Privacy Policy
1. Operator
Photo Lili is operated by Shenzhen Yingxin Technology Co., Limited (深圳市萦心科技有限公司). This policy applies to the Photo Lili - ID Photo Maker iOS app.
2. Information handled on your device
The app accesses the camera only when you choose to take a photo, the photo you choose from your library, and the image you choose to save. These items are used for cropping, compression, portrait matting, and background replacement entirely on your device.
3. Portrait and face information
A face in a selected photo is handled only as image content to create a foreground mask and finish the ID photo on your device. Photo Lili does not perform identity recognition, face verification, face matching, or tracking. It does not create, extract, or retain face embeddings, templates, facial geometry, or other identifiable facial data.
4. Photos and face information stay on your device
The app has no account registration or login and no photo-processing server. It does not upload your photos, finished ID photos, portrait, or face information. We do not sell, share, or disclose your photo data or face information to third parties, data providers, advertising platforms, or network services.
5. Permissions
Camera access is used only after you tap Open Camera. Photo Library access is used only to select a photo you choose. Add Photos access is used only after you tap Save. You can change these permissions in iOS Settings at any time.
6. On-device model and components
Portrait processing uses the MODNet model and ONNX Runtime packaged with the app. They run locally and offline on your device; Photo Lili does not send your photos or face information to the model provider or to any network service.
7. Anonymous product analytics
To understand feature reliability, commonly used sizes, and whether ads load correctly, the app sends anonymous events to our server, such as app opens, size selection, generation or compression success/failure, saves, and ad load or impression status. Events may include a random installation identifier, app version, platform, selected size, target dimensions, and file size. They never include photos, face data, filenames, library paths, names, contact details, accounts, or advertising identifiers. The server stores only a one-way hash of the random installation identifier, and events are retained for no more than 180 days.
7A. Website visit measurement
Optional first-party website measurement starts only after you choose Accept. You may decline or withdraw your choice using Analytics choices in the page footer. Global Privacy Control and browser Do Not Track signals disable measurement even if a previous choice allowed it. Your choice is stored locally so we can respect it on later visits.
Consented page views use a random visitor and session identifier, the page path (without query strings), referring-site origin, recognized campaign source, browser language, device/browser category, and a one-way IP hash on our own server. Separately, App Store button clicks record only a random identifier for that click, page path, a recognized source/campaign, button placement, timestamp, and a production/test label. Click records do not contain visitor or session identifiers, IP hashes, full referring URLs, photos, names, email addresses, or account information. These counts measure visits and clicks, not confirmed downloads, people or purchases. We do not use Google Analytics or advertising cookies on this website.
Click records older than 180 days are pruned when new click events are processed. Withdrawing consent stops future measurement; it does not retroactively remove records already sent. To request assistance with previously collected website information, contact us below.
8. Ads and privacy choices
This version uses Google AdMob to display ads and Google's User Messaging Platform (UMP) to collect and manage ad privacy choices where required. The ad service may process your IP address (to estimate approximate location), device or app identifiers, ad views and interactions, performance, and diagnostic data, depending on your choices and applicable law. We do not request iOS App Tracking Transparency permission or intentionally access the IDFA. Where required, you can change your choice at any time from Manage ad privacy choices on the app's home screen. Google handles ad-related data under its privacy policy. Your photos and face information are not used to serve ads.
9. Retention and deletion
Photos you take or choose, temporary portrait masks, and temporary output exist only in device memory during the current session. When you replace a photo, end the flow, or leave the app, Photo Lili does not retain a copy or write it to a server or database. When you choose Save, the finished image is managed by iOS Photos and can be deleted there at any time. Your original photo remains managed by your Photos library; Photo Lili does not delete or retain it. Uninstalling the app removes the random installation identifier from your device, and historical anonymous events are automatically deleted within 180 days.
10. Policy updates
If future features change how data is handled, we will update this policy and its effective date before releasing the change.
11. Contact
If you have a question about this policy or personal information handling, contact admin@momoget.cn or visit the Photo Lili support page. Do not include ID photos, face images, or other sensitive personal information in public feedback.