Privacy Policy
Last updated: 24 September 2026
MinifigMe turns a photo you choose into a minifigure. You don't need an account, and we never ask for your name, email or location.
đź”’ Your photo is encrypted the entire time it's on our servers and is deleted automatically: the photo you send is removed as soon as the minifigure has been generated, and the finished image is deleted the moment it reaches your phone.
What we process, and why
- Your photo. When you tap Generate, the photo is sent over an encrypted connection to our server, where it is stored encrypted (AES-256) and passed on to OpenAI, which generates the minifigure. It is used for nothing else. The photo is deleted from our server as soon as generation finishes — whether it succeeded or not.
- The finished image. Stored encrypted on our server only until your phone has downloaded it, then deleted. If the app never collects it, it is deleted after 7 days at the latest.
- A device identifier.Created by Apple's App Attest so we can tell requests come from the genuine app and hand each image only to the phone that asked for it. It is not tied to you as a person and cannot be used to identify you.
- A push token, only if you allow notifications, so we can tell you when your minifigure is ready.
- Purchases. Payment is handled entirely by Apple; we never see your card or Apple ID. Your remaining generations are kept in your own iCloud key-value storage, not on our servers.
- Anonymous usage statistics.The app reports events such as “generation completed” or “paywall opened” to Google Firebase Analytics so we can see what works. No photos, images or personal details are ever included.
Who else sees your data
- OpenAIgenerates the minifigure from your photo. Under OpenAI's API terms, data sent this way is not used to train their models and may be retained for up to 30 days for abuse monitoring before being deleted.
- Vercel hosts our server and the encrypted, short-lived storage described above.
- Upstash stores the status of your generation job (queued, done, failed) for up to 7 days. It never holds any image data.
- Apple handles App Attest, push notifications and payments under its own privacy policy.
- Google Firebase receives the anonymous usage statistics.
We never sell data, and we do not use it for advertising.
Your gallery stays on your phone
Every minifigure you generate is saved in the app's gallery on your device, together with the photo it was made from so you can compare them. Deleting an item from the gallery, or deleting the app, removes them. Nothing in the gallery is stored on our servers.
Your choices
- You can decline notifications; the app will still work.
- You can revoke camera and photo access at any time in iOS Settings.
- Because we keep nothing that identifies you, there is no account to delete — removing the app removes everything.
Children
MinifigMe is not directed at children under 13.
Changes
If this policy changes, the new version is published here with a new date at the top.
Contact
Questions about privacy? contact@minifigme.app