Immersa (“we,” “us” or “our”) is the controller of the information described in this policy. You can contact us at feedback@getimmersa.com.
This policy explains how Immersa processes information when you use the Immersa iPhone or iPad app.
1. Information you provide and create
Immersa processes:
- Photos you take with the camera or select through Apple’s photo picker.
- Isolated subject images created from those photos.
- Your native and learning-language choices.
- Object names, translations, descriptions and example sentences.
- Collection names and emojis you create.
- Flashcard progress, review ratings, due dates and learning streaks.
- Optional location coordinates associated with camera captures.
- Reminder, appearance, voice and review preferences.
- Information you choose to include in support emails or diagnostic exports.
Immersa does not require an Immersa account and does not ask for your name, phone number or payment-card information.
2. How AI sticker creation works
When you take or select a photo, Immersa first uses Apple’s on-device technology to isolate and crop the main visible subject. The original full photo is not deliberately uploaded or stored by Immersa, although the isolated image may contain incidental surrounding detail.
If you allow AI processing, Immersa may send the following to OpenAI through our Cloudflare-hosted service:
- The isolated subject image.
- Your selected languages.
- Relevant object names, translations or descriptions.
- Existing example sentences when requesting new ones.
- Relevant collection names when categorising a sticker or generating a collection emoji.
Immersa uses this information to identify and translate objects, generate learning content and organise your sticker library. OpenAI may also use the API inputs and outputs to improve and train its models.
Your capture location, review history, reminders and purchase status are not sent to OpenAI.
We ask for affirmative permission before sending this information. You can turn off AI processing in Settings. Turning it off prevents future AI requests but does not automatically delete stickers already stored on your device or in iCloud.
3. OpenAI data handling
OpenAI may use the API inputs and outputs sent by Immersa to improve and train its models. These inputs and outputs can include the isolated subject image, selected languages, relevant learning text, collection names and AI-generated responses described above.
OpenAI may retain API inputs, outputs and associated metadata for up to 30 days for abuse monitoring, unless a longer period is required by law or reasonably necessary to protect its services or third parties. Image inputs are scanned for child-safety purposes, and potentially unlawful images may be retained for review.
4. Local and iCloud storage
Immersa stores your sticker library on your device. This can include:
- Isolated sticker images
- Words, translations and descriptions
- Collections
- Example sentences
- Flashcard and review progress
- Learning streaks
- Optional capture coordinates
If iCloud Sync is enabled, this information is stored in your private CloudKit database so it can synchronize across your Apple devices. Apple states that a private CloudKit database belongs to the user and is accessible only to that user by default. Apple CloudKit private-database documentation
Turning off iCloud Sync stops synchronization but does not by itself erase the remote copy. Use Delete Library Everywhere in Immersa’s iCloud settings to delete the synchronized library.
5. Location and notifications
Location is optional. If you allow it, Immersa requests your current location when taking a camera photo and associates the resulting coordinates with the sticker so it can appear on the Sticker Map. Location is stored locally and, if enabled, in your private iCloud library. It is not sent to OpenAI.
Notifications are optional and are used to schedule local practice reminders. Immersa does not use notification permission for advertising.
You can change Location and Notification access in Apple Settings.
6. Security and operational information
Immersa uses Apple App Attest to help verify that AI requests come from a genuine installation of the app. This involves device-specific cryptographic identifiers, public keys and counters.
Cloudflare processes network requests and uses a hashed IP address and hashed device identifiers for abuse prevention, request limits and security. Operational logs may include:
- Request time and identifier
- Requested operation
- Response status
- Duration
- Token usage
- OpenAI request identifier
- A shortened hashed device identifier
Our custom Worker logs do not deliberately include photos, learning text, raw IP addresses, prompts, access keys or App Attest assertions. Current Cloudflare logs are kept for no more than seven days.
App Attest registration records are retained while needed to authenticate Immersa requests and protect the AI service against replay attacks, fraud and abuse. Apple does not notify us when Immersa is uninstalled, so a registration record may remain after the app is removed. These records contain installation-specific public-key material, counters and timestamps; they are not connected to your name, email address or Apple Account and are not used for advertising or cross-app tracking. App Attest registration records are deleted after 12 months without use of Immersa’s AI service.
7. Diagnostics
Immersa creates rotating diagnostic files on your device to help identify technical problems. These may contain technical events, language settings, shortened sticker identifiers, filenames, words or translations involved in an operation, timing information and error descriptions.
Diagnostics are not automatically uploaded. They leave your device only if you deliberately use Export Diagnostics or otherwise send them to us.
8. Purchases
Subscriptions are purchased and managed through Apple. Apple processes payment information and provides Immersa with the product and entitlement information needed to determine whether Immersa Plus is active. Immersa does not receive your complete payment-card or bank details.
9. Why we process information
Where applicable under UK or European data-protection law, we rely on:
- Performance of our contract with you to create stickers, provide learning features and synchronize your chosen library.
- Your permission for optional location use and for the disclosed third-party AI processing and model-improvement use.
- Our legitimate interests in preventing fraud and abuse, protecting the service and diagnosing reliability problems.
- Compliance with legal obligations relating to purchases, disputes, security and lawful requests.
You are not required to provide optional location or notification access. If you do not allow AI processing, Immersa cannot create or regenerate AI-powered sticker content.
10. Service providers and international transfers
We use:
- Cloudflare, to operate and protect Immersa’s API.
- OpenAI, to identify objects, translate language, generate learning content and improve or train its models using the disclosed API inputs and outputs.
- Apple, for app distribution, purchases, App Attest, private CloudKit storage, photo selection, notifications and location permissions.
These providers may process information in countries outside the United Kingdom or European Economic Area. Where required, we use contractual and legal safeguards for international transfers, such as adequacy regulations, standard contractual clauses or the UK International Data Transfer Addendum.
11. Retention and deletion
- Local library data remains until you delete it or remove the app.
- Private iCloud library data remains until you use Delete Library Everywhere or remove it through Apple’s applicable data controls.
- Cloudflare operational logs remain for no more than seven days.
- Daily abuse-prevention counters expire shortly after their daily measurement period.
- App Attest registration data is deleted after 12 months without use of Immersa’s AI service.
- OpenAI may retain API abuse-monitoring data for up to 30 days, subject to the exceptions described above.
- Information used by OpenAI to improve or train its models may be retained and processed separately under OpenAI’s applicable terms and data controls.
- Support correspondence is kept only for as long as reasonably necessary to respond, handle follow-up or establish or defend legal claims, and is then deleted.
- Diagnostic files remain on-device until cleared or automatically overwritten.
Deletion from active systems may not immediately remove copies retained temporarily in encrypted backups or records that must be preserved for security or legal purposes.
12. Your choices and rights
Within Immersa you can:
- Turn AI processing on or off.
- Enable or disable iCloud Sync.
- Remove the library from the current device.
- Delete the library from iCloud and synchronized devices.
- Clear local diagnostics.
- Change Location and Notification permissions through Apple Settings.
Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent where processing relies on consent.
Contact feedback@getimmersa.com to exercise these rights. You may also complain to your local data-protection authority. In the United Kingdom, this is the Information Commissioner’s Office.
13. Children
Immersa is intended for people aged 13 and over. Children under 13 must not use Immersa or submit photographs or other information for AI processing. If you are under 18, you should use Immersa with the permission and supervision of a parent or guardian.
14. Security
We use measures including encrypted HTTPS connections, Apple App Attest, request limits, private CloudKit storage, access controls and data minimisation. No system is completely secure, but we regularly review the safeguards used by Immersa and its service providers.
15. Changes
We may update this policy when Immersa’s features, providers or legal obligations change. We will update the effective date and provide additional notice or request renewed permission when a change materially affects how information is shared or used.
16. Contact
Immersa
feedback@getimmersa.com