Effective date: October 17, 2026
This Privacy Policy explains how Slash (“we”, “us”) collects, uses, and protects your information when you use the Slash mobile application (the “App”), published by Yacine Kahlis. By using the App you agree to the practices described here.
The short version: Slash has no account, no login, and never asks for your name or email. Your rolls (the photos you picked and the shots made from them) and your settings are stored on your iPhone. When you shoot, the photo you picked is sent over an encrypted connection to our server and to our AI provider, whose image model makes the shot. Our server deletes your photo as soon as the shoot finishes, and keeps the shot for 72 hours so your iPhone can download it. We do not use your photos to train anything. No ads, we never sell your data, and we do not track you across other apps.
The App has no accounts. The first time you open it, it creates a random, anonymous identifier on your iPhone. It is not tied to your name, email or Apple Account. The App sends it with its requests to our server, which uses it to check your plan, count your trial and weekly shots, and apply fair-use limits. The same identifier is used by RevenueCat, which manages subscriptions for us, and by our analytics provider, both described below.
The identifier is kept in your iPhone's Keychain: it stays the same if you delete the App and install it again, and it can move to a new iPhone with an encrypted backup. “Delete all my data” in the App's Settings replaces it with a new one.
This data lives in the App's local storage on your iPhone. It may be included in the device backups you configure with Apple (iCloud or local backups). Those backups are managed by Apple under your Apple Account; we have no access to them.
You choose the photo with iOS's own photo picker, which gives the App only the photo you pick. When you shoot, the App sends that one photo, resized and saved as a JPEG, and the tags you chose over an encrypted connection to our server. Our server passes them to our AI provider, whose image model makes the shot. Our server deletes your photo as soon as that shoot finishes.
The shot itself stays on our server for 72 hours, so that your iPhone can download it, also when the App was closed in the meantime. After that it is deleted, by a clean-up that runs every hour. “Delete all my data” deletes it at once.
Our AI provider handles your photo under its own terms for business (API) customers; how long it keeps a request is set by those terms, not by us. It may refuse a photo or a request under its own content rules; that shot is then not counted. We do not use your photos to train anything.
A reel, the short video of a roll played as a conversation, is made on your iPhone. Nothing is sent to our server to make it.
A shot or a reel goes to your photo library only when you save it, and to another app (Messages, Instagram, TikTok or any app in the iOS share sheet) only when you share it. What you share is then handled by that app under its own terms.
Reporting a shot: if you report a shot, the App sends our server the shot's identifier and the reason you chose. We keep the report with the shot's tags (when the shot is still on our server) and a one-way pseudonym of your anonymous identifier (not the identifier itself), so that we can review it, act on it and, if needed, block a device that abuses the App. Reports are kept as long as needed to handle them and to prevent abuse.
Suggesting a slash: if you suggest a slash, the App sends our server the slashes you typed, the description you wrote if any, where in the App you wrote it and the App's language, with the same one-way pseudonym. Only we read suggestions, to choose new looks; they are never shown to other users. Please do not write personal information in them.
Our server sees the IP address your requests come from, as any server does. It uses it only to limit the number of requests one address can make and does not store it. Our hosting provider's network may record it in its own logs for a limited time.
Subscriptions are bought and paid through Apple; we never see your name, email or payment details. RevenueCat manages subscriptions for us: it receives your anonymous identifier, your purchase and subscription status from the App Store, and how many times the App showed you its subscription screen. Our server asks RevenueCat whether your identifier has an active plan, and RevenueCat notifies our server when a subscription changes. RevenueCat also holds your balance of shots, which the App spends when you shoot and which your subscription renews.
We use an analytics provider, whose servers are in the United States, to understand how the App is used. It receives product-usage events tied to your anonymous identifier: the screens you view and the actions you take (for example a shoot started, finished or failed and how long it took, the tags used, a shot saved or shared, a reel made, the subscription screen viewed, a purchase or a restore), your onboarding choices, your plan, and the technical details its library adds (device model, iOS version, App version and language). It may use the IP address of a request to estimate an approximate location. It never receives your photos, your shots or anything about what they show. There are no session recordings.
The same analytics project is shared by the apps of the same developer; each event says which app it comes from.
We do not show ads, we do not sell your personal information or share it for cross-context behavioral advertising, and we do not track you across other companies' apps or websites.
Our service providers, including our AI provider, RevenueCat and our analytics provider, process data in the United States and possibly in other countries. Your information may therefore be processed outside Quebec and outside Canada, under the laws of those places.
In the App, open Settings and tap Delete all my data. It needs an internet connection: our server is asked first, and if it cannot be reached, nothing is deleted.
Deleting the App removes your rolls, your reels and your settings from your iPhone, but not your anonymous identifier, which stays in the Keychain, and not the records on our server: use Delete all my data first if you want those erased too. Cancelling a subscription is done in your Apple Account (Settings → your name → Subscriptions); neither deleting the App nor deleting your data cancels it.
You can also ask us by email to delete the records tied to your anonymous identifier on our server, at RevenueCat or at our analytics provider. Because the App has no accounts, we will reply with what we need to find your data.
Depending on where you live (including under Quebec's Act respecting the protection of personal information in the private sector, PIPEDA, the GDPR, the UK GDPR and the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to withdraw your consent. Most of your data is on your iPhone, so you can exercise most of these rights directly in the App. For data held on our server or by our providers, or for anything else, contact us below. If you live in Quebec, you may also contact the Commission d'accès à l'information du Québec.
The person in charge of protecting personal information for Slash is Yacine Kahlis, reachable at hello.yk.apps@gmail.com.
The App is not directed at children under 13, and we do not knowingly collect personal information from them. A photo of a minor may be submitted only with the consent of the minor's parent, as our Terms of Service require.
If this policy changes, the updated version will be posted at this address with a new effective date.
Questions about this policy? Email us at hello.yk.apps@gmail.com. If you email us, we receive your email address and what you write, and use them only to reply.