Privacy Policy

1. Overview

This Privacy Policy explains how Picha AI ("Picha AI", "we", "us" or "our") handles personal information when you visit picha-ai.com, create an account, purchase credits or subscriptions, upload photos, use AI features, join referral or affiliate programmes, receive messages, or contact support.

By using Picha AI, you acknowledge the practices described here. This policy should be read together with our Terms and Conditions.

2. Information we collect

Information you provide

• Account details such as your name, email address or phone number, password hash and verification status.
• Photos, garments, reference images, prompts, names and other content submitted for image generation.
• Payment information such as payer phone number, package, amount, order reference and payment status. We do not need to store your mobile-money PIN.
• Affiliate, referral, campaign and support information you submit.

Information collected automatically

• IP address, device and browser information, timestamps, session and security events.
• Feature usage, generation status, credits used, errors, link clicks and conversion events.
• Cookies or similar technologies needed for sign-in, preferences, security and attribution.

3. How we use information

• Provide, personalize and improve Picha AI services.
• Authenticate accounts, deliver OTPs and protect against abuse or fraud.
• Process AI requests and return generated images.
• Process payments, allocate credits or subscriptions, and maintain financial records.
• Measure service performance, referrals, affiliate commissions and marketing campaigns.
• Send transactional messages and, where permitted, marketing messages.
• Respond to support requests, enforce our terms and comply with legal obligations.

4. Photos and AI processing

Your uploaded photos and instructions are processed to provide the feature you request. Depending on the selected feature and model, content may be securely transmitted to third-party AI infrastructure providers acting for us. Generated results and source images may be stored so you can view your history, download results, receive support and so we can investigate failed requests.

Do not upload content you do not have permission to use. Avoid uploading highly sensitive documents or information unless necessary for the requested service.

5. When information is shared

We do not sell personal information. We may share the minimum information necessary with:

• AI model and cloud infrastructure providers that process images or host the service.
• Payment, SMS, storage, analytics and content-delivery providers.
• Professional advisers, regulators or law-enforcement bodies where legally required.
• A successor entity in a merger, acquisition or transfer of the service, subject to appropriate safeguards.

6. Payments, referrals and marketing

Payment providers process payer details under their own privacy terms. Picha AI records payment outcomes to deliver purchased services and support reconciliation.

Referral, affiliate and shared links may contain short identifiers. We record valid clicks, registrations and purchases to award credits or commissions and detect manipulation. SMS links may similarly record opening and conversion events. Marketing messages should include a reasonable way to opt out; transactional and security messages may still be sent when necessary.

7. Cookies and local storage

We use essential cookies for sessions, account security and remember-me functionality. We may also use storage or identifiers for language, app preferences, link attribution and fraud prevention. Blocking essential cookies may prevent sign-in or other features from working correctly.

8. Data retention

We retain information only as long as reasonably needed for the purposes above, account history, dispute resolution, fraud prevention and legal or accounting obligations. Retention periods vary by data type. You may request account or content deletion, but some transaction, audit, commission or security records may need to be retained or anonymized.

9. Security

We use reasonable administrative and technical safeguards, including access controls, password hashing, secure sessions and monitoring. No internet service is completely secure. Keep your password and OTP confidential and notify us promptly if you suspect unauthorized access.

10. Your choices and rights

Subject to applicable law, including Tanzania's Personal Data Protection Act, 2022, you may ask to access, correct or delete personal information, object to or restrict certain processing, withdraw consent where processing relies on consent, or opt out of marketing.

We may need to verify your identity before acting on a request. Some rights may be limited where retention is required by law or needed to protect other users and the service.

11. Children

Picha AI is not intended for children who cannot legally consent to these services. A parent or guardian should supervise use by a minor and must have permission for any photo uploaded.

12. International processing

Some service providers may process information outside Tanzania. Where this happens, we take reasonable steps to use providers and arrangements designed to protect the information in line with applicable requirements.

13. Changes and contact

We may update this policy as the service or law changes. The updated date will appear at the top of this page, and material changes may be communicated in the app or by message.

For privacy questions or requests, contact Picha AI support on WhatsApp at +255 624 089 337.