Privacy Policy

Last updated: 22 September 2026

This policy explains how Thwacko handles your information. The app is provided by Volkan Günay (Vomcore). Contact: hello@vomcore.com.

Short version

No account, no sign-up, no advertising, no analytics SDK and no crash reporter. A photo you pick is sent to our server only to draw a caricature and is not stored. Thwacko does not perform facial recognition or biometric identification. The caricatures are kept on your iPhone.

Camera and photos

When you add a friend, you take a photo or pick one from your library. Thwacko only reads the photo you choose; it does not scan your library. The photo is resized on your iPhone (at most 512 pixels on the long side, JPEG) before it leaves the device.

How a caricature is made

1. The app sends the resized photo, together with the anonymous purchase identifier described below, to our server on Amazon Web Services in Frankfurt, Germany (eu-central-1).
2. Our server forwards the photo to our processor fal.ai (Features & Labels, Inc., USA), which runs the image-generation models that draw the caricature, the four reaction faces and remove the background.
3. The app downloads the two finished images and keeps them on your iPhone. The download links on fal.ai’s servers are temporary.

Our server does not save the photo — not in a database, not in file storage and not in logs. It only passes through memory while the caricature is being made. fal.ai processes it on our behalf solely to generate the images, not for its own purposes. Our server keeps a short job record (a random job ID, status and the links to the finished images) that is deleted automatically after one day.

No facial recognition

Thwacko does not recognise, identify, verify or match faces, and it creates no face template, face geometry or biometric identifier. The photo is used as an artistic reference for a drawing and nothing else. We never learn who is in the photo.

Photos of other people

Thwacko is built for photos of friends. Only use a photo of someone if you have their permission, and never use Thwacko to mock, harass or humiliate anyone. See the Terms of Use.

What our server keeps

• Usage counters tied to the anonymous purchase identifier: whether the free caricature from the first-run screens has been used, and how many caricatures were drawn this month (deleted automatically about two months later).
• A cached subscription status for that identifier, refreshed every ten minutes.
• Technical logs (job ID, image size and dimensions, errors) kept for 14 days. No photo, no IP address, no name.

What is stored on your device

• Your cast: the caricatures and reaction faces you made, and the costume you chose for each.
• Preferences: your last prop and that you finished the first-run screens.

Deleting the app removes these.

Payments

The Backstage Pass is sold as a weekly, monthly or yearly subscription, or as a one-time lifetime purchase. Purchases are handled by the App Store and we never see your payment details. Whether your purchase is active is verified through RevenueCat, Inc. using an anonymous identifier that contains no name, email, location or advertising ID. Our server uses the same identifier to apply the monthly caricature limit.

What we do not do

No advertising SDK, no analytics SDK, no tracking pixel, no fingerprinting, no data broker, no tracking across apps. We do not sell or share your data, and we do not use your photos to train models.

Children

Thwacko is not directed at children under 13 and does not knowingly collect personal information from them.

Your rights and contact

We hold no account and no personal profile, and we do not keep your photos. The counters linked to your anonymous identifier expire on their own; if you want them removed sooner, or have any question, write to hello@vomcore.com. You can revoke camera or photo access at any time in iOS Settings.

Changes

If this policy changes, the date at the top changes with it and the new text is published here before the version that relies on it ships.