Privacy Policy
This policy explains how Nplus Labs Bharat Pvt Ltd ("we", "us") handles your personal data when you use the Best You Android app and its related services (together, the "Service"). We act as the data fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
In short: your photos are analysed on your phone. A photo is uploaded only when you tap Create my AI image, or — if you turn on the optional Weekly AI image — one photo a week that the app picks on your phone. Only that one photo is uploaded each time. Location and other hidden data are removed before upload. The uploaded photo and the server copy of the generated image are deleted automatically within about 2 days. We do not sell your data and we do not show ads.
1. Who can use Best You
The Service is only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has used the Service, contact us and we will delete their data.
2. What we collect and why
| Data | Why we use it | How long we keep it |
|---|---|---|
| Google account details: your Google account ID, email address and name (received when you choose "Sign in with Google") | To create and secure your account, apply daily limits, and contact you about your account | Until you delete your account |
| App install ID: a random ID created by the app on your phone; app version | To link your phone to your account and keep sessions secure | Until you delete your account |
| Device integrity result from Google Play Integrity (a pass/fail verdict about the app and device, not a device identifier) | To prevent abuse and fake requests | Not stored, except a short summary in security logs when a check fails |
| The one photo you upload (resized; location and camera data removed) | To create your AI-generated image | Deleted automatically about 1 day after upload (deletion can take up to 1 more day) |
| The AI-generated image | To show it to you in the app | Deleted automatically about 1 day after it is created (deletion can take up to 1 more day) |
| Request records: date and time, status, prompt version used, error messages, cost of the request, usage counts | To run daily limits, fix problems and control costs | Until you delete your account |
| Reports you submit about a generated image | To review harmful or wrong content and improve safety | Up to 1 year, or until you delete your account |
| Feedback you send on oncemore.app/feedback: your rating and comments, and optionally your name, email, app version, phone model and a screenshot (a one-way code made from your IP address is kept for spam protection) | To fix problems and improve the app, and to reply if you gave an email | Up to 1 year |
| Technical logs: IP address, request time, error codes | Security, rate limiting and abuse prevention | Up to 30 days |
We do not collect your contacts, location, call logs, messages or advertising ID. We do not use analytics or advertising SDKs.
3. Photos on your phone (on-device processing)
To pick your best photo, the app looks at the photos you allow it to access. This analysis happens entirely on your phone. It includes finding faces, checking sharpness and lighting, checking whether eyes are open or covered, checking for unsafe content, and grouping photos of the same person using numeric face patterns.
These photos and the face patterns never leave your phone. They are not sent to us or to anyone else. Face patterns are used only to group your photos inside the app. They are stored only in the app's private storage and are erased when you clear the app's data or uninstall it.
Depending on your version of the app, you either choose photos yourself with the Android photo picker (the app then sees only the photos you choose), or you allow the app to access your photo library. Either way, to keep the Service safe and the results good, the app checks every photo before it can be used. It skips photos with unsafe or explicit content, and photos where the face is not clearly visible (for example eyes closed or covered, or the nose and mouth hidden). It then ranks the remaining photos of you.
Only one photo is uploaded each time, and only after you tap Create my AI image. The app shows you its top-ranked photos with the best one already selected; you can pick a different one or not create anything. Before upload, the app resizes the photo, may crop it around your face (head and shoulders) so the AI keeps your likeness, and removes hidden data such as GPS location and camera details.
If the app asks for access to your photo library and you allow only some photos, or none, the app works with the photos you allow, or lets you choose photos with the Android photo picker; the same safety checks still apply.
3a. Weekly AI image (optional, off by default)
If you turn on Weekly AI image (the app first shows you what it does and asks you to confirm), then about once a week the app picks one clear photo of you on your phone, using the same checks as above, and uploads only that photo to create a new AI image for you. Photos taken with your phone's camera are used; a photo is not used twice. The new image is kept on your phone in "My AI images" and you get a notification. The uploaded photo and the server copy of the image are deleted automatically within about 2 days. You can turn this off at any time in Settings; nothing more is uploaded after that.
4. AI image generation
Your uploaded photo is sent to our AI image provider, Black Forest Labs ("BFL"), with our instructions (the "prompt") to create a new image. BFL processes the photo to produce the result, and its own terms and privacy policy also apply to that processing. We do not use your photos to train AI models. We have asked BFL not to use photos and images from Best You to train its models, as its privacy policy allows customers to do.
Generated images are made by AI. They may not look exactly like you and may contain mistakes. You can report any generated image from inside the app.
5. Who we share data with
We share data only with service providers that help us run the Service, and only as needed:
- Cloudflare, Inc.: hosting, database and temporary image storage.
- Google LLC: Sign in with Google and Play Integrity checks.
- Black Forest Labs: AI image generation (uploaded photo and prompt only).
We may also disclose data if required by law or a valid order of a court or government authority, or to protect the safety of users or the public.
We do not sell your personal data.
6. Where your data is processed
Our providers may process data outside India, for example in the United States or the European Union. When we transfer data outside India, we do so in line with the DPDP Act and any restrictions notified by the Government of India.
7. Security
We use encrypted connections (HTTPS) and access controls. Secret keys are stored only on our servers, never in the app. Only authorised staff can access the admin tools, and image previews are off by default. No system is perfectly secure. If a personal data breach affects you, we will notify you and the authorities as required by law.
8. Your rights and choices
Under the DPDP Act, you can:
- Access a summary of the personal data we hold about you.
- Correct or update your data.
- Delete your account and data.
- Withdraw consent at any time. This does not affect processing that already happened.
- Nominate a person to exercise your rights if you die or become unable to act.
- Raise a grievance with our Grievance Officer (see below), and then with the Data Protection Board of India if you are not satisfied.
To use these rights, write to info@oncemore.io from the email address linked to your account.
9. Deleting your account
You can delete your account at any time (details: oncemore.app/delete-account):
- in the app, using Delete account; or
- by emailing info@oncemore.io from your account email with the subject "Delete my account". We delete it within 7 days.
When you delete your account, we immediately delete your account details, device records, request records, usage counts, reports and any stored images. Technical logs expire on their own within 30 days. Uninstalling the app removes on-device data, but it does not delete your account.
10. Changes to this policy
We may update this policy. We will change the "Last updated" date above. If a change is important, we will tell you in the app before it takes effect.
11. Contact and Grievance Officer
Nplus Labs Bharat Pvt Ltd
D.No.74-12/6-8, Flat No.101, Sri Satya Sai Residency, VJ Polytechnic, Krishna, Vijayawada (Urban), Andhra Pradesh, India – 520008
Email: info@oncemore.io
Grievance Officer: Harsha Vemuri
Email: harsha@oncemore.io
We will acknowledge your complaint within 24 hours and try to resolve it within 15 days.