What we hold, and for how long.

Effective 14 August 2026 · Little Me for iOS

Little Me turns two of your photographs into one. One of them is almost always a picture of you as a child. We have written this page to be read rather than survived, and it describes what the app actually does, not what a template says it might.

The service is operated by Atakan Apan (Türkiye), the data controller for the purposes of the GDPR and the UK GDPR. Contact: contact@atakanapan.com.

What we collect

Data	Why	Kept for
The two photos you choose	To generate your polaroid. Nothing else.	Deleted within 24 hours, automatically, whether or not the generation succeeded.
The polaroids we generate	So you can come back to them.	Until you delete them, or 30 days after an account without sign-in goes inactive.
An account identifier	To tie your credits to you. Created on first launch; no name or email required.	Until you delete your account.
Your email address	Only if you choose Sign in with Apple, so your credits survive a new phone. If you use Apple's private relay, that relay address is all we ever see.	Until you delete your account.
Purchase records	To credit what you bought and to honour refunds. Apple handles the payment; we never see your card.	As long as required for tax and accounting.
Crash and failure diagnostics	To find out that something is broken. Codes, counts and identifiers only.	90 days.
Which of the three results you picked	To learn which looks people prefer. A number, tied to the job, not to your face.	With the job record.

We do not collect your contacts, your location, your photo library beyond the two images you pick, or your activity in other apps. There is no advertising and no cross-app tracking, which is why iOS never shows you the tracking permission prompt for Little Me.

Your photos are never training data

We do not use your photographs to train, fine-tune or improve any model, and neither do the two providers who generate the image for us. Both are used on API tiers where submitted content is excluded from training:

Google, the Gemini API, for image generation.
OpenAI, the Images API, for image generation.

Your two photos are sent to one or both of them for the seconds it takes to produce a result, and are not retained by us beyond the 24 hours above.

Who else is involved

Supabase. Hosting, database and file storage. Your photos and results sit here, in private buckets, reachable only through short-lived signed links.
Cloudflare. Sits in front of the API and serves this website.
Apple. The App Store handles every payment and, if you choose it, Sign in with Apple.
Sentry. Crash and error reporting. It receives error codes, counts and identifiers. It never receives your photographs, and never the web addresses of your files, because those addresses carry access tokens.

One honest detail about Sentry: the app reports when a session starts, so that we can tell what share of launches crash. That means Sentry observes the IP address of a launch, even though we ask it not to derive a user or a location from it. If that matters to you, it is the one place in the app where a network-level identifier is seen by a third party.

Where your data is

Our database and storage are hosted in the European Union. The generation providers process images on their own infrastructure, which may be outside the EU or the UK; those transfers rely on the providers' standard contractual clauses.

Children

Little Me is for adults, and it is not directed at children. The childhood photograph you upload is expected to be of yourself. Please do not upload a photograph of another child.

Your rights

You can delete your account from inside the app: Settings, then Delete account. That removes your polaroids, your uploads and your identifiers. Purchase records that we are legally obliged to keep are anonymised rather than deleted, and your credit history is unlinked from you.

You may also ask us for a copy of what we hold, ask us to correct it, or object to our processing it. Write to contact@atakanapan.com and we will answer within 30 days. If you are in the EEA or the UK and you are not satisfied with the answer, you may complain to your national data protection authority.

Legal bases

Performing our contract with you. Generating and storing your polaroids, handling purchases and credits.
Legitimate interests. Keeping the service up and finding out when it breaks, preventing abuse, and knowing which results people prefer.
Legal obligation. Keeping records of purchases.

What we generate is AI-generated

The polaroid Little Me returns is produced by an image model. It shows a moment that did not happen, made from two photographs that did. Nothing in the image is a record of a real event, and the file carries no watermark saying so, so please keep that in mind before presenting one as a photograph of something that took place.

Changes

If this policy changes in a way that affects you, we will change the date at the top and, for anything material, tell you in the app before it takes effect.

Contact

Atakan Apan · contact@atakanapan.com