Pika Labs is a studio brand operated by Grigorii Gvadzabiia (“we”, “us”). Contact us at support@madebypiko.com.
This policy covers GarageMuse, our iPhone car styling app, including its AI render service. The studio website is covered by the website privacy policy.
Data we process
- Private guest identity: a guest account ID, a hash of your random installation access credential, and hashed session credentials. The access credential is stored securely on your phone. GarageMuse does not require sign-in.
- Generation content: car photos and style references you select, modification descriptions, generated images, job status, and related build identifiers.
- Purchases: Apple and RevenueCat transaction identifiers, subscription state, credit grants, renewals, restore transfers, and refund adjustments. We do not receive your payment-card details.
- Support and operations: reports or feedback you submit, related guest/job identifiers, and limited request metadata and error logs.
Photos may contain people, number plates, locations, or other personal information. Use photos you have permission to edit and avoid including unnecessary personal information.
Why we process it
We use this information to provide requested image edits, maintain your guest access and render credits, verify and restore purchases, respond to reports, secure the service, and prevent repeated free grants or replayed purchase events. Where applicable privacy law requires a legal basis, these purposes rely on providing the service you request, your consent for the disclosed AI transfer, our legitimate interests in service security and support, or legal obligations, as appropriate.
AI processing and service providers
Before your first personal AI render, the app asks you to consent to sending the selected photos and design instructions to OpenAI. Cloudflare hosts our API, database, and private image storage. For the initial service, an operator-controlled Mac retrieves selected job photos through an authenticated encrypted connection, sends the edit request to OpenAI, and uploads the result to private cloud storage. Temporary job files on that Mac are removed when processing finishes or fails.
Apple and RevenueCat process purchase and subscription information. Support email is delivered through Cloudflare Email Routing to our mailbox provider. These services may process information outside your country. Their own retention and privacy rules also apply: OpenAI, Cloudflare, RevenueCat, and Apple. Provider use and retention of submitted content are governed by the terms and privacy settings applicable to the processing service.
Your Garage and cloud storage
Saved projects stay on your phone. GarageMuse has no sign-in or cross-device project backup. Photos and instructions selected for a render are uploaded to process that request. Uploaded generation photos and results remain in private cloud storage until you use Delete Garage data in the app’s Profile. Deleting an individual saved build removes its local copy on this phone. Your photos are not published to a public gallery by the service.
Deletion and remaining records
Use Profile → Delete Garage data to remove uploaded photos, generated results, and your cloud account data. Deleting an individual saved build removes its local copy and does not remove its uploaded generation files. Deleting your cloud account data also removes sessions, jobs, reports, and credit history. A minimal deleted-account pseudonym, hashed installation credential, and purchase-event identifiers remain to prevent repeated free grants and replayed purchases. Project-deletion records contain the account ID, project ID, and deletion time to prevent stale copies recreating deleted builds; they are removed on account deletion.
Deleting within GarageMuse does not erase copies you exported to Photos, shared with other people, or stored on another device. Remove those separately. It also does not automatically erase information a provider must or may retain under its own policies, or cancel your Apple subscription.
Permissions, security, and advertising
Camera and photo-library access are requested when needed for the action you choose. You can manage permissions in iOS Settings. Storage is private; temporary signed image links expire after 15 minutes. We do not intentionally log image bytes, prompts, or session tokens, although operational logs may include request metadata, job IDs, and errors. No system can guarantee absolute security.
The current app has no advertising SDK or intentional cross-app advertising tracking. We do not sell your photos or personal information.
Your rights and contact
You can stop using GarageMuse, decline AI-transfer consent, delete cloud data in the app, or contact us for access, correction, deletion, and other applicable privacy rights. We may need to verify ownership without asking for your secret access credential. If your jurisdiction provides a right to withdraw consent, withdrawal affects future consent-based processing; it does not undo completed processing or remove copies retained by providers automatically. Where applicable, you may complain to your local data-protection authority.
Children and policy updates
GarageMuse is not directed to children under 13. We do not knowingly collect their personal information. If you believe a child has submitted personal information, contact us. We will update this policy when our practices change and show the effective date here.