Explicit consent text

Version 2Last updated: 11 November 2026

This text explains the explicit consents the Softflash app asks you for. You do not have to give consent. You can withdraw a consent at any time.

1. Explicit consent for biometric data

I give my explicit consent for Eren Gürbüz to process biometric data, such as the face vector, facial landmarks and the head angle, eyes, iris and skin color measured from these landmarks, from every face in the photos I apply an AI style or tool to and in the generated results (in the Background Cleaner, only from the main people; see “Other people in the photo”), under the following conditions:

  • Purpose: Checking that the photo is suitable (number of faces, face position, head angle, eyes), verifying that my face did not change in the generated result and, when needed, aligning the face from my original photo to the result and placing it there, matched to the scene's light (in tools such as the Background Cleaner, the original face is not placed into the result). The data is not used for any other purpose, such as identifying me.
  • Scope: Only the photo I upload for that generation and the generated result; every face that appears in them (in the Background Cleaner, only the main people; see “Other people in the photo”).
  • Duration: The data is held in server memory only for the duration of the operation and discarded when the operation ends. It is not stored or logged.
  • Sharing: Biometric data is processed only on the servers of Google, the hosting provider working on our behalf; it is not sent to the AI generation service and not shared with third parties. My photo and the face region cropped from it are sent to Google's AI service (the Gemini API) to apply the style or tool, but the face vector and landmarks are not. In the Background Cleaner, the photo sent also contains the image of the people in the background; the face region is cropped only from the main people. Google may keep this photo for a limited time only to detect abuse (privacy policy, section 7).
  • Location: Biometric data is processed only on Google's servers in Belgium (europe-west1). Applying the style or tool to my photo runs on Google's Gemini API and may take place on Google's infrastructure outside the EU (including the United States); the face vector and landmarks are not sent to that service.
  • What remains: Only the numbers of the comparison score are written to the generation record and deleted after 30 days. My face cannot be rebuilt from these numbers. If I file a “My face changed” complaint, these numbers are copied to the complaint record and kept until my account is deleted.
  • Risks: Biometric data cannot be changed like a password; if it were obtained by someone else, it could be misused to recognize or impersonate me. That is why it is processed only in memory and not stored.

Other people in the photo: Because the verification checks that every face in the photo did not change, if other people appear in the photo, the same data is processed from their faces under the same conditions. In the Background Cleaner tool, face data is calculated only for the main people in the photo (the largest one or two faces). The faces of other people in the background are only detected on the server; their position and size are used in memory during the operation to check that no new face appears in the result. No face vector is calculated for them and no iris or skin color is measured; the rough eye, nose and mouth points that the face detector finds along with each face are not used and are discarded when the operation ends. I declare that I have their explicit consent. In the Background Cleaner, this consent is not required for the people in the background I want removed from the photo; their image is processed only to remove them from the photo, and no face vectors are calculated for them. I declare that I have the consent of the main people who remain in the photo. People who appear in a photo can exercise their rights by writing to therisyy@gmail.com or using the support form.

If you do not consent: You cannot use the AI styles and tools (e.g. the Background Cleaner). Filters and adjustment tools keep working.

Withdrawal: You can withdraw your consent at any time with Settings > Withdraw consent in the app. After withdrawing, you cannot use the AI styles and tools. Withdrawal does not affect the lawfulness of earlier processing.

2. Analytics permission

Usage data to improve the app and website is collected only with your permission. It is linked not to your name or email but to the randomly generated user ID (a pseudonym) tied to your account. Your decision to allow, decline or withdraw does not stop you from using the service. You can change it in Settings in the app, and from the “Cookie preferences” link at the bottom of the page on the website.

3. Campaign and announcement notifications

The “Campaign and announcement notifications” switch in Settings is off by default. If you turn it on, your device is subscribed to the announcement and campaign notification topic in your language and we may send you promotional notifications; this is your prior approval under Turkish Law No. 6563. Allowing notifications alone does not count as this approval. You can turn the switch off at any time; turning it off unsubscribes you.

4. Consent record

Each biometric data and analytics consent you give or withdraw in the app is saved to your account with the type of consent, the text version, the time and the action taken (given or withdrawn). This history is deleted when you delete your account. Your cookie choice on the website is saved only in your browser, not to an account.

The consent screen in the app is a summary of this text and links to this page. The version number at the top of this page is the version of the text you approve. If the text changes, it is published with a new version number.

Details about how your personal data is processed are in the privacy policy and the data protection notice (KVKK).