Privacy Choices and Data Deletion
Last updated: 6/26/2026
This page explains, in clear steps, how to exercise your privacy rights and how to delete your account and data — whether or not you use the Storpix app. You can read this page and submit the deletion request described here without downloading the Storpix app.
Data controller: Pixs Yazilim ve Ticaret A.S. ("Pixs", "Storpix", "we"). Contact: info@storpix.com — https://storpix.net. The email address info@storpix.com and the website https://storpix.net both belong to the same legal entity, Pixs Yazilim ve Ticaret A.S. This page forms an integral part of our broader Privacy Policy (https://storpix.net/gizlilik) and User Agreement (https://storpix.net/sartlar); the full details of the international transfers, third-party processors, and subscription terms summarized below are set out in those documents.
1. Summary — How to Exercise Your Rights
The following choices are yours and you may use them at any time:
- Delete your account and data: From within the app via the Profile tab, using "Delete my account" (immediate); or by sending a request from your registered email to info@storpix.com.
- Access and correction: Access the data we process about you and correct inaccurate or incomplete data.
- Portability and objection: Request a copy of your data; object to certain processing.
- Analytics and cookie choices: Manage your analytics/tracking preferences from your device and store settings.
- Notification preferences: Turn off push notifications from your device or app settings.
All of these rights apply under both Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) and, to the extent applicable, the EU General Data Protection Regulation (GDPR).
2. Deleting Your Account and Data — From Within the App
In-app deletion is immediate and permanent. Steps:
- Open the Storpix app and sign in to your account.
- Go to the Profile tab.
- Tap "Delete my account".
- Read the warning and confirm the action twice.
Once you confirm, your account and the content tied to it are permanently deleted. This action cannot be undone. The deletion removes both your database records and the files we store in the cloud (photos, videos, audio files, including their watermarked copies).
3. Without the App / Deletion Request by Email
If you cannot access the app or do not use the app, you can have your account and data deleted by email:
- Write from the registered email address associated with your account to info@storpix.com.
- Put "Account deletion request" in the subject line.
- So that we can securely verify your identity, please send the request from the registered email on your account. If needed, we may ask for additional information to verify your account; any additional identifying information is used solely for verification.
After your identity is verified, we will complete your request within at most 30 days. We will inform you when the process is complete.
4. What Happens When Deleted / What Is Retained
When deletion is complete, the following are permanently removed:
- Your account and profile (full name, email, language preference, role). Your name comes either from what you entered when registering by email or, if you signed in with Apple/Google, from the name provided to us by that provider.
- The events and albums you created, and the originals and watermarked copies of all photos, videos, and audio files uploaded to them (deleted from cloud storage as well).
- Family-only albums, memory content, and family member/child profiles (including details such as name and date of birth).
- Likes, comments, invitation and QR records, and your subscription/credit profile records.
About guest data: Data from guests who upload to a QR guest album or who reply to an invitation RSVP (uploaded photos/videos/messages, guest name, and the name, phone and note provided in an RSVP) is tied to the event's owner. This data is permanently deleted together when you, as the event owner, delete your account or the relevant event. Guests may request deletion of their own data by contacting the event owner or info@storpix.com.
Due to legal obligations, a limited set of data may be retained for specific periods:
- Payment and invoice records: Under tax and commercial law, financial records such as amount, date, and invoice/transaction number may be retained for up to 10 years. These records do not include the content of your album (photos/videos) or your payment card data.
- Deletion proof records: To demonstrate that we carried out the deletion, a technical deletion record containing no content (who, when, how much data) is kept for up to 1 year.
- Security records: Anonymized/limited technical records may be kept for a short period to prevent abuse and ensure security.
Important note: Deleting your account does not automatically cancel a subscription you purchased through the App Store or Google Play. You must separately cancel the subscription in your App Store / Google Play account settings on your device; refund requests are subject to the relevant store's policy.
5. Subscriptions, Credits and E-Commerce
Storpix offers three subscription tiers: Free, Plus, and Ultimate. Plus and Ultimate subscriptions are provided solely through the Apple App Store and Google Play via in-app purchase and are managed using the RevenueCat infrastructure.
- Annual and auto-renewing: Subscriptions run on an annual term and renew automatically at the end of each term unless you cancel. You are charged through your relevant store account on the renewal date. Current prices are shown on the in-app purchase screen and in the store listing.
- Cancellation: You can cancel your subscription at any time in your App Store / Google Play account settings on your device; cancellation takes effect at the end of the current term. Once a subscription expires, your account automatically reverts to the Free tier conditions. Detailed auto-renewal terms and, where applicable, the Apple Standard EULA provisions are set out in our User Agreement (https://storpix.net/sartlar).
- AI credit packs: The AI image and text tools run on credits. Credit packs are consumable products purchased via in-app purchase, separately from a subscription.
- Right of withdrawal exception (digital content): For digital content / immediately performed services such as AI credits and subscriptions, under distance-sales law the right of withdrawal cannot be exercised for credits that have begun to be consumed or services that have begun to be performed; accordingly, consumed credits are non-refundable. For purchases made through the stores, refunds are subject to the relevant store's (Apple/Google) refund policy.
Physical print orders and other e-commerce payments are taken through Iyzico's hosted payment page. These payments support TRY, USD, and EUR currencies. The full text of the distance-sales, delivery, withdrawal, and refund terms is set out in our User Agreement (https://storpix.net/sartlar).
6. Payment Data and Card Security
Your payment card data is not collected or stored by Storpix. Physical product payments are taken through Iyzico's (Turkey) hosted payment form, which collects your card details directly on its own secure page, with 3D Secure verification. Our systems retain only limited technical information confirming the payment result (transaction reference, status, amount); data such as the card number is never stored. During payment, the buyer's IP address is transmitted to the payment provider for fraud prevention and payment verification.
For subscription/credit payments made through the App Store and Google Play, payment takes place entirely on the Apple/Google side; Storpix only receives the purchase result via RevenueCat.
7. AI Photo and Text Processing
Storpix offers features such as photo enhancement/restoration, photo effects, and text generation (album analysis, social media copy, thank-you notes, event stories, and the like). When these features run, certain data is transferred to AI service providers located abroad in order to perform the processing:
- Photo/video processing: The photo or video you select is transmitted to AI providers (Replicate and fal.ai — USA) via an accessible link for processing, and the result is retrieved back to us and stored. When you use this feature, your potentially sensitive imagery, such as family/child photos, reaches these overseas providers.
- Text generation: For the text tools, only text data is transmitted; no photo is sent. The transmitted text may include information you entered, such as the bride/groom name, event date, and venue, depending on the content you generate. This data is transferred to an overseas provider for text generation (OpenRouter / an OpenAI-compatible text provider — USA).
When you do not use these features, your photo or text data is not transferred to these providers. The scope of AI processing, the models used, and the transfer safeguards are described in detail in our Privacy Policy (https://storpix.net/gizlilik).
8. International Data Transfers and Third-Party Processors
In order to provide the service, certain personal data of yours is processed, only to the extent these services require, by third-party service providers (data processors) in the following categories, most of which are located abroad:
- Infrastructure and storage: Supabase (abroad) for the database and authentication; DigitalOcean Spaces (EU — Frankfurt) for media/file storage.
- Artificial intelligence: Replicate and fal.ai (USA) for photo/video processing; OpenRouter (USA) for text generation.
- Payment: RevenueCat (USA) for subscription/credit management and Apple App Store / Google Play (USA) for in-app purchases; Iyzico (Turkey) for physical product payment.
- Notification: Expo (USA) for mobile push; Firebase Cloud Messaging (USA/Google) for web push.
- Analytics and error monitoring: Firebase Analytics / GA4 (USA/Google) for usage measurement; Sentry (EU — Germany) for error/crash monitoring.
Because some of these providers are located in countries outside Turkey and the EU (in particular the USA), your personal data is transferred abroad. These transfers are carried out on the basis of an appropriate legal ground under KVKK Article 9 (your explicit consent where applicable, the necessity of concluding/performing the contract, or appropriate transfer safeguards) and, under GDPR Chapter V, on the basis of appropriate safeguards (for example Standard Contractual Clauses — SCC or an adequacy decision). A detailed list of the transferred data categories, recipient providers, transfer purposes, and the safeguards applied is set out in our Privacy Policy (https://storpix.net/gizlilik).
9. Processing Purposes and Legal Grounds
We process your personal data only for specific, legitimate purposes and on an appropriate legal ground. The main purposes and grounds are:
- Creating your account and providing the service (events/albums, invitations, media upload, e-commerce): conclusion and performance of the contract (KVKK Art.5/2-c; GDPR Art.6/1-b).
- Subscription, credit, and payment transactions: performance of the contract and legal obligation (retention of financial records) (KVKK Art.5/2-c and the legal-obligation ground; GDPR Art.6/1-b and 6/1-c).
- Running the AI photo/text tools and transferring data to the relevant provider: your explicit consent or performance of the service you requested (KVKK Art.5/2 and, where required, Art.9 explicit consent; GDPR Art.6/1-b and Art.49/1-a for the transfer).
- Sending notifications: your consent or legitimate interest (GDPR Art.6/1-a or 6/1-f); you can change your preference at any time.
- Analytics, error/crash monitoring, and security: legitimate interest in improving and securing the service (GDPR Art.6/1-f), subject to consent where applicable.
The recipient groups to which data is transferred (the third-party processors listed above), the purposes of those transfers, and the retention periods for each data category are explained on a per-category basis in our main Privacy Policy (https://storpix.net/gizlilik).
10. Analytics and Cookie Choices / Opt-out
Storpix uses limited measurement and error monitoring to improve the service:
- App analytics: The mobile app measures screen views and basic e-commerce events (such as item views, add-to-cart, and purchases). These measurements do not send direct identifiers and do not use an advertising identifier. However, the analytics infrastructure may automatically collect technical data such as device/operating-system information, approximate geographic location (at country/region level, derived from IP), and session data. You can limit these measurements from your device's privacy settings (iOS tracking permissions and app analytics preferences, Android ad/analytics settings).
- Error/crash monitoring: Crash and error reports are collected to maintain app stability; these reports are configured by default not to send personal identifiers/IP. This service (Sentry) processes the data in the EU (Germany) region and is a processor located outside Turkey.
- Web cookies: In guest album and invitation flows, limited-purpose cookies are used to recognize the same session (e.g., a guest session identifier and a display name). You can manage or delete cookies from your browser settings; some guest features may then be limited.
Storpix does not apply any decision based solely on automated processing, including profiling, that produces legal or similarly significant effects concerning you. The AI tools run only at your request, to generate or enhance content.
11. Marketing and Notification Preferences
You can turn off push notifications at any time:
- From device settings: Disable notifications for the Storpix app in your iOS or Android notification settings.
- From within the app: Disable your notification preferences in the app settings.
When you turn off notifications, we stop using the notification address (push token) used to deliver to your device. When you delete your account, your stored notification address is also removed together with your account data.
12. Access, Correction, Portability and Objection Rights
Under KVKK Article 11 and the GDPR, you have the following rights:
- To learn whether your personal data is being processed and to request information about it.
- To access the data being processed and obtain a copy (access/portability).
- To request correction of inaccurate or incomplete data.
- To request erasure or destruction of your data (subject to legal retention exceptions).
- To object to certain processing and to request restriction of processing.
- To withdraw, at any time, the explicit consent that serves as a basis for international transfers.
To exercise these rights, simply write to info@storpix.com from the email registered to your account. After verifying your identity, we will complete your request within the periods required by law (as a rule within 30 days under KVKK, and as a rule within one month under the GDPR). If you are not satisfied with our response, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority under KVKK; or, if you are in the EU, with your competent data protection authority.
13. Contact
Data controller: Pixs Yazilim ve Ticaret A.S.
- Email: info@storpix.com
- Web: https://storpix.net
- Privacy Policy: https://storpix.net/gizlilik
- User Agreement / Terms of Use: https://storpix.net/sartlar
- Privacy Choices and Data Deletion: https://storpix.net/gizlilik-tercihleri
You can direct any questions, requests, and complaints regarding this page and the processes described here to info@storpix.com. The governing law is Turkish law; the Courts and Enforcement Offices of Trabzon have jurisdiction over disputes. This does not affect your rights under KVKK and the GDPR or your right to apply to the competent mandatory authority.
Effective / Last updated: June 26, 2026.