PRIVACY POLICY
acha AI
Effective date: Apr 2, 2026
Introduction
Welcome to acha AI.
Retrica, Inc. ("us", "we", "our", or the "Company") operates the acha AI mobile application (the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Definitions
SERVICE means the acha AI mobile application operated by Retrica, Inc.
PERSONAL DATA means data about a living individual who can be identified from those data.
USAGE DATA means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
FACIAL DATA means any photo or image containing a user's face that is uploaded or selected by the user for use with AI image generation features of the Service.
DATA CONTROLLER means the natural or legal person who determines the purposes and means of processing personal data. For the purpose of this Privacy Policy, Retrica, Inc. is the Data Controller.
DATA PROCESSOR means any natural or legal person who processes data on behalf of the Data Controller.
Information We Collect
3a. Facial Data (User Uploaded Photos)
The core feature of acha AI allows you to upload or select photos, including head-and-shoulders photos containing your face ("Facial Data"), to generate personalized AI images.
What Facial Data We Collect:
When you use AI features of the Service, you may upload or select a photo that includes an image of your face. You choose which photo to provide, and we collect only the photo you select.
How We Process Facial Data:
When you use AI features, your photo, including any Facial Data, is transmitted to our servers and forwarded to Google Cloud (Google LLC) for AI processing. This transmission is protected by end-to-end encryption. Your Facial Data is processed in volatile (temporary) memory only and is not persistently stored on our servers or on Google Cloud servers. The processing typically completes within approximately 20 seconds, after which the Facial Data is automatically purged from volatile memory.
We do not store Facial Data on any server beyond the brief processing period required to deliver the AI-generated result to you.
How We Share Facial Data:
To generate AI images, we transmit your Facial Data to Google Cloud (Google LLC), which acts as a data processor on our behalf. All transmissions are protected by end-to-end encryption. Google Cloud processes the data solely for the purpose of generating images at your request. Google Cloud does not store your Facial Data, and does not use it for analysis, model training, profiling, or any other purpose.
We do not share, sell, or disclose your Facial Data to any other third parties.
How Long We Retain Facial Data:
Facial Data is retained in volatile (temporary) memory only for the duration of AI processing, which is approximately 20 seconds at most. After processing is complete, the Facial Data is automatically purged from volatile memory. We do not persistently store your Facial Data on our servers or on any third-party servers.
How We Do NOT Use Facial Data:
We do not use Facial Data for biometric identification, facial recognition, identity verification, the creation of biometric templates, or any purpose other than providing the AI image generation functionality you requested.
3b. Account Information
When you create an account, we may collect your Apple ID or Google account identifier through Apple Login or Google Login. We do not collect or store your password. Account creation is required only for making purchases, to secure your purchased Credits and enable multi-device access.
3c. Purchase and Subscription Data
When you purchase Credits or subscribe to the Service, payment is processed entirely through the Apple App Store or Google Play Store. We do not collect or store your payment card details. We receive transaction records such as purchase history, subscription status, and associated identifiers through RevenueCat, Inc., our subscription management platform.
3d. Usage Data
We may automatically collect certain information when you use the Service, including your device type, operating system, unique device identifiers, IP address, app usage patterns, and other diagnostic data.
3e. Generated Images
Generated images (the AI output results) may be stored on your device or within the Service to allow you to access previously generated images. Generated images do not contain extractable Facial Data.
Third-Party Service Providers
We use the following third-party service providers in connection with the Service:
Google Cloud (Google LLC)
Google Cloud processes uploaded photos containing Facial Data solely for the purpose of providing AI image generation functionality on our behalf. Google Cloud does not store your Facial Data and processes it only in volatile memory for the brief duration required to generate the requested images. All data transmissions are end-to-end encrypted.
Privacy Policy: https://policies.google.com/privacy
Firebase (Google LLC)
Firebase provides analytics and crash reporting services. Firebase may collect device identifiers, app usage data, and crash logs.
Privacy Policy: https://policies.google.com/privacy
RevenueCat (RevenueCat, Inc.)
RevenueCat manages in-app purchases and subscriptions. RevenueCat may collect purchase history, subscription status, and device identifiers.
Privacy Policy: https://www.revenuecat.com/privacy
Airbridge (AB180, Inc.)
Airbridge provides mobile measurement and analytics services. Airbridge may collect device identifiers, IP addresses, app usage data, and attribution information to measure app installs and analyze user behavior.
Privacy Policy: https://www.airbridge.io/privacy-policy
Facebook SDK (Meta Platforms, Inc.)
Facebook SDK is used for advertising performance measurement. It may collect device identifiers, app events, and attribution data to measure and optimize ad campaigns.
Privacy Policy: https://www.facebook.com/privacy/policy/
These third parties have access to your data only to perform tasks on our behalf and are obligated not to disclose or use it for any unauthorized purpose.
Use of Data
We use the collected data for the following purposes:
to provide and maintain the Service, including AI image generation;
to process your transactions and manage your Credits and subscriptions;
to monitor and analyze usage to improve the Service;
to detect, prevent, and address technical issues;
to measure advertising performance and optimize campaigns;
to provide customer support;
to comply with legal obligations.
Retention of Data
Facial Data is retained in volatile memory for approximately 20 seconds during processing and is automatically purged upon completion. We do not persistently store Facial Data.
Account information is retained for as long as your account is active. If you request account deletion, we will delete your personal data, subject to any legal obligations requiring retention.
Usage Data is generally retained for a shorter period, except when used to improve the security or functionality of the Service or when legally required.
Generated images stored in your in-app history are retained until you delete them or delete your account.
Transfer of Data
Your information may be transferred to and processed on servers located outside of your country, including the United States and other jurisdictions where data protection laws may differ from those in your jurisdiction.
Retrica, Inc. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
Your consent to this Privacy Policy followed by your use of the Service represents your agreement to such transfer.
Disclosure of Data
We may disclose your information in the following circumstances:
To third-party service providers listed in Section 4, solely for the purposes described;
If required by law or in response to valid requests by public authorities;
If we or our subsidiaries are involved in a merger, acquisition, or asset sale;
If we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or others.
We do not sell your Personal Data or Facial Data to third parties.
Security of Data
The security of your data is important to us. We use commercially acceptable means to protect your data, including end-to-end encryption for Facial Data transmissions. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
The Service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you become aware that a child has provided us with personal data, please contact us at contact@retrica.co, and we will take steps to remove that information.
Your Data Protection Rights (GDPR)
If you are a resident of the European Union or European Economic Area, you have the following rights:
The right to access, update, or delete your personal data;
The right to rectification of inaccurate or incomplete data;
The right to object to processing of your personal data;
The right to restriction of processing;
The right to data portability;
The right to withdraw consent at any time.
To exercise these rights, please contact us at contact@retrica.co.
Your Data Protection Rights (CCPA)
If you are a California resident, you have the right to:
Know what personal information we collect about you;
Request deletion of your personal information;
Opt out of the sale of your personal information (we do not sell personal information);
Not be discriminated against for exercising your rights.
To exercise these rights, please contact us at contact@retrica.co.
Do Not Track Signals
We honor Do Not Track signals and do not track or plant cookies when a Do Not Track browser mechanism is in place.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the Service and updating the "Last updated" date above.
You are advised to review this Privacy Policy periodically. Changes are effective when posted.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
By email: contact@retrica.co