you allow tracking, ModLab may collect and share identifiers and attribution-related data with attribution providers so we can measure which marketing campaigns led to installs, subscriptions, or other conversion events.
This may include:
- Device or app-instance identifiers used for attribution
- Attribution and campaign metadata
- Subscription-conversion signals tied to attribution measurement
If you do not allow tracking, the attribution flow is intended to remain disabled for your device and core app functionality still works.
6. Diagnostics
The App includes active Sentry crash and performance diagnostics. This may include:
- Crash reports
- Performance traces
- Other technical diagnostic information needed to investigate failures and stability issues
7. Data Stored on Your Device
The App may also store limited local data on your device, such as:
- The currently selected car or locally cached car data
- Cached app state
- Preferences needed for the app experience
Some of that local data is cleared by in-app privacy actions, and some may remain until you delete the app or clear device storage.
How We Use Information
We use collected information to:
- Authenticate you and maintain your account
- Send your requested inputs to our backend and service providers so ModLab can generate edited images
- Store and display your uploaded and generated ModLab content
- Process, validate, restore, and sync paid entitlements
- Understand product usage and improve the App through analytics
- Detect abuse, enforce rate limits, prevent fraud, and keep the service secure
- Provide support and respond to account, data, or legal requests
- Comply with legal obligations and protect our rights
AI Image Generation and Third-Party Processing
When you request a generation, ModLab sends the content needed to fulfill that request to third-party services.
This includes:
- Your uploaded car photo
- Your prompt or modification instructions
- Your chosen output format
- Any template/reference image required for the selected generation flow
The generation provider is Kie. Kie receives the inputs above so it can generate the requested output. The resulting generated image is then stored in our backend and associated with your account.
Third-Party Services
We rely on third-party services to operate ModLab. These include:
Clerk
- Purpose: Authentication and identity/session management
- Data involved: Account identifiers, session data, and any profile details provided by your sign-in method
Convex
- Purpose: Backend infrastructure, database, file storage, and application logic
- Data involved: Account records, uploaded files, prompts, generation records, generated images, deletion actions, and related app data
Kie
- Purpose: Image generation
- Data involved: Car photos, prompts, requested output parameters, and template/reference images when applicable
PostHog
- Purpose: Product analytics
- Data involved: Usage events, screen events, device/runtime metadata, and paywall or purchase-flow analytics context
Tenjin
- Purpose: Mobile attribution and campaign measurement
- Data involved: Attribution identifiers, campaign metadata, and conversion-related attribution context for users who grant ATT permission
RevenueCat
- Purpose: Subscription and entitlement management
- Data involved: Customer identifier, subscription status, plan identifiers, and purchase/restore state
Sentry
- Purpose: Crash reporting, performance monitoring, and technical diagnostics
- Data involved: Crash data, performance data, and other diagnostic context used to investigate app failures
Apple App Store
- Purpose: iOS billing and purchase processing
- Data involved: Transaction handling, subscription billing, and Apple-controlled payment records
Notifications
The codebase contains push-notification infrastructure, including token registration and delivery code. If the App requests OS notification permission, it may store a push token associated with your account.
Data Retention
We retain personal information for as long as reasonably necessary to operate the App, provide your account, and comply with legal obligations.
- Account data is retained while your account remains active, unless you request deletion
- Uploaded car images, prompts, and generated ModLab outputs are retained until you delete them through an available product flow or delete your account/data
- Subscription and transaction-related records may be retained for support, fraud prevention, accounting, or legal compliance
- Analytics data is retained according to our provider settings and contracts
Data Deletion and Your Choices
The App includes an in-app deletion path at:
Settings > Data & Privacy
From that screen, users can initiate:
- Delete ModLab Data
- Delete Account
You can also contact us at modlab@appthalmology.com if you need help with an access, correction, or deletion request.
Data Sharing
We do not sell your personal information.
We may share information:
- With service providers that help us run the App
- When needed to complete a generation request or subscription transaction
- When required by law, regulation, legal process, or government request
- To protect the rights, safety, security, or property of Appthalmology, our users, or others
- In connection with a merger, financing, acquisition, or sale of company assets
International Transfers
ModLab is operated from Canada, but our service providers may process data in other countries, including the United States and other jurisdictions where Clerk, Convex, Kie, PostHog, RevenueCat, or Apple operate infrastructure.
If you use ModLab from outside Canada, you understand that your information may be transferred to and processed in jurisdictions with privacy laws different from those in your home country.
Children's Privacy
ModLab is not intended for children under 13, or under the minimum age of digital consent in their jurisdiction. We do not knowingly collect personal information from children in that age group. If you believe a child has provided us personal information, contact us at modlab@appthalmology.com and we will investigate and take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we may update the in-app links, revise the "Last Updated" date, and take any additional notice steps required by law.
Contact
For privacy questions or requests:
Email: modlab@appthalmology.com
Company: Appthalmology Inc.
Ontario, Canada