NoviMuse

Legal

Privacy Policy.

This Policy explains how NoviMuse processes information when you create, edit, save, share, or unlock images.

Effective September 8, 2026NoviMuse for iPhone

1. Scope and operator

This Privacy Policy applies to the NoviMuse iPhone app and this support website. NoviMuse is operated by Niew Yee Yaw (“NoviMuse,” “we,” “us,” or “our”).

NoviMuse is an AI-assisted image creation app. It does not require a user-facing registration form, but it uses a device-linked anonymous identifier to secure online services and keep Creation Pass and clean-export rewards associated with the correct installation.

2. Information we process

Content you submit

  • prompts, style choices, aspect ratio, and creation mode;
  • a source image when you choose Transform Photo; and
  • generated images returned by the AI image service.

Service, reward, and purchase information

  • a pseudonymous authentication identifier, internal service identifier, and server-issued purchase account token;
  • Creation Pass and Clean Export Pass balances, generation status, timestamps, request fingerprints, and technical result metadata;
  • reward-intent status and hashed advertising transaction information used to verify rewarded ads and prevent duplicate grants;
  • App Store product, environment, purchase time, granted quantities, and a one-way hash of the verified transaction identifier used to credit purchases once and prevent replay; and
  • network and technical information that service providers may process, such as IP address, device or app information, request timing, and diagnostic categories.

Information stored on your device

Creations you choose to keep in NoviMuse, generated-image files, creation metadata, and temporary export files are stored locally in the app’s container. When you choose Save to Photos, NoviMuse requests Add Photos Only access and does not request permission to read your photo library.

Support communications

If you contact us, we receive your email address and the information you include in your message. Please do not send passwords, authentication tokens, payment information, or private source images.

3. How we use information

We process information to:

  • authenticate requests and protect online generation;
  • generate or transform images according to your instructions;
  • deliver generated images and maintain Creation Pass and Clean Export Pass balances;
  • verify rewarded ads and App Store purchases, unlock clean exports, prevent duplicate credits, fraud, and abuse;
  • save creations and prepare exports you request;
  • diagnose failures, secure the service, and improve reliability; and
  • respond to support, privacy, purchase, and legal requests.

We do not use your Contacts, precise location, microphone, or photo-library contents. A photo is processed only when you select it for Transform Photo.

Permission for AI processing

Before an online AI creation, NoviMuse asks for your explicit permission to share your prompt, style and image settings with OpenAI through NoviMuse’s service hosted by Cloudflare. For Transform Photo, this also includes your selected photo and any faces or other personal information visible in it. OpenAI uses this content to create the image you request. Selecting a photo alone does not upload it.

You may choose Not Now or close the disclosure without submitting content. Permission applies to later creations until you withdraw it in Settings → AI Data Sharing. NoviMuse asks again when the disclosure changes materially. Withdrawal stops future submissions, including retries, but cannot recall a request already sent or erase provider safety records. You can browse the app and access existing local creations without granting AI permission.

Photos containing faces

Collection and use

When you select a photo for Transform Photo, the image may contain a face. NoviMuse processes the visible face as part of the photo to perform the transformation you request. Generated images may also contain faces. NoviMuse does not extract or store facial landmarks, face geometry, face templates, face embeddings, or biometric identifiers, and does not use face recognition to identify or authenticate people. NoviMuse does not use face content for advertising, tracking, profiling, or training its own AI models.

Sharing and storage

After you give AI-sharing permission and start a creation, your selected photo and instructions travel over encrypted connections through NoviMuse’s Cloudflare-hosted service to OpenAI. OpenAI processes the image, including any visible faces, to return your requested result and performs safety checks. NoviMuse does not send your prompts or photos to Firebase Authentication or Google AdMob. Cloudflare hosts the request-processing service and private storage for generated images; OpenAI may retain submitted and generated content under its API safety policies. Processing may occur outside your country; NoviMuse does not promise storage in a particular country.

Retention and deletion

The selected source photo is held in app memory while you prepare or retry a creation. NoviMuse’s server processes it for the request and does not deliberately save the raw source photo or raw prompt in its database, generated-image storage, or application logs. Clearing or replacing the selected photo releases the selection; closing the app ends its in-memory lifetime. Your original photo remains in your Photos library.

Generated images, including any faces in them, are stored in NoviMuse’s private cloud image storage for delivery and retries, with a 30-day expiry rule. Lifecycle deletion is asynchronous, so removal may complete after the expiry threshold. Successful Delete Guest Account removes the associated cloud images earlier. Generation metadata and request fingerprints contain no raw photo or facial template and remain until guest-account deletion. The 30-day image expiry does not automatically delete those database records.

Locally saved generated images remain until you delete them from Creations, successfully delete your guest account, or remove the app’s local data. Deleting one creation removes the local copy, not its cloud copy. Uninstalling NoviMuse does not delete the cloud guest account. To delete NoviMuse’s account-linked cloud images and local creations, use Settings → Delete Guest Account while online and wait for confirmation; retry if deletion reports a failure. Copies saved to Photos, shared with other apps, or held in device backups are controlled separately by you and those services.

OpenAI states that API content is not used to train its models by default. Its standard abuse-monitoring retention is up to 30 days, with longer retention possible for legal obligations or protection from harm. Image inputs flagged as potential child sexual abuse material may be retained for manual review. NoviMuse does not promise zero retention or immediate erasure of OpenAI safety records. Deleting your NoviMuse guest account does not override those provider retention rules. See OpenAI API data controls.

4. Service providers

NoviMuse uses service providers to operate the app:

  • OpenAI processes prompts, source images, and generated outputs for AI image generation. See Photos containing faces above for image handling and safety-retention exceptions, and OpenAI API data controls.
  • Google Firebase Authentication provides device-linked anonymous authentication and may process technical information such as IP address and user-agent data for authentication and abuse prevention. See Firebase Privacy and Security.
  • Google AdMob and User Messaging Platform provide rewarded ads and privacy-choice messages. See How Google uses information for advertising and the Google Privacy Policy.
  • Cloudflare hosts NoviMuse’s online service, database, and generated-image storage and may process network and security information. See the Cloudflare Privacy Policy.
  • Apple distributes the app, processes In-App Purchases, and provides Photos permission controls and the system share sheet under Apple’s own terms and privacy practices. NoviMuse receives App Store-signed transaction information needed to verify and credit pass packs, but does not receive your full payment-card details.

We require service providers handling personal data on our behalf to provide the same or equal protection described in this policy, including purpose limitations, confidentiality, appropriate security, and applicable retention and deletion obligations. Provider processing is governed by applicable service agreements and data-protection terms. These providers may process information in countries other than your own. The specific safety-retention exceptions for OpenAI are explained above.

5. Rewarded advertising and privacy choices

NoviMuse uses optional rewarded ads. You may watch an ad to earn a Creation Pass or unlock a clean export for a generated image. The Google Mobile Ads SDK and advertising partners may process advertising identifiers, IP address, device and app information, ad interactions, and related data to deliver, measure, secure, and—where permitted—personalize advertising.

On first launch with an undetermined tracking status, NoviMuse requests Apple’s App Tracking Transparency permission once the app is active. Advertising consent setup and ad loading wait for a resolved tracking status. Denying tracking does not prevent earning rewards from available ads. Where required, NoviMuse also displays a separate advertising consent or privacy-choice message before requesting ads. If the Privacy Choices option is available for you, open the Settings gear in NoviMuse and select Privacy Choices to review or change your selection. Changing consent may affect ad availability.

6. Storage and retention

  • Local creations: remain on your device until you delete them, remove the app, or the device removes app data. Exported copies are controlled by the destination where you save or share them.
  • Prompts and source images: are sent for the generation you request. NoviMuse’s database stores a request fingerprint and technical metadata rather than the raw prompt or raw source-image bytes. OpenAI may retain API content as described in its data-control policies.
  • Generated images and generation records: are handled separately: cloud image files have a 30-day expiry rule, with asynchronous deletion, or are removed earlier by successful guest-account deletion. Database generation records remain until guest-account deletion to verify ownership and clean-export access. See Photos containing faces above for details.
  • Reward records: may be retained longer to verify grants, enforce limits, prevent replay or fraud, resolve disputes, and comply with legal obligations. Provider transaction identifiers are stored as hashes by NoviMuse.
  • Support email: is retained as needed to respond, keep a support record, protect the service, or meet legal obligations.

7. Sharing, sale, and disclosure

We disclose information to the service providers listed above only as needed to provide, secure, and support NoviMuse. We may also disclose information if required by law, to protect rights or safety, to investigate abuse, or as part of a business transfer subject to appropriate safeguards.

We do not sell your prompts or images. Advertising providers may process device and advertising data for personalized advertising where permitted and consented to; some privacy laws may describe certain advertising disclosures as “sharing.” You can manage available advertising choices as described above.

When you choose Share, Apple’s share sheet sends the selected export to the person, app, or service you choose. Their handling of that image is governed by their own practices.

8. Your privacy choices and requests

  • Delete locally saved creations from the Creations screen.
  • Change Add Photos Only permission in iOS Settings.
  • Review advertising choices from NoviMuse Settings when the option is available.
  • Choose not to submit sensitive prompts or source images.
  • Email us to request access, correction, deletion, or other rights available under applicable law.

To request deletion, use Delete Guest Account in NoviMuse Settings before removing the app. You may also email wonderbibi28@gmail.com with the subject “NoviMuse Privacy Request” for access, correction, other available rights, or help if you cannot use the in-app deletion option. Because NoviMuse does not ask you to create a named profile, we may need an in-app verification step or limited technical information to identify device-linked records. We may retain records required for security, reward verification, fraud prevention, dispute resolution, or law.

You may withdraw advertising consent where that choice is offered. Withdrawal does not affect processing already completed before the change.

In-app guest-account deletion

Open Settings in NoviMuse and choose Delete Guest Account. After you confirm and the operation completes successfully, NoviMuse deletes the Firebase anonymous guest identity, the associated backend account and records, generated images stored by NoviMuse in the cloud, locally saved NoviMuse creations, unused passes, and the saved AI-sharing permission. Consumable passes cannot be restored after deletion. This does not delete your original Photos-library image, exported or shared copies, device backups, or OpenAI safety records described above. If the operation fails, retry it before uninstalling. Limited information may be retained only where required for security, fraud prevention, legal compliance, or resolving a transaction or dispute.

9. International processing

NoviMuse and its service providers may process information outside your country. Where applicable law requires it, appropriate contractual or legal safeguards are used for international transfers.

10. Children

NoviMuse is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without authorization required by law. If you believe a child has provided personal information improperly, contact us so we can review the request.

11. Security

We use measures designed to protect information, including authenticated requests, encrypted network connections, private generated-image access, bounded request sizes, and hashed reward-verification identifiers. No storage or transmission system is completely secure, so absolute security cannot be guaranteed.

12. Changes to this Policy

We may update this Policy when NoviMuse, its providers, or legal requirements change. We will update the effective date and publish the revised Policy here. Material changes may also be communicated in the app where appropriate.

13. Contact

Operator: Niew Yee Yaw
Email: wonderbibi28@gmail.com
Support: NoviMuse Support