Privacy Policy
Pofi processes the photo you choose only to prepare the passport, visa, or ID-photo output you request. The app does not offer a public profile or require an email sign-in. It creates a random technical installation identifier and a secure processing token so temporary files, privacy requests, and purchase access can be associated with the correct installation.
Data processed
- The selected source photo, generated result, and selected country and document type.
- The technical installation identifier and secure processing token.
- Purchase product, transaction state, and access status. Full payment-card details are handled by Google Play or Apple and are not received by Pofi.
- App version, operating system, language, and feature or error events. Analytics events do not include photos, file paths, credentials, or free-form error text.
- If you report an AI result: result ID, report category, country, document type, and model name. The report contains no photo or free-form text.
Purpose and service providers
Data is used for app functionality, document-photo generation and export, purchase verification, security, fraud prevention, troubleshooting, and product analytics. Photo processing is routed through Pofi's authenticated backend to a central Google Vertex AI gateway. RevenueCat and Google Play or Apple process purchase status as service providers. Pofi does not use an advertising SDK and does not sell personal data.
Retention and security
Network traffic uses HTTPS. Source uploads are retained for up to 24 hours and generated results for up to 30 days. Privacy export packages are retained for up to 7 days. Downloaded files and local history remain on the device until the user removes them; operating-system backup settings may restore the technical installation identifier and some local app data.
Your controls
Settings provides a data copy request, server-data deletion, and local reset. Completing server deletion also removes the technical installation identifier and secure processing session from the device. See the Pofi data-deletion page for the external request route. Depending on location, users may also have rights to access, correct, transfer, restrict, or object to processing.
The app is not directed to children under 13. The in-app interface is available in English, Turkish, and Arabic.
Contact
Email support@vesikalik.app.