Privacy Policy

Effective Date: September 28, 2026

Gavin Schnee Studio ("we", "us", or "our") operates a range of products, including the TrendRadar, Img2Prompt, and XUnfollowGhost Chrome extensions, the Video2LivePhoto macOS app, and NyxAstra for macOS, iOS, iPadOS, and Windows. This Privacy Policy explains how we collect, use, and protect your information when you use our products.

1. Information We Collect

TrendRadar

TrendRadar is designed with a privacy-first architecture. The vast majority of data is stored locally on your device:

  • Browsing signals (post titles, engagement metrics) are captured from pages you visit on Reddit and X, and stored locally in your browser's IndexedDB.
  • AI API keys you provide are stored locally in Chrome storage and are never transmitted to our servers.
  • If you opt-in to Community Trends, anonymized and SHA-256 hashed trend signals are uploaded to our backend. No personally identifiable information is included.

Img2Prompt

  • Images you convert are sent to our backend for processing by GPT. Images are processed in real-time and are not stored on our servers after processing is complete.
  • If you sign in with Google, we receive your Google profile name and email address for account management and quota tracking.
  • Conversion history (generated prompts) is stored securely and associated with your user account.
  • For Pro subscribers, payment information is processed securely by Paddle, the Merchant of Record. We do not store your credit card details.

XUnfollowGhost

XUnfollowGhost is designed with complete local-only data storage. No data is transmitted externally:

  • Follower data (screen names, display names, avatars, verified badge status) is parsed from the rendered x.com followers page and stored locally in IndexedDB.
  • The extension does not access any X/Twitter API and does not collect authentication tokens, cookies, or login credentials.
  • The extension makes zero external network requests. All processing happens locally in your browser.

For the full product-specific privacy policy, see the XUnfollowGhost Privacy Policy.

Video2LivePhoto

Video2LivePhoto is a native macOS app that runs entirely on your device. The app does not collect or transmit your personal data:

  • Video files you select are read locally for conversion only. They are never uploaded or sent to any server.
  • The app runs inside the macOS App Sandbox. It requests Photos Add-Only permission to save generated Live Photos, reads only videos you explicitly select, and writes paired HEIC and MOV files only to an export folder you explicitly choose.
  • No analytics, no telemetry, no network requests of any kind. Video2LivePhoto is open source under the MIT license; the code is auditable on GitHub.
  • Apple handles purchases and payments through the Mac App Store. The app does not collect or store your payment details.

NyxAstra

NyxAstra is a local-first native GPT-Image app for macOS, iOS, iPadOS, and Windows that follows a bring-your-own-key (BYOK) model. Gavin Schnee Studio does not operate a NyxAstra backend and cannot access your API keys, prompts, reference images, or generated images:

  • Your Azure OpenAI or OpenAI API keys are stored locally: AES-256-GCM inside the macOS app sandbox, Windows DPAPI on Windows, and the device-only system Keychain on iPhone and iPad. They are never transmitted to our servers.
  • Prompts, generated images, templates, and history are stored locally on your device. After you authorize provider requests, prompts, generation settings, and any reference images are sent directly from your device to the AI endpoint you configure (Azure OpenAI or OpenAI) to perform the requested generation.
  • On iPhone and iPad, the system Photos picker gives NyxAstra access only to images you select. Sharing or saving generated images is handled by the system share sheet; NyxAstra does not request direct access to your Photos library.
  • No analytics, no telemetry. We have no access to your API keys, prompts, or generated images.

2. How We Use Your Information

  • To provide and maintain our services
  • To manage your account and subscription
  • To enforce usage quotas and rate limits
  • To process payments through Paddle
  • To provide aggregated community trend insights (TrendRadar, opt-in only)

3. Third-Party Services

Our products integrate with the following third-party services:

  • Paddle — Payment processing for Img2Prompt Pro subscriptions. Paddle acts as the Merchant of Record and handles all payment data in accordance with their privacy policy.
  • Google Sign-In — Authentication for Img2Prompt. We only access your basic profile information (name and email).
  • OpenAI — Image processing for Img2Prompt and, when selected by a NyxAstra user, image-generation requests sent directly with the user's own API key. OpenAI handles submitted content under its published terms, privacy policy, and the data controls of the user's account.
  • Microsoft Azure OpenAI — When selected by a NyxAstra user, generation requests are sent directly to the Azure endpoint configured by that user. Microsoft and the Azure account owner handle submitted content under their applicable terms, privacy commitments, and account configuration.
  • AI Providers (Claude, OpenAI, Gemini, DeepSeek) — TrendRadar users connect directly to these services using their own API keys. We have no access to these communications.

4. Data Storage & Retention

  • TrendRadar local data: Stored in your browser's IndexedDB. You can clear it anytime through the extension settings or browser settings.
  • TrendRadar community data: Anonymized signals are retained for 7 days; aggregated community trends for 30 days.
  • Img2Prompt conversion history: Retained as long as your account is active. You can delete individual entries from the extension.
  • NyxAstra local data: Provider credentials can be removed from Settings, and generations and templates can be deleted in the app. Files exported or saved to a user-selected folder remain there until the user deletes them. OpenAI or Azure retention is governed by the provider account's terms and data controls.
  • Account data: Retained until you request deletion or your account is terminated.

5. Cookies & Local Storage

Our website uses minimal cookies for essential functionality only. Our Chrome extensions use Chrome's local storage API and IndexedDB for storing user preferences, AI API keys, and application data. No tracking cookies are used.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent for community trend sharing (TrendRadar)
  • Cancel your subscription and close your account (Img2Prompt)

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption for all data in transit, secure cloud infrastructure, and PCI-compliant payment processing through Paddle.

8. Children's Privacy

Our products are not intended for children under 13 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our products after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: