Privacy Policy — FutureUs

Last updated: 12 September 2026

FutureUs (“the app”) lets you upload a photo of two people and generates an image showing how that couple might look years later, or with a future child. It can also take a photo of your own child (alone or with a parent) and show how they might look as a teenager and as an adult. This policy explains exactly what happens to your data. It is written to match what the software actually does.

No account, no name, no email

FutureUs has no sign-up and no login. We never ask for your name, email address, phone number, or any other identifier that points to you personally.

When you first open the app it generates a random identifier (a UUID) that is stored on your device. It is not derived from your device, your phone number, or any advertising ID, and it cannot be linked back to you. If you uninstall the app, that identifier is lost and a fresh one is created on reinstall.

Your photo

When you tap the generate button, the photo you selected is sent over an encrypted connection to our server, which forwards it to our image-generation provider (fal.ai) to produce the aged result.

What we keep:

• We do not store your photo. The image passes through our server and is not written to disk or to any database.
• We store a cryptographic fingerprint (SHA-256) of the photo. This is a one-way hash; the photo cannot be reconstructed from it. We use it so that sending the same photo twice does not generate — and charge for — the same result twice.
• We store a link to the generated result for 24 hours, so you can return to it. After 24 hours we delete that link from our records automatically.

Face detection runs on your device before anything is uploaded. Each frame expects a fixed number of faces (two for a couple; one, two or three for the “our child” frames, depending on who you say is in the photo). If the photo does not contain that many faces, no upload and no generation happens at all.

Photos of your child. The “our child, grown up” frames take a photo of a child. Everything above applies to that photo exactly as it does to a photo of a couple: it is not stored, only its one-way fingerprint is kept, and the result link is deleted after 24 hours. Upload only a photo of your own child. The app is used by the parent; it is not directed to children (see below).

HD upgrade. If you upgrade a frame to HD, the generated frame is sent from your device to our server and on to the same image-generation provider to be enlarged. It is handled exactly like an uploaded photo: not stored, only fingerprinted, with the result link deleted after 24 hours.

“Who do they look like?” You can ask which parent your child takes after. You provide either one photo showing mother, father and child together, or three separate photos (mother, father, child). Face detection runs on your device first (three faces, or one face per photo); if it does not match, nothing is uploaded. The photos are then sent from your device to our server and on to a vision-language model at the same provider (fal.ai), which returns only numbers and labels — a percentage for each parent and a short list of features such as “eyes” or “chin” — and is instructed not to comment on skin tone. The photos are handled exactly like an uploaded photo: not stored, only fingerprinted. We keep the returned numbers and labels for 24 hours, like a result link, and delete them automatically. This is an AI reading for fun. It is not a prediction, not a genetic or biometric assessment, and must not be used as one. Upload only photos of your own family.

Video. Turning your frames into a short video happens entirely on your device. Nothing is uploaded for it.

Usage data

To understand how the app is used and to improve it, we record events such as: app installed, session started, a result generated, a paywall shown, a purchase completed. Each event carries technical context: app version, platform, OS version, device model, language, store country, and the anonymous identifier described above.

We do not collect your location, contacts, calendar, photo library contents beyond the single photo you choose, or advertising identifiers.

Purchases

Subscriptions and frame packs are processed by the App Store (Apple) or Google Play, depending on where you installed the app. We never see or receive your payment card, billing address, or Apple ID / Google account details. We use Adapty to verify purchases and manage subscription state: Adapty receives the store’s purchase receipt, the product you bought and the app’s anonymous identifier, and tells us whether that identifier has an active subscription, or bought a frame pack, and how many frames it is entitled to — nothing more. Frames from a pack are kept as a number against the anonymous identifier for 12 months from purchase. Advertising-identifier and IP-address collection is switched off in Adapty’s SDK.

Where your data is processed

Our server and database run on Supabase infrastructure in the United States (us-west-2). Image generation is performed by fal.ai. Subscription state is managed by Adapty. Each of these providers processes data on our behalf.

Children

FutureUs is not directed to children and we do not knowingly collect data from children. The app is for adults (18+). Some frames let a parent upload a photo of their own child; that photo is handled like any other — never stored, only fingerprinted — and no account or profile is created for the child. If you believe a child has used the app, or you want a fingerprint derived from a photo of your child removed, contact us at the address below.

Your choices

• Delete your data. Because we hold no account, write to us with the request and we will delete the records associated with your device identifier.
• Stop collection. Uninstalling the app ends all data collection.

Changes

If we change what the app collects, we will update this page and the “last updated” date above.

Contact

E-mail: info@sentovex.app