Privacy Policy — Deva
Last updated: 23 September 2026
This policy explains what Deva does with your data. The short version: browsing DeviantArt in Deva happens directly between your device and DeviantArt, and we see none of it. Two features do reach our server: creating images (the Create tab) and checking a subscription. This policy says exactly what they send and where it goes. We run no analytics, no advertising and no tracking.
1. Who is responsible
Anatolii Remenets — developer of Deva.
Contact: anatoliiremenets@gmail.com
2. What Deva is
Deva is an independent, unofficial client for the DeviantArt service. It is not affiliated with DeviantArt or Wix. Everything you do with DeviantArt content — browsing, favourites, comments, watching artists — goes directly from your device to DeviantArt’s public API. Our server is not involved in any of it.
3. Signing in
You sign in through DeviantArt’s own website, opened in a system browser window.
- The app never sees, receives or stores your password.
- It receives an access token and a refresh token, which are stored in the iOS Keychain on your device.
- The token is sent only to DeviantArt, only to make the requests you ask for. It never reaches our server.
Revoking access is done on DeviantArt’s side, in your account settings under “Applications”. Signing out in the app deletes the stored tokens from your device.
4. Creating images (the Create tab)
When you create or edit an image, the app sends to our server:
- the text of your request (the prompt);
- the images you attach, if any;
- the options you chose (model, size, number of variants);
- a random device identifier — a code generated by the app, unrelated to your name, your Apple ID or your DeviantArt account. It is how we count your monthly allowance.
- a signature from Apple’s App Attest service, which proves the request comes from the genuine app on a real device. It contains nothing about you.
Our server passes the prompt, the attached images and the options to our image model provider, kie.ai, which runs Google’s Gemini image models. The device identifier is not passed on: kie.ai receives the request itself and nothing that identifies you or your device.
Where it is kept and for how long:
| What | Where | For how long |
|---|---|---|
| Your prompt, options and attached images | our server | not stored — passed straight to kie.ai |
| A record of the job: its status and links to the results | our server | 3 days, then deleted |
| How many images you used this period | our server | for the length of the period |
| The task, including your prompt | kie.ai | under kie.ai’s own policy |
| Attached images | kie.ai’s temporary storage | deleted automatically, within about 3 days |
| Links to generated images | kie.ai | expire within about 24 hours |
| Generated images | your device | until you delete the chat |
We do not read your prompts or look at your images, and we do not use them for anything other than making the image you asked for. What kie.ai does with the task is governed by kie.ai’s own terms and privacy policy.
Generated images are kept only on your device. They are excluded from iCloud backup, so they do not leave your device unless you save or share them yourself.
5. Subscriptions
Payments are processed by Apple. We never see your card or payment details.
To know whether your subscription is active, the app uses Adapty, a subscription management service. Adapty receives your purchase history (which plan, when it started and renews) and the same random device identifier. Our server asks Adapty whether that identifier has an active subscription, and stores the answer for as long as the subscription lasts.
Adapty’s processing is governed by Adapty’s own privacy policy.
6. What is stored on your device
| What | Where | Why |
|---|---|---|
| Access and refresh tokens | Keychain | to stay signed in |
| Device identifier | Keychain | to count your monthly image allowance |
| Your chats in Create, with generated and attached images | app storage | so you can come back to them |
| Blocked artists | app storage | to hide their work in every feed |
| Recent searches | app storage | to offer them again in Discover |
| Content and generation settings | app storage | to remember your preferences |
| Cached API responses and images | app storage | to open faster and work with a poor connection |
App storage is removed when you delete the app. The Keychain is kept by iOS across reinstalls, so the app handles it itself: sign-in tokens are removed when you sign out and on the first launch after reinstalling, while the device identifier is kept on purpose — so that reinstalling the app does not reset your monthly allowance.
7. What we do not do
No analytics. No advertising. No tracking across apps or websites. No crash reporting services. We do not build a profile of you, and we do not sell or share your data. We cannot see what you browse, favourite or write on DeviantArt.
8. What DeviantArt receives
Everything you do with DeviantArt content happens on your DeviantArt account, so DeviantArt receives those requests. That is their processing, governed by DeviantArt’s own privacy policy, not by this one.
9. Content from other people
Artwork, comments and profiles shown in the app belong to their authors and are served by DeviantArt. We neither host nor moderate them. Objectionable content can be reported and abusive artists blocked from the “…” menu on any deviation.
10. Children
Deva is rated 17+ and is not intended for children. We do not knowingly process any data about children.
11. Your rights
The little we hold is keyed to a random device identifier, not to you by name. We never store your prompts or images, and job records delete themselves after 3 days. If you want us to delete what our server holds for your device sooner — your usage count and subscription status — write to us and we will do it. Data held by DeviantArt, Apple, Adapty or kie.ai is governed by their own policies.
12. Changes
If a future version of the app changes what it sends or to whom, this policy will be updated before that version ships, and the “last updated” date above will change.