Privacy Policy
Effective October 9, 2026 · Contact support@creativeassets.design
Your app’s work should stay yours. Here is what we process, why we process it, and the choices available to you.
1. Who we are and what this policy covers
Creative Assets operates a web-based editor for App Store creative artwork and optional AI background generation. This policy covers our website, accounts, saved projects, generation requests and support. Contact us at support@creativeassets.design for privacy questions or requests.
App Store is a trademark of Apple Inc. Creative Assets is independent of Apple. We do not require your App Store Connect credentials and do not publish files to your Apple account.
2. Information we collect
Account information includes your name, email address, verification status and session records. When you use Google sign-in, we receive basic account information from Google. Email/password accounts use authentication-managed password hashes; we do not store readable passwords.
Project information includes the app details and copy you enter, design settings, and screenshots, icons, images or videos that you choose to save to your account. Generation records include your prompt, selected model and settings, reference identifiers, task status and output media.
Billing records include account and order identifiers, credit pack, payment status, currency, amount and the credit ledger. Waffo processes checkout and payment details. We do not receive or store your full card number or card security code.
Support messages include the information you send us. Limited security and operational records may include IP addresses, request information and errors. If you permit optional analytics, public-page usage information may be processed by our analytics providers.
3. Local drafts and private cloud projects
The editor saves its current draft and selected source files in your browser’s IndexedDB where available. Preferences and cookie choices use local storage. Local editing and exports do not send those files to APIMart or cloud project storage. Browser storage can be lost if you clear site data, use private browsing, or reach a storage limit. Keep a project backup.
When you select Save to account or submit an AI generation, the project and selected files are uploaded to private Cloudflare R2 object storage. Account access is checked before a download link is issued. These signed links expire, but anyone who obtains an unexpired link can access that file, so do not share the link with unintended recipients.
Deleting a cloud project removes its project records, generation records and associated stored media. Active or unresolved generation tasks must be resolved before deletion. A cloud deletion does not remove copies you downloaded or the draft on this device. Starting a new local draft replaces the current browser draft; clearing this site’s data removes its browser storage.
4. AI processing and your materials
AI requests send your prompt and generation settings to APIMart and the selected model provider. If you add reference images, first or last frames, or reference videos, the request also includes expiring read links to task-specific copies of those files. Screenshots and icons are composed separately from the background and are not included in these AI generation requests. Any files you choose to save to your account still use our cloud storage.
We use generated output to deliver the requested project. We do not use your uploads to train our own AI models or publish your projects in marketing without a separate opt-in. APIMart and upstream model providers process the inputs they receive under their own applicable terms and policies. We do not promise that every upstream provider has the same retention or training practices. Avoid submitting confidential, sensitive or third-party personal information unless you have authority to do so.
A provider may reject a request or be unable to produce a usable output. We retain task status and credit records to resolve failures and prevent repeated charges.
5. How we use information
We use information to authenticate accounts, save and retrieve private projects, generate requested backgrounds, deliver downloads, process payments and credits, send transactional emails, provide support and prevent abuse. We also use limited operational data to diagnose errors and protect the service.
Where a legal basis is required, we rely on performing our agreement with you for requested service and billing, legitimate interests for proportionate security and service maintenance, legal obligations for records we must retain, and consent for optional analytics. You may withdraw analytics consent through Cookie settings in the footer.
6. Providers and disclosures
Our configured providers include Cloudflare for hosting, D1 account and project records, Turnstile verification and R2 storage; Better Auth software and Google for authentication; Resend for transactional email; APIMart and selected model providers for requested generation; Waffo for checkout and payments; and Sentry for operational error reporting when enabled. Google Analytics and Microsoft Clarity may process public-page usage when configured and permitted by your cookie choice.
Providers may process data in countries other than your own. Applicable safeguards and provider contracts must be considered when operating the service. This policy does not represent that any particular transfer certification or agreement is in place when it has not been established.
We do not sell your personal information. We may disclose limited information where legally required, to protect rights or security, or as part of a business transfer subject to applicable law. We do not publish customer projects as a public gallery by default.
8. Retention and deletion
Saved projects and uploaded or generated media remain available until you delete the project or request account deletion, subject to service limits and operational requirements. Do not treat cloud storage as your only backup. Temporary AI references are removed after the associated generation reaches a confirmed terminal state and its result has been saved. Unsubmitted reference uploads expire after one hour and are removed by scheduled cleanup; active or unresolved tasks retain their inputs until resolved. A pending cleanup record may remain briefly to remove any late upload using an unexpired upload link. These deletion rules apply to our storage; APIMart and upstream providers manage their own copies under their retention policies.
We retain account, payment, credit, support and security records for as long as needed to provide the service, resolve disputes, meet legal duties and prevent abuse. We cannot promise immediate erasure of records that must be retained, or of copies held in provider backups. Access to retained records is limited to their necessary purpose.
To request access, correction, export or deletion of account information, email support@creativeassets.design from your account email. We may verify your identity before acting. We will handle the request under applicable law and explain any necessary retention.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent, or complain to a relevant privacy regulator. Contact us to exercise these rights. Withdrawing consent does not affect processing that was lawful before withdrawal.
You control the information you upload and the use of optional AI generation. Use local editing if you prefer not to send project media to cloud storage or model providers. The service is intended for users aged 18 or older, and we do not knowingly collect account information from children.
10. Security and updates
We use account authorization, signed private-media links, verified provider callbacks and server-side handling of service secrets to protect access and billing. No storage or transmission system can guarantee absolute security. Keep your account credentials and project download links private and contact support if you suspect unauthorized access.
We may update this policy when the service or its processing changes. The effective date above identifies the current version. We will provide additional notice when applicable law requires it. Questions can be sent to support@creativeassets.design.