Apex Vision AI LLC (“Apex Vision AI,” “we,” “our,” or “us“) respects your privacy and is committed to transparency. This Policy explains what we collect, why we collect it, how we protect it, and what choices you have. Capitalised terms not defined here have the meanings given in our Terms of Service.
Scope
This Policy applies to:
App
“Apex AI” mobile applications for Android (Google Play) and iOS/iPadOS (Apple App Store)
Extension
“AI Homework Helper – Apex Vision AI” Chrome Extension
APIs & Services
APIs & related services (collectively, the “Services”)
It does not apply to third-party sites or services you may access through links or integrations.
Data We Collect & Why
| Category | Examples | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account Data | Name, email, hashed password, subscription tier | Create & manage account; support; invoices | Contract (Art 6 §1 b) |
| Payment Data | Transaction IDs, product IDs, purchase status, and limited payment metadata processed by Google Play, Apple, Stripe, or PayPal | Process purchases & refunds; detect fraud | Contract; Legal obligation |
| Camera, Photos & Files (Mobile Apps) | Images captured via camera or selected from photo library | Analyze homework questions from photos; images are processed transiently and not stored | Consent (Art 6 §1 a) |
| Usage Data | IP (truncated), browser & OS, app/extension version, hashed prompt IDs, token counts | Rate-limiting; analytics; improve features | Legitimate interest (Art 6 §1 f) |
| Support Data | Emails, chat logs, error reports | Troubleshoot, answer questions | Legitimate interest |
| Cookies / Local Storage | Session JWT, cookie-banner flag, UI prefs | Keep you logged-in; remember settings | Consent (Art 6 §1 a) |
2.1 Prompt, Answer & Image Data
- Prompts and responses — We process questions and AI responses to provide the requested feature. Recent conversation history and saved study content may be stored so signed-in users can continue a conversation, use history features, and sync account activity.
- Images and files — Camera images, selected photos, and uploaded files are sent only when you choose an analysis feature. They are processed to produce the requested result and are not retained as source files by Apex after processing.
- Usage records — We keep limited account-linked metadata such as timestamps, feature activity, request counts, and token counts for quotas, security, analytics, and fraud prevention.
- Your controls — You can delete your account and associated personal content in the Android app or through our account deletion page.
How We Use Data
- Operate & secure the Services.
- Improve models, UI, and infrastructure.
- Communicate—account notices, product updates, support replies.
- Comply with law—court orders, tax regulations, DMCA takedown requests.
- Enforce Terms—investigate fraud or academic-integrity violations.
We do not sell your personal data and we do not use it for credit decisions.
Sharing & Disclosure
| Recipient | Reason | Safeguards |
|---|---|---|
| Apple (App Store) | In-app purchase processing for iOS subscriptions | Apple’s App Store terms; we do not receive full payment card details |
| Google (Google Play) | Android sign-in and Google Play purchase processing, verification, refunds, and subscription lifecycle notices | Google Play terms; we do not receive full payment card details |
| Stripe, PayPal | Billing & refunds (web/extension) | PCI-DSS compliance; tokenised cards |
| Google Cloud & Vercel | Secure hosting, backups | SOC 2 & ISO 27001; SCCs |
| OpenAI | LLM inference | Data-processing addendum; no training on prompts |
| Sentry, Plausible Analytics | Error logging & analytics | IP truncation; pseudonymised IDs |
| Authorities / litigants | Where required by law or to protect rights (e.g., DMCA) | Verified requests only |
We sign EU Standard Contractual Clauses (SCCs) or UK IDTA with all non-U.S. processors.
International Transfers
Apex Vision AI operates from the United States. For EEA/UK users, personal data is transferred under SCCs or the UK IDTA, plus encryption in transit and at rest.
Security
- TLS 1.3 encryption in transit
- AES-256 encryption at rest (hashed where feasible)
- Principle-of-least-privilege access controls
- Weekly vulnerability scans & annual penetration test
- 24 / 7 monitoring and alerting
No system is perfectly secure, but we use commercially reasonable safeguards.
Retention
| Data Type | Retention |
|---|---|
| Account & billing records | 2 years (tax & accounting) |
| Usage telemetry | 1 month, then aggregated |
| Support tickets | 2 years after closure |
| Cookies / local storage | Until expiry or user deletion |
You may delete your account at any time in the Android app or through our account deletion page. Personal data is purged as soon as practical and within 30 days unless longer retention is required by law. Deletion does not cancel an active subscription with Google Play, Apple, or a website payment provider.
Your Rights
| Region | Rights & How to Exercise |
|---|---|
| EEA / UK (GDPR) | Access, rectification, erasure, restriction, portability, objection. Email support@apexvision.ai. You may complain to a supervisory authority. |
| California (CCPA/CPRA) | Right to know, delete, correct, and opt-out of “sale” or “sharing” of personal info. |
| Children | We do not knowingly collect data from anyone under 13. Parents may request deletion. |
We respond within 30 days (45 days for CCPA, extendable once).
Cookies & Tracking
- Essential cookies — login, fraud prevention (cannot be disabled).
- Analytics cookies — pseudonymised; banner opt-out available.
- No ad-tracking cookies or cross-site behavioural ads.
- We honour browser Do-Not-Track signals.
Automated Decision-Making
We do not engage in solely automated decisions that produce legal or similarly significant effects.
DMCA & Copyright Logs
If we receive a valid DMCA notice, we forward the minimal hashed identifiers necessary to locate the allegedly infringing prompt, remove it, and log the notice for 6 years as required by 17 U.S.C. §512.
Changes to This Policy
We’ll post changes here and, for material changes, email notify you at least 7 days before they take effect. Continued use after the effective date constitutes acceptance.
Contact
Apex Vision AI LLC
Short version: we minimise data, never sell it, and give you robust GDPR/CCPA rights. Questions? Email us!