Privacy Policy

CreatePad does not require an account, and we collect only what is needed to run the app. This policy explains what we collect, why, who processes it, and how long we keep it.

Effective October 20, 2026 App ai.createpad.creat

1.Who we are

CreatePad (package name ai.createpad.creat) is an Android app that turns your photos into new images using AI templates. It is published on Google Play by Subster Paudel, an individual developer based in Nepal ("we", "us"). Our website is createpad.ai.

This policy applies to the CreatePad app and its related services. By using CreatePad, you agree to this policy. If you do not agree, please do not use the app.

2.Information we collect

We do not ask for your name, email address, phone number or any login. Here is what the app does collect.

DataWhat it isWhy
Anonymous user ID A random ID created automatically when you first open the app, stored on your device and on our servers. It is not shown in the app To link your credits and creations to your installation
Photos you upload A resized copy (up to 1024 pixels) of a photo you pick or take with the camera. It is sent only when you tap Generate or "Free with ads". Your full-size original never leaves your phone To create the AI image you requested
Generated images The result created from your photo So you can view, save and share it
Credits, purchase and reward records Credit balance and history, Google Play order ID, purchase token, product, purchase time, status and country, and credits earned from ads To give you the credits you paid for or earned, prevent fraud and handle refunds
Generation records Which template you used, when, the result status, the credits charged and technical details of the request. No images To run the service, show My Creations, return credits for failed generations and limit abuse
Device and technical data IP address, approximate location based on it (such as city and country), device and app details, and server logs To keep the service secure, prevent abuse and fix errors
Advertising data (collected by Google AdMob) Advertising ID, app set ID, IP address, device information, ad interactions and your consent choice To show optional rewarded ads, measure them and, if you agree, personalize them

We do not collect your contacts, precise (GPS) location, call logs, or photos you have not chosen to upload. We never receive your card or bank details; Google Play handles all payments.

Ads in CreatePad are optional rewarded videos that give you free credits. When an ad is shown, Google AdMob collects data under Google's privacy policy. Where the law requires it, for example in the EEA and UK, we ask for your consent with Google's consent message, and you can change your choice at any time under "Ad privacy choices" on the app's Get credits screen. You can also reset or delete your advertising ID in your phone's Android settings.

3.How we use your information

We use your information only to provide and protect CreatePad:

  • Create the AI images you request and show them to you.
  • Keep track of your credits, verify Google Play purchases and process refunds.
  • Return credits automatically when a generation fails, and give you the credits you earn from optional ads.
  • Prevent fraud, abuse and overuse, for example by limiting how many generations can run at once.
  • Fix bugs, keep the service secure and meet legal, tax and accounting obligations.

We do not sell your data. We do not use your photos for advertising, and we do not use them to train AI models.

4.AI processing and photos of faces

Your photo leaves your phone only when you tap Generate or "Free with ads". Our server then sends it to our AI provider without your user ID. The provider may automatically check photos for safety, and if a photo is blocked, your credits are returned. It is processed to create your result and is not shared with anyone else.

We currently use OpenAI to generate images. Under OpenAI's API data policy, data sent through its API is not used to train OpenAI's models by default, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it.

Many templates work with photos of people. We use your photo only to create the image you asked for. We do not use it to identify you, and we do not create or store facial recognition templates, face prints or other biometric identifiers.

Only upload photos of yourself, or of people who have given you permission. Do not use CreatePad to create images that deceive, harass or impersonate anyone. If you see a result that is offensive or harmful, please report it to us using the contact details in section 12.

5.Who we share data with

We share data only with the service providers that run CreatePad, and only what each one needs. We do not sell or rent your data.

ProviderWhat they do for usData involved
Google Play App distribution and payments Purchase records and your anonymous user ID, which is attached to your order; Google handles your payment details
Google AdMob Optional rewarded ads and the ad consent message Advertising ID, app set ID, IP address, device information, ad interactions, consent choice, and your anonymous user ID, used to confirm ad rewards
Supabase Database, anonymous sign-in, server functions and logs Anonymous user ID, IP address and approximate location, device details, credits, purchase and generation records. Your photo passes through its servers on the way to the AI provider
Cloudflare Private storage for uploaded photos and results Your photos and generated images, for a limited time, and your IP address when you upload or download
OpenAI AI image generation The photo you submit and the resulting image, without your user ID

When you tap Share, the image goes to the app you choose, under that app's own privacy policy.

We may also disclose information if required by law, to protect the safety of users or the public, or to prevent fraud and abuse.

6.How long we keep data

Your photos are temporary: uploaded photos are deleted right after your image is generated (and unused uploads within 24 hours), and generated images within 7 days. Save any result you want to keep to your device before then.

DataHow long we keep it
Uploaded photos Deleted right after your image is generated; unused uploads within 24 hours
Generated images on our servers Up to 7 days
Copies in the app on your phone Until you clear the app's data or uninstall the app
Images you save to your gallery Until you delete them; they stay even if you uninstall the app
Generation records (no images) While your anonymous account exists, or until you ask us to delete your data. Expired items stay listed in My Creations
Credit balance, anonymous user ID and sign-in records While your anonymous account exists, or until you ask us to delete your data
Purchase and ad-reward records Kept, even after other data is deleted, as long as needed for refunds, fraud prevention, tax and accounting
Server logs 7 days

Deletion of photos and results on our servers is automatic. Copies held by OpenAI and data collected by Google AdMob follow those companies' own retention rules (see sections 2 and 4).

7.Purchases, credits and account recovery

Your credits are linked to the anonymous ID on this installation of the app. Because there is no email or login, we cannot currently recover your credits or creations if you uninstall the app, clear its data, or switch to a new phone. Reinstalling creates a new anonymous account.

Credit packs are bought through Google Play Billing. Google processes the payment and sends us confirmation of the purchase. We check each purchase with Google before adding credits. If a purchase is refunded or cancelled, we may remove the credits it added. You can also earn free credits by watching optional ads. Credits have no cash value and cannot be transferred.

If you have a problem with a purchase, contact us with your Google Play order number (it starts with "GPA.") and we will do our best to help. Refunds are handled under Google Play's refund policies.

8.Security

All data is sent over encrypted connections (HTTPS). Your photos and results are kept in private storage that is not publicly accessible; the app gets short-lived, secure links that work only for your own images.

Your sign-in session is stored encrypted on your phone. Access rules on our database keep each user's records separate, and sensitive keys are stored only on our servers, never in the app. No system is perfectly secure, but we work to protect your data and will act quickly if a problem is found.

9.Your choices and rights

You can ask us to delete your data by emailing support@createpad.ai with the subject "Delete my data". If you bought credits, include your Google Play order number (it starts with "GPA.") so we can find your records. If you never bought credits, tell us your phone model and roughly when you used the app. Because we do not know your name or email address, we may not always be able to match a request to your anonymous records, but we will do our best. Step-by-step instructions are on our data deletion page.

When we delete your data, we remove your anonymous ID, credit balance, credit history, sign-in records and generation records. Any remaining images are deleted when they expire, within 7 days. Unused credits are lost after deletion. We keep purchase and ad-reward records where needed for refunds, fraud prevention, tax and accounting.

Depending on where you live, you may also have the right to access, correct, or object to the use of your data, or to complain to your local data protection authority. Contact us and we will respond within 30 days.

You can change your ad consent choice at any time under "Ad privacy choices" in the app, and reset or delete your advertising ID in your phone's Android settings.

Uninstalling the app stops all further data collection and removes the app's data from your phone. It does not delete data on our servers or images you saved to your gallery; contact us to delete server data.

10.Children

CreatePad is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has used the app, contact us and we will delete the data we hold.

If you are under the age required to consent to data processing in your country, use CreatePad only with a parent's or guardian's permission.

11.Where your data is processed

We are based in Nepal, but our service providers process data in other countries. Our database is in the United States, and our server functions may run in a region near you, such as India. Cloudflare, OpenAI and Google may process data in the United States and other countries.

These countries may have different data protection laws from yours. We use well-known providers that protect data under their own security and privacy commitments.

12.Changes and contact

We may update this policy as CreatePad changes. We will post the new version on this page with a new effective date, and for important changes we will also tell you in the app.

For questions, data deletion requests or to report harmful content, contact: