PixiePocket Privacy Policy

Last updated: 30 October 2026

PixiePocket turns a photo or a description into an image with AI. It has no advertising and no tracking. Your results are kept in a private gallery that only your account can open. What reaches Midgar's servers is what the AI needs to make an image, the images it made, an account that keeps your credit balance and gallery, an anonymous Midgar ID, and what is needed to recognise your purchases.

In short

• The prompts you write and the photos you attach are sent to our server and on to Google Gemini or OpenAI to make your image. They are used only to make your result.
• The images you make are saved to your private gallery on our servers, so they appear on every device you sign in on. They are not public and there is no public feed. You can delete any image, or your whole account, and they are deleted.
• Our server keeps a usage record of each request, which includes the text of your prompt. It does not keep the photos you attach.
• The app works without sign-up on an anonymous account. If you choose to sign in with Apple, Google or GitHub, we also keep the name and email address that provider shares with us.
• Purchases are made through Apple. Our own server verifies them and keeps the record of what you bought.
• Nothing is used for advertising or tracking, nothing is sold, and no data is given to third parties for their own use.

Who we are

PixiePocket is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

AI processing

To provide the app's core feature, the text prompts you enter, and any photos you provide for editing, are sent over an encrypted connection to our server at api.midgarcorp.cc, which passes them to Google Gemini or OpenAI, depending on the model you choose, to generate or edit an image. Every request is checked by automated moderation. The prompts and photos are processed only to produce your result and are not used to train AI models. Our AI providers handle them under their own privacy and security commitments that protect them to a standard comparable to this policy, and are permitted to use them only to return your result. You approve this before your first image and can withdraw your approval in Settings.

Our server keeps a usage record of each request (when, what it cost, which model answered and the text of your prompt). It does not keep the photos you attach. The record is linked to your account and is deleted with it.

Your images

Each image you generate or edit is stored on our servers, in storage run by Cloudflare, in your private gallery. It is linked to your account and nobody else can open it unless you share it yourself from your device. It stays there until you delete it in the app or delete your account. A small copy is also kept in the app's cache on your device.

Accounts and identity

On first launch we create an anonymous, device-based account that holds your credit balance and your gallery. It holds no name, email address or phone number. The app keeps its key in your device's Keychain.

You may also sign in with Apple, Google or GitHub, for example to keep your images and credits when you change phone. We then receive the identifier that provider gives us, your name and your email address where the provider shares them (Apple may give a private relay address instead), and we link them to your account. We use them only to recognise your account. When you delete your account in Settings, this account, your credit balance, your gallery and the records linked to it are deleted from our server.

The anonymous Midgar ID

The app also asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we keep the identifier of the attested key with the ID and receive nothing else about you. The ID is sent with some requests as a sign-in token, and on the More Apps screen it shows which Midgar apps you already use. It is not removed by Delete Account in PixiePocket, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

Purchases

Credit packs are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which pack, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. Our server checks the signed transaction before it credits your balance. From version 1.7.0, neither the app nor our servers send anything about your purchases to RevenueCat; earlier versions have RevenueCat validate purchases, and it receives the purchase receipt from Apple, an identifier that is your PixiePocket account id and your IP address, but not your name or email address. We never receive your payment-card details.

On-device data

The app keeps a cache of recent images, your settings and a diagnostic log on your device. The log records errors, the app version and device model, never your prompts or any token. It leaves your device only if you choose to share it. Deleting the app removes this data from the device but not your account on our server.

More Apps

Settings has a Midgar universe card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Children

The app is not directed at children under 13 and does not knowingly collect information from them. It contains no advertising and no user-to-user communication.

What we don't do

We do not sell your data, show advertising inside the app, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your prompts, photos or images to train AI models.

How long we keep data

• Your images: in your private gallery until you delete them or your account.
• Your account, its credit balance and usage records (including prompt text): until you delete your account in Settings.
• Name and email address from a sign-in: until you delete your account.
• The Midgar ID record: until you ask us to delete it.
• The cache and the log: only on your device, until you clear the cache or delete the app.
• Purchase records: Midgar's purchase ledger keeps them as financial records, linked to your Midgar ID until that ID is deleted, after which nothing links them to a live ID. RevenueCat keeps the records it received from earlier versions of the app under its own policy. Apple's records of your purchases: kept by Apple.

Your choices and rights

You can withdraw your approval of cloud AI, delete individual images, or delete your account in Settings at any time. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the images and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider and by Google and OpenAI as our AI providers. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.