Back to home

Privacy Policy

What [APP NAME] collects, why, who we share it with, and how to have it deleted.

Last updated: 2026-10-18

[APP NAME] ("we", "us"), operated by [OPERATOR NAME], an individual in [COUNTRY], is a web app that turns one photo into a short AI video. We are the controller of your personal data. This policy explains what we collect when you use [YOUR DOMAIN], why, and what rights you have. Questions or requests: [SUPPORT EMAIL].

What we collect

  1. Photos you upload. Used only to generate the video you asked for and to run our safety check on it. Photos are not shown to other users.
  2. Videos we generate for you. Stored so you can watch and download them.
  3. Account details, if you create an account: email address, name, and a hashed password (or your Google sign-in details: name, email and profile picture).
  4. Purchase details. Payments are handled by Waffo Pancake or Creem as merchant of record. We receive the order status, amount, currency and the email used at checkout. We never see or store your card number.
  5. Moderation records. The result of the automated safety check on each photo (for example a safety score), and any report or review decision about your content.
  6. Usage and device data: pages visited, buttons used, approximate country, browser and device type, IP address (used for security and rate limiting), collected with cookies or similar technology.

Why we use it and our legal basis

  • To provide the Service (generate and deliver videos, keep your account and credits): necessary to perform our contract with you.
  • To take payments, send receipts and handle refunds: contract, and our legal obligations for tax and accounting.
  • To keep the Service safe (check photos for prohibited content, handle reports, prevent fraud and abuse): our legitimate interest and, for illegal content, legal obligations.
  • To understand and improve the site using analytics: our legitimate interest, or your consent where the law requires it.

We do not sell your personal data, we don't use it for targeted advertising, and we do not use your photos or videos to train AI models.

Who we share it with

We share data only with the service providers we need to run the site, and only for that purpose:

  • fal.ai: hosts the AI models. Your photo is sent there to run the safety check and to generate the video.
  • [MODEL PROVIDERS]: the AI model providers. Through fal.ai they process your photo and the generated video to create it and to apply their safety filters.
  • Waffo Pancake and Creem: process payments as merchant of record. They collect your payment and billing details directly under their own privacy policies.
  • Cloudflare: hosting, database and video storage.
  • Google (Google Analytics and, if you use it, Google sign-in) and other analytics tools, with pseudonymous usage data.
  • Authorities, if the law requires it, for example to report child sexual abuse material.

Some of these providers are outside your country, including in the United States. Where the law requires it, transfers are protected by standard contractual clauses or equivalent safeguards.

How long we keep it

  • Uploaded photos: kept only in fal.ai's temporary file storage to generate your video. We don't copy them to our own storage.
  • Videos made without an account: offered for download for 3 days, then no longer available to you.
  • Account data and videos in an account: until you delete them or your account, or ask us to.
  • Moderation records: up to 12 months, or longer if needed for a legal case or a report to the authorities.
  • Payment records: as long as tax and accounting law requires.

Cookies

We use necessary cookies to keep you signed in (including as a guest) and to remember your checkout. We use analytics cookies to measure how the site is used. Where the law requires it, analytics cookies are only set after you agree.

Your rights

Depending on where you live (for example under the GDPR in the EU/UK, the CCPA in California, or the LFPDPPP in Mexico), you can ask us to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent at any time. Write to [SUPPORT EMAIL] from the email linked to your account or purchase. We reply within 30 days. You can also complain to your local data protection authority.

Security

Data is sent over HTTPS. Secrets and payment keys are encrypted, and access to user data is limited to the people who run the Service.

Children

The Service is for adults (18+). We don't knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page, and tell account holders by email about significant changes.