Privacy Policy
Effective 23 October 2026
In short: your photos are private to your account and deleted after 30 days. We use them only to add your watermark. We never sell your data or use your photos to train AI. Our analytics uses no cookies and never receives your photos or email. Meta's ad cookies are used only if you accept them.
1. Who is responsible
Logoli, run from Israel, is the controller (database owner) of your personal data. Contact us about privacy at [email protected].
2. What we collect and why
| Data | Where it comes from | Why we use it | Legal basis (GDPR) |
|---|---|---|---|
| Name, email, profile picture and account ID from Google or Apple. With Apple's "Hide My Email" we only get a relay address. | You, when you sign in | Create and secure your account, send service emails such as deletion reminders and receipts | Contract |
| Photos you upload and images you export | You | Add your watermark, store your work for 30 days so you can use it on phone and web | Contract |
| Logos, signature text and templates | You | Let you reuse your watermark | Contract |
| Plan, credits, purchase history (no card details) | Paddle or Apple | Give you what you paid for, handle refunds, keep tax records | Contract, legal obligation |
| Usage events, such as "landing page viewed", "studio opened", "photo added", "photo saved", "signed in" and "checkout started", with device type, browser, country and language. They carry a random ID stored on your device, which is linked to your account ID after you sign in. No name or email is sent. | Your device | Understand which steps of the app work and where people get stuck | Legitimate interest |
| Screen recordings of how the website and web app are used (clicks, scrolling, pages), so we can find and fix confusing steps. Photos, logos and every image are replaced by blank boxes, everything you type is hidden, and your name and email are hidden. Never in the iPhone app. Other text on screen, such as menus and buttons, can be seen. Visitors from the EU and UK are recorded only if they allow "Analytics" in the cookie banner. You can turn recordings off by switching off "Analytics" in "Cookie settings", or ask us at [email protected] not to record you. | Your device | Find and fix problems in the app | Consent (EU, EEA, UK, Switzerland); legitimate interest elsewhere |
| Visit counts (no ID, no cookies) | Your device | Know how many people visit the website | Legitimate interest |
| Ad campaign tags: the utm_ tags in the link of the ad or post that brought you, such as source, campaign and content. No ad click IDs. | The link you arrived from | Know which ads and posts bring users and paying customers, so we spend less on ads that do not work | Legitimate interest |
| IP address and request logs | Your device | Deliver pages, protect against abuse and fraud | Legitimate interest |
| Ad measurement with Meta, only if you accept ad cookies: page views, sign-ups and purchases (with the amount), linked to Meta's cookie IDs and a hashed (scrambled) account ID. No photos, name or email. | Your device and our payment records | Know which Instagram and Facebook ads bring users and paying customers | Consent, which you can withdraw at any time |
| Marketing emails | You, only if you opt in | News and offers | Consent, which you can withdraw at any time |
Under Israeli law you are not legally required to give us this data. Without sign-in details and photos, however, we cannot provide the Service.
We do not use your photos to identify people. Face detection for watermark placement runs on your device and only finds where faces are, so the watermark does not cover them.
3. Who we share it with
We share data only with providers that help us run Logoli, under contracts that require them to protect it and use it only for us.
| Provider | What they do | Data they receive | Location |
|---|---|---|---|
| Supabase | Sign-in, database and photo storage | Account data, photos, logos, templates, ad campaign tags | EU (Ireland) |
| Cloudflare | Hosts and protects the website; Cloudflare Web Analytics counts visits without cookies | IP address, request data, page views | Global network |
| Google, Apple | Sign-in | Sign-in request | USA and other countries |
| Anthropic (Claude API) | AI placement suggestions, only when you use that feature | A reduced-size copy of the photo and placement details, no name or email | USA |
| Paddle | Web payments, as merchant of record (Paddle is an independent controller for payment data) | Name, email, country, payment details, and the ad campaign tags saved with the subscription | UK, EU, USA |
| Apple App Store | In-app payments (Apple is an independent controller) | Handled by Apple; we receive purchase status only | USA and other countries |
| Meta Platforms Ireland | Measures our Instagram and Facebook ads, only if you accept ad cookies (Meta Pixel and Conversions API) | Page views, sign-up and purchase events with the amount, Meta cookie IDs, a hashed account ID, IP address and browser details | EU (Ireland) and USA |
| PostHog | Cookieless product analytics and screen recordings | Usage events, the random device ID and account ID, and screen recordings in which photos, images, typing, name and email are hidden | EU (Frankfurt, Germany) |
Anthropic does not use data sent through its commercial API to train its models, and keeps it only for a limited period for safety and abuse monitoring. We may also disclose data when the law requires it, or to a buyer if the business is sold, who must keep this policy.
4. Transfers outside Israel and the EU
Some providers are in countries outside Israel and the European Economic Area, mainly the USA. We transfer data only where the law allows, such as to countries with an adequacy decision, providers certified under the EU-US Data Privacy Framework, or under the European Commission's Standard Contractual Clauses. Israel has an EU adequacy decision, and transfers from Israel follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.
5. How long we keep it
| Data | Kept for |
|---|---|
| Uploaded photos and exports | 30 days from upload, then deleted automatically. We remind you in the app and by email 3 days before. |
| Logos, templates, signature text | Until you delete them or your account |
| Account data, including the ad campaign tags saved to your profile | Until you delete your account, then removed within 30 days |
| Ad campaign tags on your device | 30 days |
| Purchase and tax records | 7 years, as Israeli tax law requires |
| Usage events and error reports | Up to 12 months |
| Screen recordings | Up to 30 days |
| Meta cookies (_fbp, _fbc) and your ad-cookie choice, on your device | Up to 90 days for Meta cookies; your choice until you change it or clear site data |
| Backups | Overwritten within 30 days, so deleted data leaves backups within 30 days |
6. How we protect it
Each user's files sit in their own private storage folder. Files are only reachable through short-lived links issued after we check that you own them. Data is encrypted in transit and at rest, access by our staff is limited and logged, and we test that no user can reach another user's data before each release. If a security incident affects your data, we will notify you and the authorities as the law requires.
7. Your rights
You can ask to see, correct, delete or download your data, to restrict or object to how we use it, and to withdraw consent. You can delete photos, logos and your whole account yourself in Settings, in the web app and the iPhone app, and download a copy of everything saved with your account there with "Download my data". For anything else, write to [email protected]. We answer within 30 days. Israeli residents have rights under sections 13 and 14 of the Privacy Protection Law, 1981. You can also complain to Israel's Privacy Protection Authority or, in the EU, to your local data protection authority.
8. Cookies and similar technologies
We store a few things in your browser's or app's local storage: your sign-in session and language choice, which the Service needs; a random analytics ID; how many free photos you saved this month before signing in (once you sign in, that count is kept with your account); and, for 30 days, the campaign tags of the ad that brought you. While a tab is open, a session ID for screen recordings is kept in its session storage. Our own analytics tools run without cookies.
In the EU, EEA, UK and Switzerland we ask in a banner before recording screens (under "Analytics"). You can change any choice with the "Cookie settings" link at the bottom of the website and in the app's settings.
Ad cookies (Meta). We ask before using Meta's ad cookies. Only if you agree ("Accept all", or "Advertising" under "Settings") do we load the Meta Pixel, which sets Meta cookies (such as _fbp) and tells Meta about page views, sign-ups and purchases, so we can see which Instagram and Facebook ads work. If you subscribe after accepting, our server also tells Meta about the payment, with the same details. For collecting this data, we and Meta are joint controllers; Meta then uses it as an independent controller under its privacy policy and may use it to improve its ads. The Meta Pixel never runs in the Logoli iPhone app. If you choose "Necessary only", nothing is sent to Meta. You can change your choice at any time with the "Cookie settings" link at the bottom of the website and in the app's settings, and you can clear cookies in your browser settings.
9. Children
Logoli is not meant for children under 16. If you believe a child under 16 has given us data without a parent's permission, contact us and we will delete it.
10. Changes
We will post any change on this page with a new effective date, and tell you by email or in the app before material changes apply.