1. What we process, and why
A-EYE processes only the following: what an analysis request needs, and the minimum record required to keep the service running.
| Data | Purpose | Retention |
|---|---|---|
| The photo you submit, and its file name | Estimating whether it is AI-generated; reading provenance information (such as C2PA) | Not retained. Discarded as soon as the result is returned. |
| Operational record — request number, the first 12 characters of the photo file’s hash, image format, dimensions and size, the verdict and scores, processing time | Troubleshooting and abuse prevention | Exists only in the server’s log. On Hugging Face’s server it disappears when the server restarts; on the operator’s own server it is kept for at most 30 days (sooner, oldest first, if the log files pass about 50 MB) and then deleted automatically. It is not included in backups and we do not copy it anywhere else. |
| IP address | Rate limiting (20 requests a minute, 300 a day) | Handled in server memory only. Never written to disk; cleared when the server restarts. |
| Analysis history, settings, date you accepted the terms | Showing your history, keeping your settings | Stored on your device only. Never sent to the server. |
A photo file can contain metadata (EXIF) such as the camera model, the capture time and sometimes the location, and it travels with the file. The server reads it only to check provenance and does not store it. If you do not want location included, use the option your operating system offers for removing location when you pick a photo, or use a photo without location data.
The hash in the operational record is a short fingerprint computed from the photo; it cannot be used to reconstruct the photo or learn what it shows. The record contains no name, account, IP address or file name.
A photo may show other people. A-EYE does not identify people in photos or extract facial features; it only computes signals of whether the image was generated.
What we do not collect
Name, email address, phone number, account, advertising identifier, contacts, location permission, microphone. The app contains no advertising or behavioral-analytics SDK.
2. Retention and deletion
- A submitted photo is processed in the analysis server’s memory and discarded as soon as the result is returned. Temporary files that may be created while the request is handled are deleted when the request ends.
- The operational record and IP addresses are kept as described in the table above.
- The history on your device stays until you delete it or uninstall the app. Only the latest 100 entries are kept; older ones are removed automatically.
3. Not used for model training
We do not use submitted photos to train or improve AI models. If a future feature (such as reporting a wrong verdict) asks you to share a photo, we will ask for separate consent and revise this policy first.
5. Hosting and international transfer
The analysis is processed on Hugging Face’s cloud service, so a photo you submit is transferred to a server in the United States. In app version 1.0.1 and later, if that server is busy, does not answer or does not return a result in time, the app may send the same photo again to the operator’s own server in South Korea, and for the next five minutes uses the operator’s server first. Requests to the operator’s server pass through Cloudflare, which relays the internet connection, so a photo can pass through Cloudflare data centers outside Korea, such as in the United States. The web version at api.getaeye.com is analyzed on the operator’s server from the start. App version 1.0.0 and the web version at wonjun12-aeye-backend.hf.space are always analyzed on Hugging Face only.
| Recipient | ① Hosting the analysis server: Hugging Face, SAS (9 rue des Colonnes, 75002 Paris, France) · privacy@huggingface.co ② Connection relay (when app 1.0.1 and later use the operator’s server, and the api.getaeye.com web version): Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) · privacyquestions@cloudflare.com |
|---|---|
| Country | ① United States (location of Hugging Face’s servers) ② The United States and other countries where Cloudflare has data centers (depends on where you connect from) |
| When and how | When you request an analysis, over an encrypted connection (HTTPS). Cloudflare receives connections to the operator’s server and passes them on, encrypted again, so the content of such a request passes through Cloudflare’s systems in transit. When you tap the camera or gallery button to start one, and while you wait for the result, the app checks whether the server is up. If a server is busy, does not answer or does not return a result in time, the app may send the same photo again to the other server; while a server is still getting ready the check repeats every few seconds for up to about four minutes. These checks send no photo, only the connection itself (your IP address). |
| Data transferred | The photo file and file name from section 1, and your IP address |
| Purpose | ① Hosting the analysis server (processing on our behalf) ② Relaying the internet connection and security (including blocking excessive requests) |
| Retention | As in section 2: the photo is discarded right after the analysis. A-EYE does not ask Cloudflare or Hugging Face to store the photo or to use it for their own purposes, including training, and does not allow it. Access records that the two companies keep in their own infrastructure follow their privacy policies (Cloudflare, Hugging Face). |
| How to refuse | Nothing is transferred unless you use the analysis feature (the camera or gallery button). Without it, photos cannot be analyzed. |
In the Android app only: when the phone’s DNS (the lookup of internet addresses) cannot find the analysis server’s address or has not answered within 2.5 seconds, the app looks up that one name (wonjun12-aeye-backend.hf.space, or api.getaeye.com for the operator’s server) with two public DNS services, Cloudflare (1.1.1.1) and Google (8.8.8.8), over an encrypted connection. No photo or history is sent; the two services handle the name looked up and your IP address under their own privacy policies (Cloudflare, Google).
6. Your rights
- You can delete the history stored on your device at any time: Settings > Delete all history, or uninstall the app (on the web, clear the site data in your browser).
- The server keeps nothing that identifies you, so in principle there is no personal data to access, correct, delete or restrict. If you still want confirmation, write to the contact in section 11; we answer within 10 days.
- You may exercise these rights through a legal representative or an authorized agent.
7. App permissions
- Camera (optional): used only when you take a photo to analyze. No video or sound is recorded. Without it you can still analyze photos you pick.
- Picking a photo: the app uses the operating system’s photo picker, which needs no permission. The app never gets access to your whole library, only to the one photo you choose.
- Saving a result card (iPhone, optional): only when you save the card to Photos with Save Image in the share sheet, iOS asks for permission to add photos. It is an add-only permission; the app never reads your photo library.
A permission is requested only when you use the feature, and you can withdraw it at any time in your device settings.
8. Security
- All traffic is encrypted in transit (HTTPS).
- Uploaded files are validated for type and size, and requests are rate-limited.
- File names and IP addresses are kept out of the operational record.
- We ask for as little as possible in the first place: there are no accounts and there is no database.
10. Children
A-EYE does not knowingly collect personal information from children under 14. Because it takes no account or identifying information, it cannot know a user’s age.
11. Contact
Privacy officer: Wonjun Choi (developer and operator of A-EYE)
Email: oscar43@naver.com
For questions about using the app, see the support page.
12. Complaints
In Korea you can contact the following bodies about a privacy infringement.
- KISA Privacy Infringement Report Center — privacy.kisa.or.kr, dial 118
- Personal Information Dispute Mediation Committee — www.kopico.go.kr, 1833-6972
- Supreme Prosecutors’ Office, Cyber Investigation — www.spo.go.kr, dial 1301
- Korean National Police Agency, Cyber Bureau — ecrm.police.go.kr, dial 182
13. Changes to this policy
This policy applies from 12 October 2026. We announce changes in the app and on this page at least 7 days before they take effect (30 days for changes that materially affect your rights).
Change history: in the version effective 24 September 2026 the only analysis server was Hugging Face (United States). From 12 October 2026, app version 1.0.1 and later use the operator’s own server (South Korea, relayed by Cloudflare) when Hugging Face is busy or does not answer. Operational records gained “at most 30 days on the operator’s server” next to “until the server restarts”, and IP addresses changed from “at most 24 hours” to “server memory only, cleared on restart”.