PanelGen Privacy Policy

Last updated January 25, 2026

This Privacy Policy explains how IDK Anything ("we", "us", or "our") collects, uses, discloses, and protects information when you use PanelGen (the "App") and related services (collectively, the "Services"), including:

• The PanelGen mobile application for iOS and Android
• Our website at https://panelgen.idkanything.com/ (the "Website")
• Any other pages, features, or support channels that link to this Privacy Policy

PanelGen is an AI-powered comic generation app. The Services allow you to:

• Create and manage a private Character Vault by taking or uploading character reference images
• Generate comics by providing a scenario prompt, selecting characters, and choosing generation options (e.g., art style, page count)
• View, export, and share generated comics

If you have any questions about this Privacy Policy, contact us at hey@idkanything.com.

Important: This Privacy Policy describes our privacy practices and is designed to support compliance with Apple's App Store requirements (including App Store Review Guideline 5.1.1 on privacy policies). Your App Store "App Privacy" disclosures (privacy nutrition label) should be consistent with this Policy.

Summary of key points

This summary highlights key points. Please read the full Policy for details.

• We collect information you provide (e.g., profile details, prompts, character images) and information collected automatically (e.g., device information, usage events, diagnostic data).
• Photos and images: If you choose to upload or take photos (e.g., character references, avatar), we process them to provide core features like character consistency and comic generation.
• AI processing: When you generate comics, we process your prompt and selected character references on our servers and may send certain inputs to AI service providers (e.g., Google Gemini) to generate text and images.
• We do not sell your personal information, and we do not run third‑party advertising in the App.
• You control key data: You can delete characters, comics, and your entire account in the App. You can also control App permissions (camera/photos) in your device settings.
• We use service providers (e.g., infrastructure hosting, AI providers, analytics, crash reporting, subscriptions) to operate the Services. For example, PanelGen may use DigitalOcean (hosting), Google (Gemini API for generation), PostHog (analytics/feature flags), Sentry (crash reporting/support), and RevenueCat (subscriptions). We require providers to protect your information consistent with this Policy.

Table of contents

1. Scope and definitions

1.1 Scope

This Privacy Policy applies to information processed by PanelGen in connection with the Services. It does not apply to:

• Third-party websites or services you may access through links in the App or Website
• App Store / Play Store services operated by Apple or Google (including payments)

1.2 Definitions

• "Personal information" (or "personal data") means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with a particular individual or household.
• "User Content" means the content you provide or generate through the Services, such as character reference images, avatar images, scenario prompts, and generated comics.
• "Sensitive personal information" has specific legal meanings depending on your jurisdiction. While PanelGen does not require highly sensitive categories (e.g., government IDs), User Content (especially photos) may be sensitive depending on what you upload.

2. Information we collect

We collect information in three main ways: (a) information you provide; (b) information collected automatically; and (c) information from third parties.

2.1 Information you provide directly

Depending on how you use the Services, you may provide:

A) Account and profile information

• Account identifiers (e.g., a user ID)
• Email address (for example, from Sign in with Apple or Google sign-in)
• Name (for example, if provided by your sign-in provider)
• Profile information you choose to provide, such as:

- Profile avatar image

B) User Content (photos, prompts, and generated outputs)

• Character reference images (taken with your camera or selected from your photo library)
• Scenario prompts and other text you enter to generate a comic
• Generation settings you choose (e.g., page count, art style preset, speech bubble preference)
• Generated outputs, such as:

- Character appearance metadata derived to maintain continuity (where applicable)

C) Support communications and content reports

If you contact us (including through in-app support tools) or report content, we may collect:

• The content of your messages or reports
• Attachments you choose to share (e.g., screenshots)
• Any contact information you include
• Information about the content being reported (for moderation purposes)

D) Game statistics and achievements

If you play the optional mini-game ("Panel Pop") while waiting for comic generation, we may collect:

• High scores and gameplay statistics (e.g., total bubbles popped, games played)
• Achievement unlock records

This data is stored to provide a consistent experience across sessions and devices.

2.2 Information collected automatically

When you use the Services, we may automatically collect:

A) Device and app information

• Device model, OS version, language/locale, time zone
• App version/build, platform (iOS/Android)
• App-level identifiers used for analytics or troubleshooting (e.g., device identifiers or installation identifiers)

B) Usage information

We may collect information about how you interact with the App, such as:

• Screens viewed and feature usage (e.g., creating characters, viewing comics, sharing a comic)
• Performance metrics (e.g., app responsiveness, request timings)
• High-level interaction metadata (e.g., selected page count, number of characters selected, prompt length). We do not intend to send your full prompt text or your photos to analytics tools.

C) Diagnostic, security, and log information

To protect the Services and diagnose issues, we may collect:

• Crash reports and error diagnostics (which may include device information and app state at the time of the crash)
• Security logs (e.g., rate-limiting records, IP address, and user agent for security and abuse prevention)

D) On-device storage used by the App

The App may store certain information locally on your device to operate reliably:

• Authentication/session data (stored using OS-provided secure storage where available)
• Preferences and app state (e.g., onboarding completion, locale, cache metadata)
• Cached media (e.g., downloaded comic images) to enable fast loading and offline viewing

2.3 Information from third parties

We may receive information from:

A) Authentication providers (social login)

If you sign in using Apple or Google, we receive limited information from them (such as an email address and an account identifier). The information available depends on the provider and your settings with that provider.

B) App stores and subscription platforms

If you purchase subscriptions or consumables, payments are processed by the App Store (Apple) or Play Store (Google). We may receive purchase/entitlement status and related metadata via our subscription management provider (e.g., RevenueCat) to enable features and handle support (such as purchase restoration).

2.4 Information we do not intentionally collect

To support data minimization, PanelGen does not require and does not intentionally collect:

• Your contacts/address book
• Your call/SMS logs
• Your precise GPS location
• Your microphone/audio recordings (unless you choose to provide audio through a separate feature we may introduce in the future, in which case we will update this Policy)

3. How we use your information

We use information for the following purposes:

3.1 Provide and operate the Services

• Create and manage your account and profile
• Store your characters and generated comics
• Generate comics using your prompt and selected character references
• Provide viewing, export, and sharing features

3.2 Improve and maintain the Services

• Diagnose bugs and fix crashes
• Monitor performance and reliability
• Improve core functionality, including generation quality and user experience

3.3 Safety, security, and fraud prevention

• Prevent abuse (e.g., rate limiting generation endpoints)
• Secure accounts and detect suspicious activity
• Enforce our Terms and protect the integrity of the Services

3.4 Subscriptions, credits, and transactions

• Determine your subscription entitlement status (e.g., Pro access)
• Provide credit/virtual currency functionality where available
• Support purchase restoration and handle billing-related support inquiries
• Where required, assist with refund requests and dispute handling (see Section 5.3)

3.5 Communications and support

• Respond to inquiries and provide customer support
• Send service-related messages (e.g., important changes or notices). We do not send marketing emails unless you opt in where required by law.

3.6 Legal compliance

• Comply with applicable laws, lawful requests, and legal processes
• Establish, exercise, or defend legal claims

4. AI features and image processing

PanelGen uses AI to generate comic scripts and images. This section explains, in detail, how photos and prompts are handled.

4.1 What inputs are processed for AI generation

When you generate a comic, we may process:

• Your scenario prompt and related settings you select (e.g., page count, art style)
• Character reference images you select from your Character Vault
• Identifiers needed to associate results with your account (e.g., user ID, comic ID)

4.2 Where processing happens

Depending on the feature, processing may occur:

• On your device (e.g., selecting images, local caching for offline viewing)
• On our servers (e.g., orchestrating generation, saving outputs)
• Via AI service providers that process inputs to return generated content (e.g., text or images)

In practice, PanelGen's backend is built on a self-hosted Supabase stack (authentication, database, storage, and edge functions) deployed on our infrastructure. Your User Content (reference images and generated comics) is stored in private storage and is intended to be accessible only to you. For private media access, PanelGen may use time-limited signed URLs and access controls to prevent unauthorized access.

4.3 Face data and biometric information

Users may upload photos that include faces. For clarity:

• We do not use uploaded photos for identity verification, facial recognition, or biometric profiling.
• We do not build biometric templates or a face recognition database.
• If your device supports Face ID, Face ID is handled by the operating system and is not shared with us. We do not receive your Face ID scan or biometric data.

4.4 Model training and improvement

We do not use your User Content to build advertising profiles. AI providers may process inputs to provide generation results. Their handling of data (including any retention or model improvement practices) is governed by their terms and privacy policies. We choose providers and configurations intended for high security and data minimization, and we require providers to protect user data consistent with this Policy.

4.5 Your responsibility for uploaded content

You are responsible for ensuring you have the rights and permissions to upload and process any photos or content you provide (including images of other people). Please do not upload illegal content or content that violates others' rights.

5. How we share information

We share information only as described below.

5.1 Service providers (processors)

We use vendors to help us operate the Services. Depending on your usage, we may share certain information with the categories of providers below and (in many cases) the specific providers listed in this section. When we share information with vendors, we expect them to protect it and to use it only to provide services to us.

A) Hosting and infrastructure

• Cloud hosting providers (to host our backend and storage), such as DigitalOcean.

B) AI processing providers

• AI model providers (to generate scripts and images). This may include sending prompts and selected reference images for the sole purpose of producing generation outputs, such as Google (Gemini API).

C) Analytics and feature flags

• Analytics providers to understand usage and improve the App, such as PostHog. This may include device/app metadata and event data (e.g., which screens/features are used).

D) Crash reporting and diagnostics

• Error monitoring providers to capture crash reports, performance data, and user feedback you submit through in-app support tools, such as Sentry.

E) Subscription and purchase management

• Subscription management providers to manage subscription status, entitlements, and (where applicable) virtual currency/credit systems, such as RevenueCat.

F) Subprocessor list (non-exhaustive)

For transparency, PanelGen may use the following third-party services (or self-hosted equivalents) depending on configuration and environment:

• DigitalOcean: https://www.digitalocean.com/legal/privacy-policy
• Google: https://policies.google.com/privacy
• PostHog: https://posthog.com/privacy
• Sentry: https://sentry.io/privacy/
• RevenueCat: https://www.revenuecat.com/privacy/

We may update this list from time to time as we add or replace providers.

We require service providers to process information only on our instructions and to implement appropriate security measures.

5.2 Legal, safety, and business transfers

We may disclose information:

• To comply with applicable law, regulation, legal process, or governmental request
• To enforce our Terms, protect our rights, privacy, safety, or property, or that of others
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale/transfer of assets (in which case your information may be transferred as part of that transaction)

5.3 Apple/Google and refund-related disclosures

If you make purchases through Apple or Google, they process payment information under their own terms. In certain cases (such as refund requests or disputes), we (or our subscription management provider) may share limited information about your purchase and in-app usage/consumption of purchased content with Apple or Google as necessary to support the request and comply with platform policies.

5.4 Sharing initiated by you

If you use sharing features (e.g., exporting a comic image via the system share sheet), you control where that content is sent. The recipients and platforms you share with will process that content under their own policies.

6. Cookies and similar technologies

6.1 Website cookies

Our Website may use cookies or similar technologies for basic functionality, security, and analytics. You can control cookies through your browser settings.

6.2 Mobile app tracking technologies

The App may use SDKs that collect device/app information and event data for analytics and diagnostics. We do not use these tools for third-party advertising or to sell personal information.

Some analytics SDKs may support optional features like session replay (screen recording) to help diagnose bugs. If enabled, session replay may capture parts of your in-app experience. We intend to use such features only for debugging, to minimize captured data, and to apply masking (such as masking text inputs) where supported.

7. Data retention

We retain information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

7.1 Account and User Content retention

• Character reference images, comics, and related metadata: Retained while your account is active, and until you delete them or delete your account.
• Account deletion: You can delete your account in the App (Settings → Delete Account). Account deletion is intended to remove your profile data, characters, comics, and associated storage files. If you signed in with Apple, we also intend to revoke your Sign in with Apple tokens where applicable as part of deletion. Certain limited information may be retained as necessary for legal compliance, security, and dispute resolution.

7.2 Logs and diagnostics

We retain diagnostic and security logs for limited periods to:

• Investigate incidents and prevent abuse
• Improve reliability and troubleshoot issues

Exact retention periods may vary based on log type and legal requirements.

7.3 Backups

Like most services, we may maintain backups for disaster recovery. Deleted data may persist in backups for a limited period until those backups are rotated.

7.4 Local device storage and caches

To improve performance and enable offline viewing/sharing, the App may store certain content locally on your device (e.g., cached images). You can typically clear this by:

• Using in-app controls if available (where provided)
• Clearing the App cache via your device settings (where supported)
• Uninstalling the App

8. Security

We implement technical and organizational measures designed to protect your information, including:

• Encryption in transit (e.g., TLS)
• Access controls and least-privilege practices
• Row-level access controls for stored content (so users can only access their own data)
• Signed URL access for private media where applicable

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

9. Your choices and privacy rights

9.1 Manage permissions (camera, photos)

PanelGen requests access to device features only when needed for core functionality. You can grant or revoke permissions at any time in your device settings.

• Camera: Used to take character reference photos.
• Photo library: Used to select character reference images and avatar images, and to save generated comics to your library if you choose.

If you deny permissions, certain features may not function.

9.2 Access, correction, deletion, and account controls

Depending on where you live, you may have rights to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent where processing is based on consent

You can delete certain data directly in the App (e.g., comics, characters) and you can delete your account in Settings. You may also contact us at hey@idkanything.com to request assistance.

9.3 Analytics and diagnostics choices

We use analytics and diagnostics to understand usage and fix issues. Where required by law, we will obtain consent for certain processing and provide a way to withdraw that consent. If you have questions about analytics, contact us at hey@idkanything.com.

9.4 Do Not Track

"Do Not Track" (DNT) is a browser setting. Our Website currently does not respond to DNT signals in a standardized way, and we do not provide browser-based behavioral advertising on the Website.

10. International transfers

We and our service providers may process and store information in countries other than your own. These countries may have different data protection laws. Where required, we use appropriate safeguards for international transfers.

11. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us at hey@idkanything.com and we will take appropriate steps.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on our Website and update the "Last updated" date above. If changes are material, we may provide additional notice in the App or Website.

13. Contact us

If you have questions or requests regarding this Privacy Policy, contact:

• Email: hey@idkanything.com
• Website: https://panelgen.idkanything.com/

14. Additional disclosures for certain regions

This section provides additional information that may apply depending on where you live. This section is intended to supplement (not replace) the rest of this Policy.

14.1 European Economic Area (EEA), United Kingdom (UK), and similar regions

If you are in the EEA/UK or another region with similar laws, we process personal data under one or more legal bases, including:

• Performance of a contract (to provide the Services you request)
• Consent (for example, where required for certain permissions or communications)
• Legitimate interests (for security, fraud prevention, product improvement, and service reliability)
• Legal obligations (to comply with applicable laws)

You may have the right to access, rectify, erase, restrict, object to processing, and request portability of your personal data. You may also have the right to lodge a complaint with a supervisory authority.

14.2 Türkiye (KVKK)

If you are in Türkiye, your personal data is processed in accordance with the Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu, "KVKK"). Under KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information about processing activities
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom your data is transferred (domestically or abroad)
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data under certain conditions
• Object to automated processing that produces results against you
• Seek compensation for damages arising from unlawful processing

Data Controller: IDK Anything, Istanbul, Türkiye

To exercise your KVKK rights, contact us at hey@idkanything.com. We will respond within 30 days as required by law.

14.3 United States (state privacy laws)

Depending on your state of residence, you may have rights to:

• Know what personal information we collect, use, and disclose
• Access and delete personal information
• Correct inaccurate personal information
• Opt out of certain processing (where applicable)

We do not sell personal information as that term is defined under applicable state privacy laws. To exercise rights, contact us at hey@idkanything.com.