Last updated: 14 July 2025
This Privacy Policy sets out the ways in which ROKKHOPPER Innovations GmbH ("ROKKHOPPER", "we", "us" or "our") collects, protects and uses the personal data ("Personal Data") provided by you ("User", "you" or "your") when purchasing AI Selfie Studio.
ROKKHOPPER Innovations GmbH is the controller responsible for the processing of your personal data. Our contact details are as follows:
ROKKHOPPER Innovations GmbH
Troststraße 6/44
1100 Vienna, Austria
If you have any questions regarding data protection, you can also contact our Data Protection Officer Adam Vukovic at adam@rokkhopper.com.
The Privacy Policy explains the choices available to you regarding our use of your personal data and the procedures for accessing and updating that data. This Policy does not apply to the privacy practices of companies that we do not own or control or individuals that we do not employ. You acknowledge that you have read this Privacy Policy and agree to all of its terms and conditions. By using AI Selfie Studio, you agree to be bound by this Privacy Policy. If you do not agree to the terms of this Privacy Policy, you are not authorized to use or access AI Selfie Studio.
When you purchase AI Selfie Studio, we receive and store any information that you voluntarily provide. Currently, this only includes your name and your e-mail address, which is required to register on the website and to access purchased products.
We process your name and email address to fulfill our contractual obligations to you (Art. 6(1)(b) GDPR). Additionally, we process any additional information you voluntarily provide based on your consent (Art. 6(1)(a) GDPR).
Further we collect access keys for social media authentication to enable cross-posting features for your social media accounts.
You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Our app requires access to your device’s camera and photo library in order to provide its core functionality. Such access is initiated solely by your active use of the app’s features. No access occurs in the background or without your explicit consent.
Images you select or capture are either processed locally on your device or, depending on the feature used, temporarily uploaded for the purpose of editing. We do not permanently store your photos, nor do we access any other media files on your device.
When you use AI Selfie Studio and apply effects to your face or generate images of your face, you understand and agree that AI Selfie Studio may use facial geometry or other facial data to produce the image or effect you request. We use face data to provide the applicable services. We never use face data to identify any individual person or for authentication purposes. We only collect, use and store your face data in accordance with this Privacy Policy. We will not sell, lease, trade, or otherwise profit from your face data.
We store your face data using a reasonable standard of care and in a manner that is the same or exceeds the standards used to protect other confidential and sensitive information we may hold.
We retain generated images (such as of your face) for a period of 6 months. In the event that you delete your account, all associated images will be permanently deleted from our systems within 14 days. This deletion is irreversible and includes removal from active servers and backups, in accordance with our data retention and deletion policies. We may, however, retain your face data for a longer period of time if required by law or required by valid legal subpoena.
When you make in-app purchases within our app - either through the one-time purchase of credits or via a subscription model that regularly provides credit allowances - we collect certain information in order to process the transaction and provide you with the purchased content or features.
This includes, but is not limited to:
Payment processing is handled by the respective app store provider (e.g., Apple App Store or Google Play Store). We may receive a transaction confirmation from these providers (e.g., an anonymized order ID), but we do not receive any payment details such as credit card numbers or bank account information.
The data collected is used exclusively to:
In the case of a subscription, we also collect information on whether and when an automatic renewal occurs, to ensure your credits are replenished accordingly.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. For example, your name and email address will be retained as long as you have an account with us or as necessary to fulfill our contractual obligations. After the relevant retention period has expired, your data will be securely deleted or anonymized in accordance with our data retention policies. Once data has been anonymized or deleted, your rights to access, erasure, rectification, or data portability can no longer be exercised on that data, as it will no longer be identifiable to you.
You can update your personal information, such as your name and/or email address, in your "Account Settings" on our website. If you request the deletion of your email address, please note that you will no longer be able to access any products you have purchased from us. If you update your information, we may retain a copy of the original, unrevised information in our records for a period, as required for compliance with legal obligations, dispute resolution, and the enforcement of our agreements.
We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may also use aggregated data derived from or incorporating your personal data after you have updated or deleted it, but this will be done in a manner that does not identify you personally.
We retain generated images for a period of six 6 months. In the event that you delete your account, all associated images will be permanently deleted from our systems within 14 days. This deletion is irreversible and includes removal from active servers and backups, in accordance with our data retention and deletion policies.
We may process personal data about you if any of the following apply:
· you have given your consent for one or more specific purposes. Note that under some laws we may process data until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases. However, this does not apply where the processing of personal data is covered by European data protection law;
· the provision of information is necessary for the performance of a contract with you and/or pre-contractual obligations
· the processing is necessary for compliance with a legal obligation to which you are subject
· the processing is related to a task carried out in the public interest or in the exercise of official authority vested in us
· the processing is necessary for the pursuit of legitimate interests.
· You can exercise certain rights in relation to your data processed by us. In particular, you have the right to do the following:
· You have the right to withdraw your consent if you have previously consented to the processing of your data;
· You have the right to object to the processing of your data if the processing is based on a legal basis other than your consent;
· You have the right to know whether data is being processed by us, to receive information about certain aspects of the processing and to receive a copy of the data being processed;
· You have the right to verify the accuracy of your data and to request that it be updated or corrected;
· In certain circumstances, you have the right to restrict the processing of your data, in which case we will not process your data for any purpose other than storage;
· Under certain circumstances, you have the right to request that we erase your personal data;
· You have the right to receive your data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies provided that your data is processed by automated means and that the processing is based on your consent, on a contract to which you are a party or on pre-contractual obligations.
Where personal data are processed in the public interest, in the exercise of official authority or for the purposes of our legitimate interests, you may object to such processing by providing a ground relating to your particular situation to justify the objection.
Requests to exercise your rights can be sent by e-mail to support@rokkhopper.com. These requests can be made free of charge and will be processed as soon as possible.
We have applied technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or misuse. These measures include, but are not limited to, the use of firewalls, encryption, and access controls. However, we cannot guarantee absolute security over the internet.
Therefore, while we strive to protect your personal information, you acknowledge that
· there are security and privacy limitations of the internet over which we have no control.
· the security, integrity and confidentiality of any information and data exchanged between you and our website cannot be guaranteed.
· and despite our best efforts, such information and data may be viewed or tampered with by third parties during transmission.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.
We will disclose any information we collect, use or receive when required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or respond to a governmental request.
We may revise this Privacy Policy from time to time. If a modification has a significant impact on your rights, we will notify you (for example, by email). This notification will also include a reasonable period of 14 days after which the new terms will come into force. Changes will never apply retroactively. By continuing to use or access the Services after the effective date of any changes, you agree to be bound by the modified Agreement. If you do not agree with the changes, you must stop using AI Selfie Studio.