AI Image Validator (photo-validator) privacy

Applies to the AI Image Validator mobile app for iOS and Android (repository name photo-validator; store name pending): it estimates whether a photo is AI-generated from three signals (file metadata, error-level analysis and a detection model) and from Content Credentials (C2PA) when the file carries them. The “Privacy Policy” row in the app’s Settings opens this section.

This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.

Image analysis is unavailable. A licensed detection model and a running analysis service are required before this feature can be enabled. The following analysis and history paragraphs describe the intended processing when it is available.

Summary

When analysis is enabled, images you check are uploaded to our server, analysed in memory and discarded: the server never writes the image to disk and keeps no copy. What stays on the server is the result record described below, tied to your account. The app shows no advertising and loads no analytics or tracking library.

Images

When analysis is available and you check an image, the original file (JPEG, PNG, WebP or HEIC, up to 15 MB) is sent over HTTPS to our server, decoded in memory, examined and released when the check finishes. No image is sent to any third-party service; the detection model runs on our own server. Location data embedded in the file is not read.

What the server stores for each check

The verdict and score; the per-stage scores and the internal signals behind them (whether the file has EXIF metadata, the camera make and model and the editing-software tag if the file carries them, the file format, and the model’s probability); a SHA-256 fingerprint of the file, so that re-checking the same image returns the earlier result instead of running again; the name and version of the detection model; the Content Credentials state and, when a credential is present, the signer name and its claim; warnings, processing time and the time of the check. The fingerprint cannot be turned back into the image. The app displays only the scores; the internal signals stay on the server.

Account and history

Sign-in is by email and password on our own authentication server (supabase.llab08.com), which stores your email address and sign-in timestamps; the same sign-in identity is shared with other llab08 products that use this server. Each check is stored under your account identifier so your history follows you across devices, and every request carries your session token. On this device the app keeps a small thumbnail of each checked image for the History screen, your session token, and an anonymous per-install identifier that is sent with requests but not stored with your checks. Thumbnails never leave the device.

Deleting your data

When the service is available, “Clear History” in Settings requests deletion of your stored checks and local thumbnails. Settings also includes “Delete account”, which requests deletion of your analysis records, clears local history and signs you out; it retains the shared llab08 sign-in identity. Contact the address below to request removal of that shared identity or if a deletion request fails.

Permissions

Camera and photo-library access are requested only when you take or pick an image to check; the app does not scan your library in the background.

Hosting and logs

The analysis server, database and authentication server run on infrastructure we operate; requests pass through Cloudflare, which forwards the connecting network address so the server can limit how many checks an address can make per minute (that address is held in memory for the rate limit, not written to our logs). Access logs hold a request id, method, path, status and timing — never image contents — and are not used to identify anyone.

Accuracy

Results are indications, not proof; no published accuracy figure applies to this pipeline yet. Do not rely on a result alone for any decision with legal, financial, safety or reputational consequences.

Children

The app is not directed at children under 13 and does not knowingly collect personal data from them.

Contact: hello@llab08.com · Updated 12 September 2026 · All privacy notices