Privacy Policy
Last Updated: January 27, 2026
Introduction
This Privacy Policy describes how ModLab ("we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.
Appthalmology Inc., incorporated in Ontario, Canada, operates ModLab and is responsible for the processing of your personal data as described in this Privacy Policy.
The latest version of this Privacy Policy is always available at: https://modlab.appthalmology.com/privacy
Information We Collect
1. Information You Provide Directly
When you create an account and use the App, we collect:
- Account Information: Email address, name (optional), and password
- Car Photos: Images you upload for modification
- Generated Images: AI-created car modification visualizations
- Preferences: Output format preferences (square, portrait, landscape)
- Premium Subscription Data: Subscription status and purchase history
2. Information Automatically Collected
- Device Information: Platform (iOS/Android), operating system version, device identifiers, and app version
- Usage Analytics: How you interact with the app, features used, and session data
- Error and Performance Data: Technical information about app crashes, errors, and performance issues
- Push Notification Tokens: If you enable notifications
3. Information Stored Locally on Your Device
The following data may be stored only on your device and is not transmitted to our servers unless you choose to sync:
- Recent car photos
- Cached generated images
- App preferences and settings
How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide AI-powered car modification visualizations based on your photos
- Account Management: To create and manage your account, authenticate users, and provide customer support
- App Improvement: To analyze usage patterns, improve app functionality, design, and user experience
- Payment Processing: To process and manage your premium subscription
- Error Monitoring: To identify and fix technical issues and bugs
- Communication: To send you important updates about the app, subscription status, and service notifications
- Security: To detect and prevent fraud, abuse, and security incidents
AI Image Generation
The App uses artificial intelligence services to generate car modification visualizations. When you request an image generation:
- Your uploaded car photo is processed by third-party AI services
- The AI service may temporarily store your image during processing
- Generated images are stored in our database and associated with your account
- AI providers may use anonymized data to improve their models (refer to their privacy policies)
We currently use Replicate as our primary AI image generation provider.
Third-Party Services
We use the following third-party services that may collect information:
Convex
- Purpose: Backend infrastructure, database, and real-time synchronization
- Data Shared: User account information, uploaded images, generated images, and app usage data
- Privacy Policy: https://www.convex.dev/privacy
Replicate
- Purpose: AI-powered image generation
- Data Shared: Car photos you upload and generation prompts
- Privacy Policy: https://replicate.com/privacy
RevenueCat
- Purpose: Subscription and payment processing
- Data Shared: User identifier, purchase information, subscription status
- Privacy Policy: https://www.revenuecat.com/privacy
Apple App Store / Google Play Store
- Purpose: Payment processing for subscriptions
- Data Shared: Payment information, purchase history (handled directly by Apple/Google)
- Apple Privacy: https://www.apple.com/legal/privacy/
- Google Privacy: https://policies.google.com/privacy
Data Retention
- Account Data: We retain your account information for as long as you use the app or until you request deletion
- Uploaded Images: Car photos you upload are retained until you delete them or close your account
- Generated Images: AI-generated images are stored in your gallery until you delete them or close your account
- Analytics Data: Analytics and error tracking data is retained according to our service providers' policies (typically 90 days to 2 years)
- Deleted Data: When you delete your account, we permanently delete your personal data within 30 days, except where required by law to retain certain information
Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encrypted connections (HTTPS/TLS) for all data transmission
- Secure storage practices using industry-standard cloud infrastructure
- Access controls limiting who can access personal data
- Regular security assessments and updates
However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a portable format
- Opt-Out: Opt out of analytics and marketing communications
- Withdraw Consent: Withdraw consent for data processing where we rely on consent
How to Exercise Your Rights
To exercise these rights, please contact us at modlab@appthalmology.com with:
- Your registered email address
- Description of your request
- Any relevant details to help us process your request
We will respond to your request within 30 days.
In-App Data Management
You can also manage your data directly in the App:
- Delete Individual Images: Delete specific car photos or generated images from your gallery
- Delete All Data: Go to Settings > Data > Delete All Data
- Delete Account: Go to Settings > Data > Delete Account (this will permanently delete your account and all associated data)
Children's Privacy
The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at modlab@appthalmology.com and we will delete it.
Push Notifications
The app may send push notifications to:
- Notify you when your AI image generation is complete
- Send important service updates
Push notifications are:
- Optional and can be disabled at any time through the app settings or device settings
- Not used to send marketing messages or advertisements (unless you opt-in)
- Managed through your device's notification permissions
Data Sharing and Disclosure
We do not sell your personal data to third parties.
We may share your information in the following circumstances:
- With Service Providers: We share data with third-party service providers (listed above) who help us operate the App
- With Your Consent: When you explicitly consent to share your information
- For Legal Compliance: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
- To Protect Rights: To protect our rights, property, or safety, or that of our users or others
International Data Transfers
ModLab is operated from Canada, but the App is available worldwide. Your information may be transferred to and processed in countries other than your own, including:
- Canada - Where our operations are based
- United States - Where some of our service providers (Convex, Replicate, RevenueCat) are located
We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including:
- Standard contractual clauses approved by relevant authorities
- Privacy Shield frameworks (where applicable)
- Ensuring service providers comply with GDPR, CCPA, and PIPEDA requirements
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date
- Sending you a notification (if required by law)
Your continued use of the app after changes become effective constitutes acceptance of the revised policy.
California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You can request information about the personal data we collect, use, and disclose
- Right to Delete: You can request deletion of your personal information
- Right to Opt-Out: You can opt-out of the sale of your personal information (we do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at modlab@appthalmology.com with "CCPA Request" in the subject line.
European Users (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing
We process your personal data based on:
- Contract: To provide the App services you've requested
- Consent: When you've given explicit consent (e.g., for push notifications)
- Legitimate Interests: To improve our services, prevent fraud, and ensure security
Your GDPR Rights
- Right of Access (Article 15): Obtain confirmation of data processing and access to your data
- Right to Rectification (Article 16): Correct inaccurate or incomplete data
- Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
- Right to Restriction (Article 18): Limit how we use your data
- Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
- Right to Object (Article 21): Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
- Right to Lodge a Complaint: File a complaint with your local data protection authority
Data Protection Authority
For users in the EEA, you can contact your local supervisory authority if you have concerns about how we handle your data.
Canadian Privacy Laws (PIPEDA)
As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have rights including:
- The right to know why we collect, use, or disclose your personal information
- The right to access your personal information
- The right to challenge the accuracy and completeness of your information
- The right to withdraw consent (subject to legal or contractual restrictions)
To exercise your PIPEDA rights, contact us at modlab@appthalmology.com with "PIPEDA Request" in the subject line.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: modlab@appthalmology.com
Company: Appthalmology Inc.
437 Keith Crescent
Ontario, Canada
K1W 0A5
App: ModLab
Website: https://modlab.appthalmology.com
For data protection requests, please clearly indicate the nature of your request in the subject line (e.g., "GDPR Request", "CCPA Request", "Data Deletion Request", "PIPEDA Request"). We will respond within 30 days of receipt of your request.
Acknowledgment
By using ModLab, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.