Privacy

Who we are

mjsm3d is operated by Saud Alsaeed, an individual developer based in Saudi Arabia, who is responsible for your personal data under this policy (the data controller). This policy covers the mjsm3d iOS app and the website at mjsm3d.com. Contact [email protected].

What we collect

Account: when you sign in with Apple or Google, we receive an account ID, your email address (this may be an Apple private relay address), which sign-in methods are linked, and your name and profile picture if Apple or Google shares them. We never receive your password.

Designs: what you write (descriptions, messages, and lettering), the images you upload and their file names, and what the studio makes for you (concept drawings, 3D models, renders, print files, and the studio's replies).

Photo details: before we store an image you upload or send it to OpenAI or xAI, we remove what the file records about where and when it was taken and which camera or phone took it (EXIF, XMP, and IPTC data, and comments). We have removed them from images uploaded before 1 October 2026 as well.

Requests and usage: the requests you make (such as a new design, a change, or a question), when you make them, the points they use, and how each one went: how long it took, what it cost us, whether it worked, and its error reports and quality checks.

Points and purchases: your points balance and history. For App Store purchases, we receive the purchase details from Apple through RevenueCat, such as the transaction ID, product, price, country, and date. We never see card details.

Technical: your IP address and the approximate location worked out from it (such as the country, region, and city), the language you use, your device and browser type, a random ID for your browser or app installation, request and error logs, crash and error reports from the app and website, and usage-limit counters. We also collect how you use the app and website, such as the pages and screens you open, what you tap and click, and recordings of your visits to the website, with what you type hidden. The website stores small pieces of data in your browser (cookies and similar storage) for things such as keeping you signed in, remembering your settings, keeping a description you have not sent yet, and measuring how the website is used. It does not use them for ads or to track you across other sites.

Notifications: if you allow notifications in the iOS app, we keep the notification token Apple gives your iPhone, whether notifications may show, which kinds you want, and the app's language, so we can tell you when a design is ready or your points change. While a design is being made, the app can also show a Live Activity on your Lock Screen, which uses a token of its own until it ends.

Support: if you email us, we receive your email address and what you write.

How we use it

We use it to run the studio and make your designs, to check content against our content rules, to keep accounts secure and apply usage limits, to add purchased points and handle refunds, and to answer support requests. You need an account to use mjsm3d, and we need what you write to make a design; without them we cannot provide the service. Uploading images is optional.

We also use it to understand how mjsm3d is used and to improve it: to measure what the studio costs to run and how well it works, to set prices and point amounts, and to find and fix problems. For this we may review designs, requests, and their results, and re-run requests to test improvements.

We process your data to provide the service you ask for, to meet legal duties such as keeping accounting records, and for our legitimate interests in keeping mjsm3d secure and in measuring and improving its cost and quality. Where we rely on your consent, you can withdraw it at any time by emailing us. The app asks your permission before it first sends what you write and upload to our AI providers. You can withdraw it at any time in the app (Account → AI sharing). Where we rely on legitimate interests, you can object at any time by emailing us.

We don't show ads, sell personal data, or track you across other companies' apps or websites.

Who processes it for us

• Supabase: sign-in, database, and file storage, in Frankfurt, Germany.
• Hetzner: servers in Nuremberg, Germany.
• Cloudflare: network and security in front of the website and API.
• OpenAI: processes what you write and the images you upload to run the studio's AI features, such as checking content, writing the studio's replies, making and checking drawings and 3D designs, and translating the studio's text into your language. We may also use xAI for some of this work.
• Anthropic: AI tools we use to help review designs, requests, their results, and logs when we measure and improve the studio's quality.
• Apple and Google: sign-in.
• Apple and RevenueCat: in-app purchases and refunds.
• Apple: notifications on your iPhone, including Live Activities.
• PostHog: analytics, error reports, session recordings, server logs, and copies of the studio's AI requests and their replies, in Frankfurt, Germany.

Apple and Google provide sign-in, and Apple provides App Store purchases, refunds, and notifications, under their own privacy policies. The other providers process your data to do this work for us and must protect it at least as well as this policy does. We may also disclose data when the law requires it.

Our servers, database, and file storage are in Germany. Some of these providers may process your data in other countries, including the United States, and we may access it from Saudi Arabia, for example to give support or to test improvements, so your data may be transferred outside your country.

If you accept bonus points for keeping a points pack and later ask Apple for a refund, we tell Apple, through RevenueCat, that you agreed to this sharing, that your points were delivered, and that we prefer the refund to be declined.

How long we keep it

We keep your designs until you delete them or your account. Deleting a design removes it from your account, with its messages and files. Records of the requests you made for it, such as the text of a request and error reports, and copies we make to test improvements, may be kept until you delete your account.

Deleting your account deletes your designs, uploads, messages, files, the text of your requests, and their error reports from our database, storage, and servers, deletes any copies we made to test improvements, and removes your sign-in account. Our analytics provider then deletes its records of how you used the app and website, including session recordings. This can take a few weeks. Unused points are forfeited, and we show you how many before you confirm.

After that, we keep these records, which contain no design content: purchase and points records (such as amounts, dates, products, and store transaction IDs) as needed for accounting, and cost and usage records (such as which actions were used, when, and what they cost us). These records are linked only to random IDs, such as your account ID, not to your name or email. We also keep usage statistics, such as when the account was created, how many designs it made, and why it was closed. They are stored without your account ID and contain no design content. To stop the sign-up points being claimed twice, we also keep one-way codes made from the email address and the Apple or Google account you signed in with, for as long as we offer sign-up points. We keep purchase and points records for as long as accounting and tax rules require, and cost and usage records and usage statistics for as long as we need them to measure and price the service. Deleted data may remain in backups for a limited time until they are replaced.

Technical and security logs, such as request and sign-in logs, and copies of the studio's AI requests and their replies can include your account ID, email address, IP address, and parts of your requests and designs. We keep them only as long as we need them for security, troubleshooting, and measuring and improving the service. When you delete a design or your account, your entries in them are not deleted one by one.

Your choices

You can delete a design at any time. You can delete your account in the iOS app (Account → Delete account) or on the website at /account. If you signed in with Apple, you can also stop using Sign in with Apple for mjsm3d in your Apple ID settings. You can stop sharing usage data at any time in the iOS app (Account → Share usage data to improve mjsm3d) or on the website at /account. When it is off, we stop sending your usage data to our analytics provider, but our server logs still go to it.

You can turn notifications off, or choose which kinds you get, in the iOS app (Account → Notifications) or in your iPhone's Settings, where you can also turn off Live Activities.

You can ask us for a copy of your data, including the data you gave us in a common machine-readable format, or ask us to correct or delete it, and you can object to or ask us to limit some uses of it. Email [email protected] for these requests or any privacy question. We may need to confirm that a request comes from you.

You can also complain to a data protection authority, such as the Saudi Data & AI Authority (SDAIA) in Saudi Arabia or the authority where you live.

Children

mjsm3d is not directed to children under 13. If you are under 18, use it only with a parent's or guardian's permission.

Security

Connections are encrypted (HTTPS), your designs and files are private to your account so other customers cannot see them, and access to our systems is restricted.

Changes

We will update this page and its date when this policy changes.