Skip to content
ID Photo logoID Photo
SizesHow it worksPhoto guideFAQMobile app
ENVIJA
  1. Home
  2. Legal
  3. Privacy Policy
PrivacyTermsContact
Data & Privacy

Privacy Policy

This Privacy Policy explains what information ID Photo (the mobile app and the website) uses, why, who receives it, how long it is kept and how You can control or delete it.

  • Effective December 1, 2022
  • Last updated October 2026
  • App: IDPhoto-Making Personal Photo
  • Provider: Innofly-Software

At a glance

A short summary for convenience. The full policy below is what applies.

  • Photos only for background removal

    Your photo is sent over HTTPS to our AI server to remove the background. It is never shared with advertisers or used for ads.

  • Face guides stay on your device

    Face positions are computed on your device; only the photo is sent, and only for background removal.

  • No account, ads only in the app

    You can use ID Photo without signing up. The website shows no ads; the free mobile app shows Google AdMob ads.

On this page16 sections
  1. 01Interpretation and Definitions
  2. 02Information We Use
  3. 03Camera & Photo Library Permissions
  4. 04Face Detection & Photo Enhancement (Face Data)
  5. 05How We Use Information
  6. 06Website Analytics (Google Analytics)
  7. 07Advertising (Mobile App)
  8. 08Who Receives Your Data
  9. 09Retention of Your Data
  10. 10Where Data Is Processed
  11. 11Your Choices: Withdrawing Consent and Deleting Data
  12. 12Security of Your Data
  13. 13Children's Privacy
  14. 14Links to Other Websites
  15. 15Changes to this Privacy Policy
  16. 16Contact Us

Questions about this document?

Write to us and we will help.

info@innofly-software.comAll contact details

ID Photo has no user accounts, no sign-in and no purchases. You do not give Us Your name, email address or phone number to use it. We only use the information described below, and only to run the Service.

Section 01

Interpretation and Definitions

The words of which the initial letter is capitalized have the meanings defined below, whether they appear in singular or in plural.

Application
refers to IDPhoto-Making Personal Photo, the mobile app provided by the Company for iOS and Android.
Website
refers to ID Photo for web, available at https://id-photo.innofly-software.com/.
Company
(referred to as "the Company", "We", "Us" or "Our" in this policy) refers to Innofly-Software, the developer of ID Photo, located in Hanoi, Vietnam.
Device
means any device that can access the Service, such as a phone, a tablet or a computer.
Personal Data
is any information that relates to an identified or identifiable individual.
Service
refers to the Application and the Website.
Service Provider
means a company that processes data on behalf of the Company to run the Service, such as Google (ads, analytics) and the hosting provider of the Website.
You
means the individual using the Service.
Section 02

Information We Use

Photos You choose

The photo You take or choose is processed on Your Device. It is sent to Our background-removal server only for background removal, as described in "Photos sent for AI background removal" below. We do not keep a copy of Your photos.

Anonymous install ID

The app and the Website create a random anonymous install ID on Your Device (for example "usr_…"). It is sent together with each photo uploaded for background removal, so the server can keep each request separate and limit abuse. It does not contain Your name or any contact details. In the app it is shown in Settings → Privacy → Anonymous install ID, where You can also replace it with a new one.

Device and usage information

  • Website: Google Analytics measures page views, device and browser information and approximate location (see "Website Analytics").
  • Mobile app: the Google Mobile Ads SDK collects device information to show and measure ads (see "Advertising (Mobile App)").
  • Mobile app: Google ML Kit may send Google anonymous performance metrics about face detection, never images or face data (see "Face Detection & Photo Enhancement (Face Data)").
  • Like any server, Our background-removal server and the Website host receive Your IP address as part of the connection. It is not used to identify You.

Data stored on Your Device

Your saved projects (My photos), the photo You are editing, the face points of those photos and Your settings are stored only on Your Device: in the app’s private storage, or in Your browser’s storage on the Website. They are not copied to Our servers.

Messages You send Us

If You email Us, We use Your email address and message only to answer You.

Section 03

Camera & Photo Library Permissions

With Your permission, the app uses the camera to take Your portrait and the photo library to import a picture or save the finished photo. These pictures are processed on Your Device, sent to Our background-removal server only for background removal (after Your consent), and saved only on Your Device.

You can enable or disable access to the camera and photo library at any time in Your Device settings.

Section 04

Face Detection & Photo Enhancement (Face Data)

This section explains how the ID Photo app (IDPhoto-Making Personal Photo) and the ID Photo website handle face data: what is collected, how it is used, where it is stored, whether it is shared, how long it is kept and how to delete it. The general sections of this policy do not change how face data is handled as described here.

What face data we collect

When You take or import a portrait, the app detects the face directly on Your device with Google ML Kit Face Detection (the website uses Google MediaPipe in Your browser). The face data consists only of: the face bounding box, the positions of the eyes and the chin, the head tilt and turn angles, whether the eyes are open, the number of faces in the picture, and outline points of the face, eyes, eyebrows, lips and the bottom of the nose. The turn angle, the eyes-open values and the number of faces are used only live in the camera guide and are never saved.

We do not create face templates, faceprints or other biometric identifiers, we do not perform face recognition, and we never use face data to identify, verify or track anyone.

How we use face data

Face data is used for no other purpose. It is never used for advertising, profiling, analytics or to train any model, and it is never sold.

  • To show the framing guides in the camera and place Your head on the crown, eye and chin lines of the selected photo size.
  • To check the head size and eye line against the photo size You chose, and to straighten small head tilts.
  • To apply the optional light correction and optional skin smoothing to Your own photo.

Where face data is stored and how long it is kept

Face detection runs entirely on Your device, and face data is never uploaded to our servers. ML Kit and MediaPipe do not send images or face data to Google. Google ML Kit may send Google anonymous performance and usage metrics about the API (such as the device model, OS and app version, a per-installation identifier, the image size and error codes), but never images or face data.

The face points are stored only with the projects in My photos (the app saves a project there when You finish a photo and keeps the 30 most recent), in the app’s private storage on Your device. On the website, they are kept in Your browser’s storage with the photo You are editing and the photos You save. They are never copied to our servers (they may be included in Your own device backup). They are kept only as long as the project, or the photo You are editing, is kept.

Sharing of face data

We do not share face data with anyone: not with third parties, advertisers, Google AdMob or other service providers. Our advertising SDK has no access to Your photos or face data.

Photos sent for AI background removal

In the app, only after You agree in the consent screen, the photo itself (which shows Your face) is sent over an encrypted HTTPS connection to the background-removal server that ID Photo uses, api-photo.commude-vietnam.work, operated by Innofly-Software and located in Vietnam, together with the random anonymous install ID. It is not a third-party AI service. Location and camera data (EXIF/GPS) are removed before sending, and no face points are sent. On the website, the photo is sent to the same server when You upload it to start background removal, as stated on the upload page; no face points are sent.

The server only removes the background. It does not perform face recognition, does not use photos to train models and does not share them. The uploaded photo is deleted right after processing, and the result image is deleted automatically within 24 hours.

You can turn this off at any time in Settings → Privacy; You can then still edit the original photo without uploading it.

How to delete face data

  • Delete a single project in My photos.
  • Delete everything in Settings → Privacy → Delete data on this device (projects, originals, cutouts, face points and the anonymous install ID).
  • Uninstall the app, which removes all of its data from the device. On the website, use Delete saved photos in Settings and Start over in the editor, or clear the site data in Your browser.
  • Contact us at info@innofly-software.com with any question about face data.
Section 05

How We Use Information

We use the information described above only to:

  • Remove the background of the photo You send, and return the result to You.
  • Show the framing guides, size checks and optional corrections on Your Device.
  • Show ads in the free mobile app (Google AdMob), as described in "Advertising (Mobile App)".
  • Understand how the Website is used (which pages are visited, on which devices) so We can fix problems and improve it.
  • Keep the Service secure and working, for example to limit abuse of the background-removal server.
  • Answer the questions and requests You send Us.
Section 06

Website Analytics (Google Analytics)

The Website uses Google Analytics 4 (Google LLC, measurement ID G-QVND5Q1KQB) to count visits. It collects page views, device and browser information (such as device type, operating system, browser and screen size), the referring page and approximate location (country or city, derived from the IP address). Your photos, face data and the files You make are never sent to Google Analytics. The Website does not show ads and does not use Google Analytics data for advertising.

In the European Economic Area, the UK and Switzerland, analytics cookies are off by default (Google Consent Mode). The mobile app does not use Google Analytics.

  • To opt out, block cookies for this site in Your browser settings, use Your browser’s tracking protection, or install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
  • Learn how Google uses this information: https://policies.google.com/technologies/partner-sites
Section 07

Advertising (Mobile App)

The ID Photo mobile app is free and shows ads served by Google AdMob (Google LLC). To show and measure ads, the Google Mobile Ads SDK may collect device information such as the advertising identifier (IDFA on iOS, Advertising ID on Android), IP address, approximate location derived from it, device and app details, and ad interactions.

Your photos are never shared with advertisers or used for advertising.

  • Users in the European Economic Area, the UK and Switzerland are asked for consent through Google’s consent message before personalised ads are shown, and can change their choice at any time in Settings → Ads.
  • On iOS, the advertising identifier is used only if You allow tracking in the App Tracking Transparency prompt. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
  • On Android, You can reset or delete Your Advertising ID in Android Settings → Google → Ads (or Privacy → Ads).
  • If You decline, You still see ads, but they are not personalised. The app works the same either way.
  • Learn how Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites
Section 08

Who Receives Your Data

We do not sell Your data and do not share it for marketing. Data is received only by:

Protection by third parties

Third parties that receive data from the Service (Google AdMob, Google Analytics, Google ML Kit diagnostics and the hosting provider) are required to provide the same or equal protection of user data as stated in this Privacy Policy, under their agreements with Us and their own privacy terms.

  • Our background-removal server (api-photo.commude-vietnam.work, operated by Innofly-Software): the photo You send and the anonymous install ID, only to remove the background.
  • Google AdMob (mobile app): device information for ads, as described in "Advertising (Mobile App)".
  • Google Analytics (Website): usage information, as described in "Website Analytics (Google Analytics)".
  • Google ML Kit (mobile app): anonymous diagnostics about face detection, never images or face data.
  • The hosting provider of the Website: technical connection data (such as the IP address) needed to deliver the pages.
  • Authorities, only when We are required by law or by a valid request of a court or other public authority.
Section 09

Retention of Your Data

  • Photos You send for AI background removal: the uploaded photo is deleted from the server right after processing, and the result image is deleted automatically within 24 hours. Face data is never stored on our servers; see "Face Detection & Photo Enhancement (Face Data)".
  • Projects, photos, face points and settings on Your Device: kept until You delete them, clear the site data or uninstall the app.
  • Website analytics: kept by Google Analytics only for the data retention period set in Google Analytics, then deleted automatically.
  • Emails You send Us: kept only as long as needed to answer You.
Section 10

Where Data Is Processed

The background-removal server is located in Vietnam. Google (AdMob, Analytics, ML Kit) and the Website’s hosting provider may process data in other countries where they operate. Where data leaves Your country, it is protected as described in this Privacy Policy.

Section 11

Your Choices: Withdrawing Consent and Deleting Data

  • Withdraw consent to uploads: in the app, turn off AI background removal on server in Settings → Privacy. Nothing is uploaded after that; You can still edit the original photo. On the website, a photo is uploaded only when You start background removal.
  • Delete data on Your Device: delete a project in My photos, use Settings → Privacy → Delete data on this device, or uninstall the app. On the website, use Delete saved photos in Settings and Start over in the editor, or clear the site data in Your browser.
  • Request deletion of server data: uploaded photos are deleted right after processing and results within 24 hours. To ask Us to delete anything sooner or to confirm deletion, email info@innofly-software.com with the anonymous install ID shown in the app in Settings → Privacy (on the website, with the approximate time of the upload).
  • Ads and analytics: change Your ad choices in Settings → Ads, iOS Tracking settings or Android Ads settings, and opt out of Google Analytics as described in "Website Analytics (Google Analytics)".
  • You may also contact Us to ask what data We have about You.
Section 12

Security of Your Data

Photos are sent only over encrypted HTTPS connections, and location and camera data (EXIF/GPS) are removed in the app before sending. No method of transmission over the Internet or of electronic storage is 100% secure, but We use commercially reasonable means to protect Your data.

Section 13

Children's Privacy

The Service is not directed to children under the age of 13, and We do not knowingly collect Personal Data from children under 13.

Parents or guardians may take a photo of their own child to print it. The same processing described in this policy applies to that photo: it is sent only for background removal, deleted right after processing (results within 24 hours), and no account or profile is created for the child or the parent.

If You believe a child under 13 has sent Us Personal Data, please contact Us at info@innofly-software.com and We will delete it.

Section 14

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us, such as the App Store and Google Play. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Section 15

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and in the app, and update the "Last updated" date at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

Section 16

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By visiting this page on our website: https://id-photo.innofly-software.com/
  • By email: info@innofly-software.com
  • By phone: 0988.901.857
  • Address: Chung cư C14 Bắc Hà, Hà Nội, Việt Nam
Back to top
ID Photo logoID Photo

ID photos in common sizes for 6 countries, made in your browser or on your phone.

Get the mobile app

Popular sizes

  • 3 × 4 cm · Vietnam
  • 2 × 2 in · United States
  • 35 × 45 mm · Japan
  • 35 × 45 mm · United Kingdom
  • 33 × 48 mm · China
  • 50 × 70 mm · Canada

Tools & features

  • Create a photo
  • My photos
  • Settings
  • How it works
  • Photo guide
  • FAQ
© 2026 Innofly Software. All rights reserved.
  • Privacy policy
  • Terms of use
  • Contact
EnglishTiếng Việt日本語