Covershot / Privacy
How Covershot handles selected photos, requested AI edits, account sync, credits, and support data.
Covershot is provided by SW Cosmos Inc. This Privacy Policy explains how Covershot handles information when you choose a photo, create an AI lighting or background edit, connect an account, purchase credits, receive an optional notification, or contact support.
Contact: info@swcosmos.com
Photos and instructions: the photo you choose, the lighting style, scene, or custom description you select, a sanitized upload copy, and the edited result. Covershot uses the system photo picker and does not request access to your entire photo library.
Account and app activity: a secure user identifier, sign-in provider information such as an email address when available, generation status, scene and quality selections, app version, language, and credit balance.
Purchases and notifications: Apple product and transaction identifiers used to verify and protect credit grants, plus a device push token if you allow completion notifications.
Feedback: the category and message you submit, an optional photo you deliberately attach, and device, OS, app-version, and language diagnostics only when you choose to include them.
Before every generation, Covershot identifies the AI processing and asks for your permission. Covershot does not ask you to confirm your age as part of this permission.
When you continue, Covershot sends the sanitized upload copy, selected lighting or scene instructions, and generation settings through SW Cosmos server functions to fal.ai to create the edit you requested. fal.ai may make third-party AI models available through its service. Provider processing is also governed by its current terms, privacy policy, and technical retention controls.
Covershot configures supported fal.ai API requests not to store request payloads and requests a short provider-media lifetime. These controls do not override records the provider must retain for security, legal compliance, or service integrity.
Mood Finish looks are processed on your device for an original photo or a downloaded result. Applying Original, Flash Film, Fresh, Editorial, Cinematic, or Night Bloom does not send the photo back to fal.ai.
Before upload, Covershot re-encodes the selected image and removes EXIF metadata, including embedded GPS data. Covershot does not use the app to identify a person or build a biometric identity profile.
Only upload photos of yourself or people who agreed to the edit. You remain responsible for having the rights and permissions needed for every photo and instruction you submit.
Covershot uses private, account-scoped storage. Its upload and result copies are scheduled for deletion within 30 days. You can delete one or multiple items from History to remove their app-managed uploads and results; if storage cleanup fails, the service retries it. Copies you saved to Photos or shared elsewhere are not removed by History deletion. Cached copies on your device can also be removed by deleting Covershot data or uninstalling the app.
Account, credit-ledger, purchase, security, refund, dispute, and deletion-audit records may be retained for as long as reasonably needed to deliver credits, prevent duplicate transactions, comply with law, resolve disputes, and protect the service. Records retained after deletion are restricted from ordinary product use and minimized where practical.
SW Cosmos uses Supabase for authentication, database, storage, and server functions; fal.ai for the AI edit you request; and Apple for Sign in with Apple, App Store purchases, and optional push notifications. These providers process information as needed to provide their services under their applicable terms and security controls.
Information may be processed in the United States and other locations where service providers operate. API and administrative secrets remain on the server and are not included in the app.
The Covershot app does not contain third-party advertising SDKs, does not use information for cross-app advertising, and does not sell personal information. It does not request Apple’s advertising identifier.
The public SW Cosmos website uses Google Analytics to understand aggregate page visits and site performance. The website may process browser, device, page, approximate-region, and cookie or similar identifier information under Google’s applicable controls. This website analytics is separate from the Covershot app.
You can decline AI processing; no generation request will be sent. You can decline notifications and continue using Covershot. You can omit diagnostics and photos from feedback.
Settings > Account > Delete Covershot account requires a fresh identity check before deletion: fresh Apple authorization for an Apple-linked account or a recent email one-time-code authentication for an email-linked account. It then permanently deletes and retires the Covershot profile, History, uploads, results, feedback, push tokens, and credit balance, and signs you out. After fresh Apple proof is verified, Covershot attempts to revoke the authorization issued specifically to Covershot; if only that later revocation step fails, data deletion still completes and Covershot provides the manual Apple removal step.
SW Cosmos products use shared authentication infrastructure, so this app-scoped flow preserves the shared sign-in record and does not change data belonging to another SW Cosmos product. You may request deletion of the shared SW Cosmos sign-in record through the secure-verification support path on the Covershot account-deletion page.
Covershot is a general-purpose photo-editing app. It does not provide an age-verification or verified parental-consent feature. Parent or guardian permission may be required by applicable law; the absence of an in-app age check does not replace that responsibility.
If you are a parent or guardian with a question about personal information a child may have provided through Covershot, contact info@swcosmos.com to request review or deletion. We will verify the request as appropriate before acting on account information.
We use authenticated server functions, private owner-scoped storage, access controls, encrypted network connections, short-lived signed links, and restricted server secrets. No system can be guaranteed completely secure.
We may update this policy as Covershot, service providers, or legal requirements change. We will post the updated version with a new effective date. Questions, access requests, and privacy requests may be sent to info@swcosmos.com.