Your collection, your choice.

Effective November 2, 2026. Exhibit A is provided by FEMBOY LABS LLC.

Private exhibits

Photographs and museum captions stay on your iPhone unless you choose to share them. Caption generation uses Apple's on-device models. Opening the app or creating a private exhibit does not upload your photographs to the public gallery.

Optional public sharing

Before your first public post, the app explains OpenAI moderation and asks you to agree. You can reset that permission in Help & About and be asked again before a future upload. Only the selected photograph and caption are uploaded to our Railway-hosted backend. OpenAI processes that image, caption, and text extracted from the image for safety screening under its API data policies. No other private exhibits are included. You can decline and continue using your private collection.

Approved exhibits become visible to other app users. We resize photographs and remove embedded metadata, including location metadata, before publication. Information visible within a photograph can still be public.

Storage and safety

We store public copies, submission and moderation records, likes, reports, and blocking preferences to operate the gallery, enforce posting limits, and address abuse. Apple App Attest supplies an installation-specific cryptographic identity. Our server assigns that installation a pseudonymous exhibitor identifier and associates its submissions and interactions with it. Public posting does not require an account, name, or email address.

Railway processes connection information to deliver and secure the service. The server temporarily stores hashed IP-address rate-limit records. These identifiers and records support app functionality and safety; we do not use them for advertising, cross-app tracking, or data brokerage. Our service providers process information to deliver, protect, and operate these services under their applicable data-protection terms. We require protection consistent with the uses described in this policy.

Retention

Approved public photographs and captions remain until you withdraw them or we remove them. Rejected photographs are not retained. Removing a public exhibit deletes its hosted image files and clears its caption. Limited installation, submission, moderation, and safety records may remain while needed to enforce posting limits, investigate abuse, and operate the service. Likes and blocking preferences remain until changed or removed. Expired request-limit and authentication-session records are regularly deleted. OpenAI handles processing records under its linked API data policies.

Likes and reinterpretations

Exhibits display their total likes. Reinterpreting a public exhibit saves its photograph to your private collection and generates a new caption on your device. If you publish that interpretation, it links to its source. Removing a source exhibit hides that source and its caption; it does not remove copies or reinterpretations other people have already made.

Removing public exhibits

Remove individual exhibits or all your public exhibits from the public gallery in the app. Their private originals remain on your phone. Deleting a private scan does not remove its public copy. Other people may retain copies they previously saved or shared.

Public sharing is tied to your app installation. If you reinstall the app or change devices and lose access to earlier public exhibits, contact support for help removing them.

Purchases

Your first five successful scans are free. Unlimited Exhibits is an optional one-time purchase through Apple's App Store, with no subscription. Apple handles payment. The app verifies purchase access on-device with StoreKit; we do not receive your payment-card details. Restore Purchases is available in the purchase screen.

Other sharing and support

Exporting an exhibit through the iOS share sheet sends it to the recipient or service you choose, under that service's policies. If you email support, we receive your email address and the information you send. Contact inathan.m@gmail.com to request deletion of associated records, withdraw consent, or ask a privacy question. Some safety records may need to be retained to address abuse or meet legal obligations.