Privacy Policy

1. Introduction

Welcome to Lamlayer ("we", "our", or "us"). We provide a mobile application for graphic design, poster creation, and photo memory templates on iOS and Android devices, along with associated web services at this website.

This Privacy Policy explains what information we collect when you use our mobile application and website, why we collect it, how it is handled, and how your privacy is protected. By downloading, accessing, or using Lamlayer, you acknowledge and agree to the practices described herein.

2. The Core Principle: Local-First Privacy

Unlike cloud-based graphic tools that upload every user asset to a central server, Lamlayer respects your complete ownership and personal privacy:

• Zero Photo Uploads: Photos you select from your camera roll to insert into frames (such as birthdays, weddings, baby milestones, and trips) are processed strictly in your device's memory.
• Local Document Storage: Customized design files (the .lamlayer format) and exported images (PNG, JPG) are saved exclusively to your mobile device's local application storage and gallery.
• No Server Gallery: We do not operate a remote user gallery or cloud database of user designs. If you uninstall the app or clear app data without backing up exported files to your phone's gallery, those files remain on your device only.

3. Information We Collect

We only collect the minimal technical data necessary to provide authentication and manage in-app token balances:

A. Account & Authentication Data

To maintain your token balance and restore purchases across device re-installations, we support authentication via:

• Email OTP: If you sign in via email, we store your email address and transmit a temporary 6-digit one-time password (OTP) to authenticate your identity.
• Google Sign-In: If you choose Google authentication, we receive your Google user identifier, display name, and email address provided by Google APIs.

B. In-App Purchase & Token Balances

Lamlayer provides consumable AI token packs (Starter, Pro, Master) purchased through Google Play In-App Billing (Android) and the Apple App Store In-App Purchases (iOS). We receive cryptographically signed transaction tokens/receipts from Apple or Google to verify the purchase and credit your in-app token balance. We never collect, access, or store your credit card numbers, debit cards, or financial credentials.

C. Device Diagnostics & Technical Logs

We may automatically log technical device attributes (such as device model, operating system version, app version, and crash diagnostic logs) to troubleshoot bugs, prevent fraudulent API requests, and optimize performance.

4. Public Catalog & Cloudflare R2 Storage

Our pre-made design frames and catalog templates (e.g., birthday frames, wedding templates, travel postcards) are public artistic assets created by our design team. These public templates are hosted on Cloudflare R2 object storage. When you browse the catalog, your device fetches template preview thumbnails and template structure files from Cloudflare's global content delivery network.

5. Artificial Intelligence Processing (OpenAI Integration)

Lamlayer offers optional AI image features inside the editor ("Generate with AI" and "Edit with AI"):

• Text-to-Image Generation (DALL-E 3): When you submit a text prompt (e.g., "a scenic watercolor beach at sunset"), the prompt is transmitted via secure encrypted API (HTTPS/TLS) to OpenAI solely to synthesize the image.
• Image Editing (GPT-4o): When you request an AI modification of an existing image, that specific image file and prompt are sent securely to OpenAI for automated transformation.
• Privacy Terms: Under our enterprise API terms with OpenAI, data sent through the API is not used to train or improve OpenAI models.
• Token Economy: Exactly 1 token is deducted per successful AI call. If an AI request fails due to technical timeout or content policy moderation, our backend immediately refunds the 1 token back to your balance.

6. Third-Party Service Providers

We work with trusted industry providers for infrastructure and app store services:

• Google Play Services & Google Identity: Authentication, in-app purchases, and app distribution.
• Apple StoreKit & Apple Sign-In: Authentication and in-app purchase verification on iOS devices.
• Cloudflare: Secure CDN hosting for public catalog templates and DNS protection.
• OpenAI: API service provider for in-editor image generation and intelligent editing.

7. Data Security

We enforce industry-standard security protocols to safeguard data in transit and at rest. All communication between the mobile app, backend APIs, and third-party services is secured using Transport Layer Security (TLS 1.3 encryption). Access to administrative tools is restricted through multi-factor authentication and role-based permissions.

8. Your Rights & Account Deletion

You possess full control over your personal data:

• Access & Review: You may review your current token balance and account email directly within the app settings.
• Account Deletion: You may request full deletion of your account record and associated token logs at any time by contacting our support team. Upon verification, your account record is permanently removed from our database within 30 days.
• Local Data Wipe: Because your design files and photos are stored on your device only, you can immediately delete all local templates, recents, and cached assets by clearing app storage in your phone's OS settings.

9. Children's Privacy

Lamlayer is not intended for use by children under 13 years of age (or 16 where applicable by local law). We do not knowingly collect personal information from children. If you believe a minor has registered an account without parental consent, please contact us immediately.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect new features, technical updates, or legal requirements. When changes are made, we will revise the "Effective Date" at the top of this document. Continued use of Lamlayer following any updates constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, feedback, or data privacy requests regarding this Privacy Policy, please reach out to our team: