ZenFlux Privacy Policy

Effective 2026-09-17. Linyan Studio, operated by Xianyou Xiumei Information Technology Co., Ltd. ("Linyan Studio", "we").

This Privacy Policy explains what information the ZenFlux mobile application ("the App") collects, how we use it, and the choices you have. The App is operated by Linyan Studio, operated by Xianyou Xiumei Information Technology Co., Ltd. By using the App you consent to the practices described here.

1. Information We Collect

Account information you provide:

• Email address (required for account creation)
• Display name (auto-generated; you may change it)
• Authentication tokens from Sign in with Apple, Sign in with Google, or Facebook Login when you choose to sign in via those providers

Content you create or upload:

• Photos you upload as the starting point for AI generation
• Custom prompt text you write to guide image generation
• Images generated for you by the App, which include your prompt text as metadata
• Likes and other interactions with public feed content

Information collected automatically:

• IP address, device type, operating system, and app version
• Crash logs and error events (via Sentry)
• Anonymous product-analytics events such as screen views and feature usage (via PostHog)
• Receipts of in-app purchases (Apple App Store / Google Play)

The App does not collect precise GPS location. The App does not access your contacts, microphone, calendar, or health data.

2. How We Use Information

• To create and manage your account, including authenticating you across sessions
• To run AI image generation requests you submit, including transmitting your prompt text and reference image to our GPU compute providers
• To debit and credit your in-app token balance for paid generations
• To display public images and prompts in the App's discovery feed (only images you choose to make public)
• To diagnose crashes and improve App reliability
• To send you important notices (such as account or security events). We do not send marketing email at this time.

3. User-Generated Content and the Public Feed

Images you generate may be displayed in the App's public discovery feed unless you mark them private at generation time. The feed shows the generated image and the prompt that produced it. We provide in-app controls to report objectionable content and to block other users; we review reports and remove content that violates our Terms of Service.

4. Third-Party Services

The App relies on the following third-party services, which receive limited information described below:

• Amazon Web Services (AWS) — hosting, storage (S3), authentication (Cognito), and database (DynamoDB). Your account data, uploaded photos, and generated images are stored on AWS.
• OpenRouter / Anthropic Claude — when you opt into AI-enhanced prompts, your prompt text is sent to OpenRouter, which routes it to the Anthropic Claude API for rewriting. No account identifiers are sent.
• RunPod — GPU compute for running the image-generation models. The prompt text and reference image are sent to RunPod for the duration of the generation job and are not retained by RunPod.
• Sentry — error monitoring and crash reporting.
• PostHog — anonymous product-analytics events.
• Apple App Store / Google Play — processes in-app purchases; we receive only the purchase receipt and token amount.
• Apple Sign-In / Google Sign-In / Facebook Login — authentication providers that share only your email and (with your consent) basic profile information when you sign in.
• Expo — mobile-app build and update infrastructure.

We do not sell your personal information.

5. Account Deletion

You can delete your account at any time:

• In the App: Settings → Delete Account.
• On the web: linyanstudio.com/zenflux/deleteuser.

Deletion removes your account, generated images, uploaded photos, board memberships, and likes from our systems within a reasonable time. Purchase records (transaction history) are retained in anonymized form for accounting, tax, and audit-trail compliance, with personal identifiers removed. Purchases are non-refundable.

6. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it. If you are a parent or guardian and believe your child has provided us information, please contact us at support@linyanstudio.com.

7. Data Retention

We retain user-provided data for as long as your account is active. After account deletion, your personal data is removed within a reasonable time, except for the anonymized purchase records described above.

8. Security

We use physical, electronic, and procedural safeguards to protect the information we process. Data is transmitted over HTTPS and stored encrypted at rest within AWS. No system is perfectly secure; we cannot guarantee absolute security.

9. Your Choices and Rights

• Access and correction: change your display name in the App, or contact us for other data.
• Deletion: use the in-App or web deletion described above.
• Opt out of analytics: not currently a separate toggle; deleting the App stops further collection.
• Region-specific rights (GDPR / CCPA): if you are in the EU/UK or California, you have additional rights to access, correct, port, or restrict processing of your data. Contact support@linyanstudio.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective" date at the top reflects the most recent revision. Material changes will be brought to your attention within the App. Continued use of the App after a change constitutes acceptance of the revised policy.

11. Contact

Questions or requests regarding privacy: support@linyanstudio.com.