Privacy Policy

This Privacy Policy describes how Pierre T. Lambert / P.T. Lambert LLC (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you use Pierre AI — our website at ai.pierretlambert.com, our iOS application, our Android application, and related services — when you visit pierretlambert.com or our shop at shop.pierretlambert.com, or when you otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services.

Pierre AI is an AI-powered photography coaching service. Its core features involve sending your messages and photographs to AI providers for analysis. This Policy explains exactly what that means. Please read it carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy, update the “Last updated” date and take any other steps required by applicable law.

What Personal Information We Collect

Information You Provide Directly

• Account information — your email address, and your name and profile picture where you sign in with Google or Apple.
• Chat messages — the text you send to Pierre AI, and the responses generated for you.
• Photographs you upload for critique or coaching, together with the technical metadata (EXIF) embedded in them by your camera, such as camera model, lens, focal length, aperture, shutter speed and ISO.
• Voice recordings — when you tap the microphone to dictate a message, the recording is captured and transcribed. See “Voice Features” below.
• Profile facts and preferences — your first name, camera gear, photography goals, favorite subjects, creative struggles, practice constraints, preferred language and time zone, which Pierre AI records to personalize your coaching.
• Coaching and program information — your notification preferences, program answers, and progress through training programs.
• Customer support information — whatever you choose to include when you contact us.
• Order and contact information — where you purchase from our shop, including name, billing address, shipping address, email and phone number.

Information Collected Automatically

• Device and app information — platform (iOS, Android or web), operating system, browser, application version, language and time zone.
• Connection information — IP address and related network information, processed by our hosting provider as part of serving requests and maintaining security.
• Diagnostic information — if the application encounters an error, we may record the error message, a truncated technical stack trace, the page involved, and whether you were using the app or the website, so that we can fix it.
• Usage information — interactions with the Services, including analytics events described under “Analytics and Cookies” below.
• Service records — records of AI requests made on your behalf, including which model was used and the number of tokens processed, which we use for cost control, abuse prevention and capacity planning.
• Push notification tokens — where you enable notifications, the token that allows us to deliver them to your device, along with the platform and, on the web, your browser user agent.

Information We Receive from Third Parties

• Sign-in providers — where you sign in with Google or Apple, we receive the information described under “Google User Data” below. Apple may provide a private relay email address if you choose to hide your email.
• Subscription infrastructure — where you subscribe through the App Store or Google Play, we receive subscription status events (purchase, renewal, cancellation, billing issue, refund, expiry) through RevenueCat. We do not receive your payment card details from Apple or Google.
• Our customer platform — where you subscribe on the web, our billing and CRM platform provides your subscription status and related account tags.

Device Permissions in the Mobile Apps

The iOS and Android applications request device permissions only when you first use the feature that needs them. You can change or revoke any of these at any time in your device settings.

• Camera — only when you choose to take a photo to send to Pierre AI.
• Photo library — only to let you select photographs to send. We receive only the images you select; we do not browse, scan or index your photo library.
• Microphone — only while you are actively dictating a message. Recording starts when you tap the microphone and stops when you stop it.
• Notifications — only to deliver coaching check-ins and program reminders you have enabled.

How We Use Your Personal Information

• Providing the coaching service. Processing your messages and photographs, generating coaching responses, maintaining your conversation history, and remembering your preferences and profile facts so that guidance stays consistent across sessions.
• Managing your account and subscription. Creating and maintaining your account, determining whether you have access, and sending you service communications about your account, purchases or subscription.
• Coaching notifications. Sending the check-ins and program reminders you have enabled, by push notification or email.
• Improving the Services. Diagnosing errors, monitoring quality and cost, and reviewing anonymized samples of conversations to assess how well the coaching is working. See “Quality Review” below. If you are in the EEA, our legal basis is our legitimate interest in operating and improving the service (Art. 6 (1) (f) GDPR).
• Security and fraud prevention. Detecting, investigating and acting on possible fraudulent, abusive or unlawful activity (Art. 6 (1) (f) GDPR).
• Marketing communications. Sending you news and offers about our products where you have signed up for them or where permitted by law. You can opt out at any time using the unsubscribe link in any marketing email. We do not show third-party advertising inside Pierre AI.
• Legal compliance. Complying with legal obligations, enforcing our Terms, and protecting our rights and the rights of our users.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing or advertising purposes.

AI Processing

Pierre AI cannot function without sending your content to AI providers. When you send a message, the following may be transmitted to an AI provider for the sole purpose of generating your response: your message text, any photographs you attached, the technical metadata from those photographs, relevant earlier messages in the conversation, and your saved profile facts (such as your gear and goals).

The AI providers we currently use are:

• OpenAI — coaching conversations, photo analysis, voice transcription, conversation titles, training-program generation, and internal quality classification.
• Anthropic — available as an alternative provider for generating personalized training programs. Whether it is used depends on our configuration at the time.
• ElevenLabs — converting Pierre AI's written responses into speech when you use the listen feature. Only the text of the response is sent.

We process this data under agreements with these providers that restrict their use of it to delivering the service to us. If we add or change AI providers, we will update this Policy.

Your account credentials and your Google or Apple sign-in profile data are not included in what we send to AI providers.

AI responses can be wrong. Pierre AI provides photography education and creative guidance. It is not professional, legal, medical or financial advice, and its statements should not be relied on as statements of fact.

Photographs

Photographs you upload are stored in our storage infrastructure and linked to the conversation you sent them in, so that you can revisit past critiques, compare versions of an image, and so that Pierre AI can refer back to work you have already discussed.

We read the technical metadata (EXIF) embedded in your photographs — specifically camera, lens, aperture, shutter speed and ISO — because it is central to the coaching. We do not read location data from your photographs. Photographs are also converted before upload, and that conversion removes the embedded metadata, so the copies we store do not contain GPS coordinates.

Pierre AI also generates and stores short written descriptions of photographs you have shared within a conversation, so that it can recall your earlier images without re-processing them each time.

Resolution reduction. Approximately seven days after upload, we automatically replace stored photographs with a reduced-resolution version (long edge of roughly 768 pixels). This keeps your coaching history viewable while limiting how long we hold full-resolution copies of your work. The reduced version remains available with the conversation until you delete it or delete your account.

Voice Features

Dictation. Recording begins only when you tap the microphone. The recording is sent to OpenAI for transcription and the resulting text is placed in your message box, where you can edit it before sending or discard it. We do not store your voice recordings — the audio is processed for transcription and is not retained by us. If you send the transcribed message, the text becomes part of your conversation history like any other message.

Listening to responses. When you play a response aloud, the text of that response is sent to ElevenLabs to generate audio. The generated audio file is cached for approximately seven days so that replaying it does not regenerate it, and is then deleted. We keep a record that the response was played, which we use for cost tracking.

Quality Review

To assess whether Pierre AI is coaching well, we periodically review samples of conversations. Before review, these samples are anonymized: user identifiers, email addresses and similar direct identifiers are removed, and conversations are labelled with a randomly assigned reference rather than your identity. This review is used to measure and improve the quality of coaching. It is not used to build advertising profiles, and the results are not shared outside our team and the AI providers performing the analysis.

Reporting a Response

If Pierre AI produces a response you consider offensive or inappropriate, you can report it directly from the response inside the app. When you do, we record the response you reported, the conversation it came from, any explanation you choose to add, and your account identifier, so that we can review it and improve the Service.

Reports are deleted along with your other data if you delete your account.

Subscriptions and Billing

Where you subscribe through the App Store or Google Play, the purchase is made with Apple or Google. We never receive your payment card details. We receive subscription events through RevenueCat, our subscription infrastructure provider, and store the resulting entitlement record so we know whether your account has access.

So that we can identify your subscription and support you if something goes wrong, we provide RevenueCat with your account identifier, your email address and your first name where available.

Where you subscribe on the web, payment is handled by our web billing provider, and we receive your subscription status.

We share your email address, account identifier, subscription status and language preference with our customer platform (GoHighLevel) so that your subscription and our communications with you stay in sync. Your conversations and photographs are never sent to that platform.

Service Providers

We rely on the following providers to operate the Services. Each processes personal information on our behalf.

• Supabase — authentication, database and file storage.
• Vercel — application hosting and delivery.
• OpenAI — AI coaching responses, photo analysis and voice transcription.
• Anthropic — AI generation of personalized training programs, where configured.
• ElevenLabs — text-to-speech playback.
• RevenueCat — in-app subscription infrastructure.
• Apple and Google — sign-in, app distribution and in-app purchase billing.
• Google Firebase Cloud Messaging — delivery of push notifications to mobile devices.
• Zoho (ZeptoMail) — transactional and coaching email delivery.
• GoHighLevel — customer relationship management and web billing synchronization.
• Google Tag Manager — analytics, as described below.
• Shopify — our separate online shop.

We require service providers that process personal information on our behalf to use it only for the purposes we have contracted for, and to provide protections consistent with this Policy and applicable law.

We may also disclose personal information where you ask us to, in connection with a business transaction such as a merger or acquisition, to comply with legal obligations or lawful requests, to enforce our Terms, and to protect the rights and safety of our users or others.

Analytics and Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used. Authentication and preference storage are essential to the Services working at all.

We use Google Tag Manager to record product analytics events — for example, that a subscription screen was viewed or a subscription became active. These events are tied to your session and to the Services, and are used to understand how people move through the product.

Our public pages also embed a Vimeo player for the presentation video, and Vimeo sets its own cookies so that plays are counted in its analytics.

Visitors in Europe are shown a notice and can decline both of these. Declining costs you nothing on the page: the video still plays, in Vimeo’s cookie-free mode, and only the measurement stops. Your answer is kept in your browser and can be changed at any time from the “Cookies” link in the footer of those pages.

Most browsers accept cookies by default; you can remove or reject them through your browser settings, though doing so may stop parts of the Services from working.

Google User Data — Access, Use, Storage, Sharing & Deletion

This section specifically describes how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

1. Data Accessed

When you sign in with Google, we access the following through Supabase's OAuth integration: your email address, display name and profile picture.

We do not request access to your Google contacts, calendar, Google Drive, Gmail, YouTube, or any other Google service. No Google API scopes beyond basic profile authentication are requested.

2. Data Usage

Google user data is used solely to:

• Create and authenticate your account.
• Display your name and profile picture within your account interface.
• Send you account-related communications.

It is not used for advertising, user profiling, or any purpose unrelated to providing and maintaining your account.

3. Data Sharing

We do not sell, rent, or share your Google user data with third parties for their own independent purposes. It is shared only with Supabase, our authentication and database provider, which processes it on our behalf under a data processing agreement.

Your Google sign-in profile data is not included in the content sent to AI providers.

4. Data Storage & Protection

Your Google user data is stored in our database hosted on Supabase. Protections include encryption in transit and at rest as provided by our infrastructure providers, row-level security policies restricting each account to its own records, and access controls limiting internal access. Our application does not store your Google OAuth access or refresh tokens; sessions are managed by Supabase's authentication infrastructure.

5. Data Retention & Deletion

Your Google user data is retained while your account remains active. You can delete your account at any time from within the app or website (Settings → Account → Delete account), or follow the instructions on our account deletion page. Deleting your account permanently removes your Google user data from our database.

You may also revoke our access at any time through your Google Account permissions settings.

Retention

• Account, profile facts and preferences — while your account is active.
• Conversations and messages — while your account is active, or until you delete the conversation.
• Photographs — while your account is active, reduced in resolution after approximately seven days as described above.
• Voice recordings — not retained.
• Generated speech audio — approximately seven days, then deleted.
• Push notification tokens — until you disable notifications, the token is rejected by the platform as invalid, or your account is deleted.
• Subscription and entitlement records — while your account is active, and afterwards where we need them for financial, tax or dispute-resolution purposes.
• Service and diagnostic records — retained on a rolling basis for security, cost control and troubleshooting.

Deleting Your Account

You can delete your account at any time from Settings → Account → Delete account, in the mobile apps and on the website. Deletion is immediate and permanent, and removes your profile, conversations and messages, uploaded photographs, saved facts and preferences, program progress and notification settings.

Full instructions, including how to request deletion if you can no longer sign in, are on our account deletion page.

Deleting your account does not cancel your subscription. If you subscribed through the App Store or Google Play, cancel it in your device's subscription settings. If you subscribed on the web, cancel it through the member portal.

We may retain limited records after deletion where we are required to, such as transaction records kept for tax and accounting purposes, and residual copies may persist in routine backups for a limited period before being overwritten.

Security

We use administrative, technical and organizational safeguards designed to protect personal information, including encryption in transit, encryption at rest as provided by our infrastructure providers, database policies that restrict each account to its own records, and limits on internal access.

No security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not send us sensitive or confidential information through insecure channels.

Children

Pierre AI is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under the age of majority where you live, you may use the Services only with the involvement and consent of a parent or legal guardian, who is responsible for your use of them.

If you believe a child under 13 has provided us with personal information, contact us at the address below and we will delete it.

Your Rights

Depending on where you live, you may have some or all of the following rights:

• Access: request access to the personal information we hold about you.
• Deletion: request that we delete your personal information.
• Correction: request that we correct inaccurate personal information.
• Portability: request a copy of your personal information.
• Opt out of sale, sharing or targeted advertising: we do not sell or share personal information for these purposes.
• Restriction of processing: ask us to stop or restrict processing.
• Withdrawal of consent: where we rely on consent, withdraw it at any time. You can revoke device permissions in your device settings, turn off notifications in the app, and unsubscribe from marketing emails using the link in any such email.
• Appeal: appeal our decision if we decline a request.

Exercise any of these rights by contacting us at the address below. We will not discriminate against you for doing so.

International Users

We are based in the United States and our providers may process personal information in the United States and elsewhere. If we transfer your personal information out of Europe or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority, unless the transfer is to a country determined to provide an adequate level of protection.

Contact

For questions about this Privacy Policy or to exercise any of your rights, email us at support@pierretlambert.com or write to us at 7901 4th St N, Ste 300, St. Petersburg, FL, 33702, US.

For the purpose of applicable data protection laws, and unless explicitly stated otherwise, P.T. Lambert LLC is the data controller of your personal information.