Privacy Policy

1. Information we collect

Account information: email address, a normalised email identifier used to prevent duplicate promotional claims, name, profile image, sign-in method and account identifiers. Google sign-in provides the profile information you authorise Google to share. For email sign-in, we process the email address, hashed verification code, verification attempts, timestamps and requesting IP address.

Content and activity: prompts, uploaded images and videos, reference files, generation settings, task status, results, media URLs, credit usage and asset records. Some browser editing features process files locally; uploading, saving to a cloud feature or using AI generation may transmit content to our systems and relevant providers. Do not assume every tool operates solely on your device.

Payment information: plan, subscription status, credit balance, purchase history, amounts, currency and Stripe customer, subscription and transaction identifiers. Stripe collects payment credentials through its checkout. Our application does not receive or store your full payment-card number or card security code.

Technical and usage information: IP address, browser and device information, approximate location derived from request or hosting information, language, time zone, screen size, visited paths, referral URLs, campaign parameters and events such as sign-in, generation and checkout. We also collect information you send in support or privacy requests.

2. How and why we use information

We use information to authenticate you, deliver requested editing and generation features, display your assets, process payments, allocate credits, manage subscriptions, send verification and service messages, and respond to requests. We may also process reports, relevant content and task or account records to review suspected content violations, handle rights complaints and appeals, and enforce our content standards.

We also use technical, account and usage data to prevent abuse, enforce usage limits, investigate failures, protect the Service, understand product usage and acquisition channels, improve features, maintain records and meet legal obligations. Our internal analytics can associate a visitor identifier and earlier activity with an account after sign-in. Our analytics profile uses an IP hash, while verification records and infrastructure may separately process or retain the original IP address.

We handle data on the basis of consent or another basis permitted by applicable law. Where GDPR or UK GDPR applies, the relevant bases may include performing a contract for requested services, legal obligations for required records, legitimate interests in proportionate security and service administration, and consent for optional tracking where required. You may object to processing based on legitimate interests or withdraw consent as applicable; withdrawal does not invalidate earlier lawful processing.

3. Service providers and other recipients

Providers receive information needed for their role. Our integrations include Google for sign-in, Analytics, advertising and web fonts; Stripe for payment processing and subscription management; Supabase for application data storage; Cloudflare for media storage, delivery and verification emails; and Vercel for website hosting. Availability and use of a particular provider depend on the feature you access.

For AI image generation, inputs are sent through the Tu-zi API. For AI video generation, prompts, settings and relevant reference media or media links are sent through Kie.ai. These services may use downstream model and infrastructure providers. Generated media may be retrieved from a provider’s delivery host and copied to our media storage.

We may disclose information when legally required, to address fraud or security issues, to protect lawful rights, or to advisers and parties involved in a genuine business reorganisation, subject to appropriate legal restrictions and notice where required. Independent third-party services also process information under their own policies.

4. AI processing and training

Submitting an AI request makes its prompt and relevant files or links available to the providers needed to process that request. Their retention, moderation and possible model-improvement practices depend on the provider, model and applicable service arrangement. We do not make a blanket promise that every external model provider offers zero retention or excludes every use for training.

Do not submit confidential information, identity documents or sensitive personal information unless you have established that the tool and provider arrangements meet your needs and you have the necessary authority. Contact us before use if you need a specific retention or training restriction. A private-generation setting does not itself establish a no-training agreement.

5. Media links and deletion controls

Access to your account’s asset list and generation history requires authentication. The media files themselves may be available through a direct URL without a separate sign-in check. Anyone who obtains that URL may be able to access the file, including after you share it outside AI Photo Animator. Private generation does not by itself make the underlying media URL access-controlled.

Deleting an item from the asset list currently hides its record from that list; it does not immediately erase the underlying file, related task records or provider copies, or revoke an existing media URL. For removal of stored content or account data, contact us with the relevant account and file or task references. We will review the request and explain applicable limits, including legal retention and copies held independently by others.

6. Cookies, local storage and advertising

We use authentication and security cookies, short-lived sign-in event and source cookies, and a first-party visitor identifier called se_aid with a configured lifetime of one year. Browser storage, including IndexedDB, can retain editing or generation drafts until cleared by the feature or through your browser. Clearing it can remove unsaved work.

The website integrates Google Analytics and Google AdSense. These services may receive online identifiers, device and usage information and use cookies or similar technologies to measure traffic, deliver or measure ads and, depending on settings and applicable consent, personalise advertising. After sign-in, our Analytics integration can send a hashed email-derived user identifier; hashing does not make that identifier anonymous.

You can manage cookies and site storage in your browser, review Google’s ad personalisation controls or use Google’s Analytics opt-out tool where supported. Blocking necessary cookies may prevent sign-in or other features. These provider and browser controls do not replace any consent or opt-out mechanism that applicable law requires us to provide. Agreeing to these Terms or continuing to browse is not, by itself, consent to optional tracking where separate consent is required.

Advertising-related disclosures may be treated as a “sale”, “sharing” or targeted advertising under some privacy laws, even without a monetary sale of personal information. We do not represent that all advertising processing is exempt from those rules. Contact us to exercise applicable rights; your browser or Google preferences may not cover every disclosure.

• How Google uses information from sites and apps
• Google My Ad Center
• Google Analytics opt-out

7. How long information is kept

Retention depends on the purpose of the record, whether your account or task remains active, support and dispute needs, security risks and applicable legal obligations. Account and asset records may remain while needed to provide the Service; transaction records may need to remain for accounting or legal purposes after account closure. We review requests to remove data that is no longer needed for those purposes.

A verification code expires after ten minutes, but expiry does not automatically delete its database record. Likewise, a cookie’s lifetime is not the retention period for server-side analytics. We do not promise that uploads, logs or backups are automatically erased after a fixed number of days. Contact us for information about the records relevant to your request.

Where deletion is applicable, residual backup copies may remain until replaced under the relevant backup process, and we may retain limited records when needed to comply with law or resolve disputes. We will explain a relevant retention reason when responding to a request.

8. International processing

Our providers may process or store information outside Singapore and outside the country where you live. Using a global service does not mean all data stays in Singapore. Processing locations depend on the provider and service configuration.

Where international-transfer rules apply, we are required to ensure the appropriate level of protection and use a permitted transfer mechanism. Depending on the applicable law, this may involve contractual safeguards or another recognised mechanism. Contact us for details of the processing locations and transfer safeguards relevant to the features you use.

9. Security

We use safeguards such as authenticated access to account records, server-side handling of service credentials and hashed email verification codes. No internet service or storage method can guarantee absolute security. Media-link access has the limitations explained above.

Please protect your email and Google account, keep verification codes private, and report suspected unauthorised access. Where a personal-data incident triggers a legal notification obligation, we will notify the appropriate authority and affected individuals as required.

10. Your choices and privacy rights

You can contact us to request access to or correction of personal data, information about its use or disclosure, withdrawal of consent, account closure or deletion of content. Depending on the laws that apply to you, you may also have rights to erasure, restriction, objection, portability, an opt-out of sale, sharing or targeted advertising, and an appeal of a decision. Some rights have exceptions and not every right applies in every location.

Use the contact information below and describe your request. We may ask for information reasonably needed to verify your identity or an authorised representative’s authority. We will respond within the applicable legal period and explain any refusal, extension or legally permitted fee. Withdrawing consent can affect features that need the relevant data; we will explain the consequences. We will not discriminate against you for exercising protected rights.

You may raise a concern with Singapore’s Personal Data Protection Commission or another privacy authority with jurisdiction over your situation. Please contact our privacy team first if you would like us to help resolve it.

• Singapore PDPC — Contact

11. Children and other people’s information

AI Photo Animator is intended for adults aged 18 and over. If you believe a child has provided personal data through an account, contact us so we can investigate and take appropriate steps.

If you upload content depicting or identifying someone else, you must have the necessary authority and permissions, including parent or guardian permission where required for a child’s information. Do not upload material that violates another person’s privacy or safety.

12. Changes and contact

We may revise this Policy as features, providers or legal requirements change. The revision date appears above. We will provide an appropriate notice of material changes and obtain fresh consent where required before processing data for a new purpose.

For questions or requests about personal data, contact AI Photo Animator using the details below and mark your message “Privacy”. English and Chinese versions are available; mandatory rights under applicable law are unaffected by any translation difference.