Prompt Pixa — Privacy Policy

1. Introduction

Prompt Pixa is a prompt library app published by Codeleka ("we", "us", "our"). Prompt Pixa provides curated prompts and sample, demonstrative AI-generated images for inspiration. The app does not claim to be an AI model and is not affiliated with any AI company or brand.

This privacy policy describes what information we collect when you use the Prompt Pixa mobile app, how we use it, who we share it with, and how we protect it. By using the app you agree to the practices described here.

2. Information We Collect

2.1 Information you provide

Account / Login data: If you create an account or log in, we store the data you provide such as username, email address, and an optional avatar. We use this to manage your saved prompts, collections, and basic personalization (e.g., saved items, view counts).
Saved content: Prompts and collections you save in the app are stored on our servers or in your device (depending on your settings) so you can access them later.
Support and feedback: Any messages you send to support (email or in-app) are stored to help us resolve issues and improve the app.

2.2 Automatically collected information

Usage data: Information about how you use the app (features used, views, searches, saved items) to provide and improve the service and to count views for user management.
Device & connection data: Device model, operating system version, unique device identifiers (non-personal), IP address, advertising ID (Ad ID) used for advertising and analytics, and network status.
Crash & performance data: Logs and diagnostics used to fix bugs and improve stability.
Cookies & similar technologies: When you use embedded web pages (WebView) we or third parties may use cookies and local storage for functionality, preferences, and analytics.

2.3 Data shown for demonstration

Sample AI-generated images included in the app are for demonstration only. We do not claim ownership over any third-party model outputs; these are shown to illustrate prompt outcomes and are labeled as samples.

3. App Permissions & Why We Need Them

The app requests the following permissions in the Android manifest. Below we explain the purpose of each permission and how it is used.

<uses-feature
    android:name="android.hardware.camera"
    android:required="false" />

<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
<uses-permission android:name="android.permission.VIBRATE" />
<uses-permission android:name="com.google.android.gms.permission.AD_ID" />
<uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
<uses-permission android:name="android.permission.RECORD_AUDIO" />
<uses-permission android:name="android.permission.CAMERA" />
<uses-permission android:name="com.google.android.gms.permission.AD.ID" />
<uses-permission
    android:name="android.permission.WRITE_EXTERNAL_STORAGE"
    android:maxSdkVersion="32" />

Permission explanations

INTERNET: Required to load content in the app's webviews (AI tool websites opened inside the app), to download sample images, fetch prompts, and communicate with our servers.
ACCESS_NETWORK_STATE: Used to check connectivity before performing network requests and to provide a better user experience when offline.
VIBRATE: Used for optional haptic feedback inside the app (e.g., when saving a prompt).
AD_ID / com.google.android.gms.permission.AD_ID: Used to access the Advertising ID (Ad ID) to serve and measure personalized ads. This is standard for advertising SDKs like AdMob and Meta Audience Network.
POST_NOTIFICATIONS: Used to ask the user for permission to show push notifications (only on Android versions that require runtime notification permission).
RECORD_AUDIO & CAMERA: Not used by the Prompt Pixa core features directly. These permissions are requested only when an embedded WebView page (opened by the user) requests them — for example, third-party AI tool pages that ask for microphone or camera access for voice input or image uploads. We do not record or access audio/camera unless you explicitly grant permission and the web content requests it.
WRITE_EXTERNAL_STORAGE (maxSdkVersion=32): Used to temporarily cache files (for older Android versions). For modern Android (SDK > 32) we use scoped storage APIs and storage access frameworks. We do not require this permission on newer devices.

Note: You can deny or revoke any permission at any time via your device settings. Core prompt browsing and search features work without camera or microphone access.

4. Advertising, Analytics & How We Use Data

Advertising partners

We may show ads from third-party advertising networks. These partners may collect data for personalized advertising and measurement purposes. Examples of ad networks we use (may vary over time):

Google AdMob
Meta Audience Network (Facebook)
Other reputable ad partners and mediation networks

What data is shared with ad/analytics partners?

Advertising ID (Ad ID) — used for ad personalization and frequency capping.
Non-identifying device info (model, OS version, language, country).
App usage events (views, clicks, session length) — for analytics and ad performance measurement.

Analytics & crash reporting

We use analytics and crash-reporting services to understand app usage, fix crashes, and improve features. These services may collect technical information, usage events, and crash logs.

Personalized ads & opt-out

You can opt out of personalized advertising through your device settings or ad preferences (Google Ads Settings, iOS App Tracking Transparency where applicable). For Android, resetting or opting out of Ad ID personalization can be done via system settings. We may provide an in-app toggle to limit ad personalization.

5. Third-Party Services & Links

Prompt Pixa contains links and in-app webviews to external AI tools and websites. These are third-party services and are governed by their own privacy policies. When you open a third-party site in our WebView, that site may collect data directly from you. We are not responsible for third-party privacy practices.

Examples of third-party integrations

Embedded WebView access to public AI tool websites (for search and sample generation) — these pages may request camera or microphone access for their features.
Advertising & monetization SDKs (AdMob, Meta Audience Network, etc.).
Analytics and crash reporting providers.

We recommend reviewing any third-party site's privacy policy before providing personal information on that site.

6. Data Retention & Deletion

We retain personal data (account info, saved prompts, and related metadata) as long as your account exists or as needed for legitimate business purposes such as providing the service, complying with legal obligations, resolving disputes, and enforcing agreements.

If you request account deletion, we will delete your account and associated personal data from active systems within a reasonable time frame (typically 30–90 days), except for data we must retain for legal or legitimate business reasons (e.g., to prevent fraud or abuse).

7. Security

We take reasonable administrative, technical, and physical measures to protect the information collected through the app. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a security breach affecting personal data, we will follow applicable laws and notify affected users as required.

8. Legal Bases (for users in the EEA)

If you are located in the European Economic Area (EEA), our legal bases for processing personal data are:

Processing necessary for the performance of a contract (providing core app features).
Processing based on your consent (where consent is required for push notifications or personalized ads).
Processing necessary for compliance with legal obligations.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate personal data.
Request deletion of your personal data (account deletion).
Request restriction of processing or object to certain processing activities.
Obtain a copy of your personal data in a portable format.
Opt-out of the sale or sharing of personal data where applicable (e.g., CCPA rights for California residents).

To exercise these rights, contact us at the address below. We may require proof of identity to process certain requests.

10. Children

Prompt Pixa is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us to request deletion.

11. Changes to this Policy

We may update this privacy policy from time to time. When we do, we will update the "Effective date" at the top of this page. If changes are material, we will provide a prominent notice in the app or via email (if you have provided one).

12. Contact Us

If you have questions about this privacy policy or want to exercise your data rights, contact us:

Publisher: Codeleka
Email: support@codeleka.com
Address: (Insert company address here) — replace with your official address

13. Consent & Acknowledgement

By using Prompt Pixa, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described. If you do not agree, please do not use the app.