Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Flowsophic (“we,” “us,” or “our”) handles information when you use the Is This AI? Image Detector mobile application for iOS (App Store ID: 6823254591, Bundle ID: app.isthisai), the Android application (Google Play Package: com.isthisai.app), our iOS Share Sheet Action Extension, Android Share Target Activity, and our website at https://isthisai.flowsophic.com (collectively, the “Service”).

We engineered Is This AI? around a strict 100% Ephemeral In-RAM Privacy Architecture. Privacy is not an optional toggle - it is enforced at the infrastructure level.

2. Ephemeral Media Processing (Photos, Videos & Social Links)

When you initiate a forensic scan (via the iOS/Android system Share Sheet, Gallery upload, or link paste):

• Volatile RAM-Only Inference: The selected image or video stream is transmitted over TLS 1.3 encryption directly to volatile memory (RAM) on our forensic inference workers solely to compute the 4-Tier Forensic Arbiter verdict (C2PA/SynthID watermark check, neural detector consensus, physical camera PRNU check, and temporal video anomaly analysis).
• Immediate Cryptographic Purge (0 Bytes Retained): The millisecond the forensic JSON score is returned to your device, the media buffer in volatile RAM is overwritten and deallocated. We never write, save, log, or archive your photos, videos, filenames, or camera EXIF GPS coordinates to any cloud disk, S3 bucket, or database.
• Zero AI Model Training: Neither Flowsophic nor any sub-processor ever uses your submitted photos, videos, or links to train, fine-tune, or benchmark generative or discriminative AI models.
• Link Ingestion Without User Cookies: When you paste a public social media link (e.g., Instagram, TikTok, YouTube, X, Facebook), stream extraction happens ephemerally without accessing your personal social media accounts or browser cookies.

3. On-Device Storage & Saved History

When you tap “Save Result” on a verdict sheet:

• Encrypted Local Storage Only: Your saved check record, signal breakdown, and preview thumbnail are stored exclusively on your mobile device inside sandboxed, encrypted local storage (SwiftData / App Group container group.com.isthisai.app on iOS; encrypted Room SQLite database on Android).
• Full User Control: You can delete individual check records at any time, or wipe the entire local database and thumbnail cache in one tap via Settings → Storage & Data Management → Clear All History & Cache. Uninstalling the app also permanently removes all local data.

4. Minimal Technical Data We Collect

Because we do not require user accounts, emails, or passwords, we only process minimal pseudonymous/anonymous technical telemetry required to operate scan quotas, subscriptions, and crash stability:

5. iOS App Tracking Transparency (ATT) & Advertising IDs

On iOS/iPadOS, if our app requests permission via Apple’s App Tracking Transparency (ATT) framework to measure ad campaign attribution, we only access the Identifier for Advertisers (IDFA) if you explicitly tap “Allow”. If you select “Ask App Not to Track”, IDFA is zeroes out and never accessed. On Android, you may reset or delete your Google Advertising ID at any time in Settings → Google → Ads.

6. Data Retention, Deletion & Key Rotation Rights (GDPR / CCPA)

Under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and global privacy laws, you have the right to access, port, and erase your data:

• Self-Service On-Device Deletion: Open Is This AI? → Settings → Storage & Data Management and tap “Clear All History & Cache” to immediately delete all saved scan records on your device.
• Cryptographic Key Rotation: In Settings, you can rotate your anonymous device key at any time, which severs the link to any prior anonymous session metadata.
• Assisted Deletion Requests: You may also email us at info@flowclass.io to request deletion of any anonymous quota or support logs associated with your device identifier.

7. Children’s Privacy

The Service is a general-audience forensic utility and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

8. Contact Us

If you have any questions about this Privacy Policy, our ephemeral RAM architecture, or your privacy rights, please contact our Data Protection & Support team: