Privacy Policy

Welcome to Resulta ("we," "our," or "us"). Resulta Inc. operates the Resulta mobile application (the "App") and the website resulta.app (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website.

We are committed to protecting your privacy and ensuring transparency about our data practices. By using Resulta, you agree to the collection and use of information in accordance with this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the App or Website.

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address, display name, and optionally your business name.
• Profile Data: You may upload a profile picture (avatar) which is stored securely in our systems.
• User-Generated Content: Photos you capture or upload for before/after comparisons, saved drafts, and portfolio items.
• Communication Data: If you contact us for support, we collect the content of your messages.

2.2 Information from Third-Party Authentication

When you sign in using Apple or Google, we receive:

• Apple Sign In: Your Apple ID, email address (if shared), and name (if provided)
• Google Sign In: Your Google ID, email address, and profile name

We do not receive or store your Apple or Google account passwords.

2.3 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App features used, templates selected, session duration
• Log Data: Access times, pages viewed, app crashes and errors

2.4 Subscription Information

When you subscribe to premium features, our payment processor (Superwall, via Apple App Store or Google Play Store) handles payment information. We receive confirmation of your subscription status but do not store your payment card details.

We use the information we collect to:

• Provide Services: Create and manage your account, save your content, and deliver app functionality
• Personalization: Remember your preferences and provide a customized experience
• Subscription Management: Process and manage your premium subscription status
• Communication: Send service-related notifications, respond to inquiries, and provide customer support
• Improvement: Analyze usage patterns to improve the App and develop new features
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws and legal obligations

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We work with third-party service providers who assist us in operating the App. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Prevent fraud or illegal activities
• Protect the rights of other users

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.

Resulta integrates with the following third-party services:

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you delete your account
• User Content: Retained until you delete it or your account
• Usage Data: Retained for up to 24 months for analytics purposes
• Legal Records: May be retained longer if required by law

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

You have the following rights regarding your personal information:

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Legal Basis for Processing

We process your data based on:

• Contract: To provide our services to you
• Consent: Where you have given explicit consent
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws

To exercise your GDPR rights, contact us at privacy@resulta.app. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know

You can request disclosure of:

• Categories of personal information collected
• Sources of personal information
• Business purposes for collecting information
• Categories of third parties with whom we share information
• Specific pieces of personal information collected about you

Right to Delete

You can request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale

We do not sell your personal information. We have not sold personal information in the preceding 12 months.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing or quality of services based on exercising these rights.

Categories of Information Collected

To exercise your CCPA rights, contact us at privacy@resulta.app or use the data export/deletion features in the app.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls limit who can access your data
• Secure Infrastructure: We use enterprise-grade cloud infrastructure (Supabase/AWS)
• Regular Audits: We conduct regular security assessments
• Authentication: Secure authentication via industry-standard providers

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data as required by law.

Resulta is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@resulta.app. We will promptly delete such information.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Appropriate security measures with our service providers

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an in-app notification or email for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of the App after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.