Wallside Privacy Policy
Operator and contact
Operated by 陈旭鸿 (individual developer). Privacy and support: support@thewallside.com. Updated September 13, 2026.
Local creation and permissions
Browsing, importing, framing and local saving do not require an account. Selected photos, drawn or imported signatures, artworks, drafts and preferences stay on your device. Signatures decorate images and are not used for identification. The system photo picker provides only selected images. Camera access is used for capture and AR; saving to Photos requests system permission. Other available features remain usable if you decline. Artwork iCloud sync is not available in the public release; device backups follow your Apple settings. The widget reads display images you explicitly save to the shared app container.
AI creation and image processing
You can use AI and purchase Plus or AI credits without signing in with Apple. On first use, Wallside creates an anonymous account for this device. Its recovery credential is held in secure storage on the device; the server stores only a hash. We store a random account ID, sessions, generation status, credit balances and usage records. You may choose to link Sign in with Apple to recover private AI history on another device. Only then do we store an Apple user identifier and encrypted authorization token; we do not require your name or email. After you explicitly agree to image processing and choose Generate, only the selected image or framed artwork preview is uploaded, never your entire library. Inputs and results belong to the current Wallside account.
Service providers
Cloudflare delivers websites, materials and AI storage and transport. Flare runs the workflow using Google Nano Banana 2 through Replicate; these services process your selected image and generation instruction. Apple identity credentials are not sent to image providers. Processing may take place outside your region and is also subject to provider policies: https://flare.design/privacy and https://replicate.com/privacy. We do not automatically publish your images, include advertising tracking SDKs or use this data for cross-app advertising tracking.
Retention, withdrawal and deletion
Unused uploads are cleaned up after approximately 24 hours. Generation inputs, results and records remain until you delete your account. Flare temporary assets follow its runtime retention settings. In Account you can withdraw image-processing permission or delete the account; Apple-linked accounts can also sign out. Withdrawal blocks new uploads and automatic retries of unsubmitted tasks; tasks already submitted may still complete. Deletion immediately invalidates sessions, then background cleanup retries deletion of cloud records, images and Flare data and revocation of Apple authorization where applicable. Private AI history may be unrecoverable if you lose the device credential before linking Apple. Local artworks and saved images remain for you to manage. This is not a promise of instantaneous removal from third-party backups.
Subscriptions, network requests and sharing
Apple processes purchases, renewals, cancellations and refunds. The app and server verify Apple transactions and retain product and transaction identifiers, transaction dates and environments, subscription status, a random account association and credit records for delivery, recovery, duplicate prevention and refunds. We do not receive full payment-card details. Deleting your account removes its credit balance and usage details, while minimal transaction records remain to prevent repeat redemption and address transaction disputes. Network services process necessary request information such as IP addresses for delivery and security. Sharing sends content to your chosen system sharing destination, subject to that recipient’s policies. Artwork download and reuse depend on the source licence.
Your choices
Manage Photos, camera and backup permissions in system settings, local works in the app, and consent and deletion in Account. Contact support to request access, correction or deletion, or to raise privacy questions. We may need to verify account ownership. Material changes to processing providers or purposes will be disclosed and, where required, require renewed permission.