Privacy Policy

Summary of Key Points

The app uses advanced AI to generate AI photos based on user-provided media.
We use a third-party AI provider (Fal AI) to process and transform the content you choose to upload.
Only the images you specifically select for AI generation are uploaded to our servers. We do not automatically upload your entire camera roll or media library.
We do not use your images or videos for any purpose other than providing you with AI-based generation features. Immediately after the successful generation, your original photos, face data, as well as any associated Image Data, are deleted permanently from our servers. Fal AI retains this data for up to seven (7) days before permanent deletion.
We do not use your personal data for any other purpose (e.g., training separate AI models or developing unrelated products).
Your generated AI Photos are stored locally on your device within the app's Library, and you may delete them at any time.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? Some of the features of our Services involve processing photos you voluntarily upload, which may contain your face or the faces of others. We treat such images as sensitive and collect them only with your explicit consent, solely to perform the AI generation you request. See Section 6A for full details.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

names
email addresses
contact or authentication data

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by RevenueCat, Apple, and Google. You may find their privacy notice link(s) here:

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect certain profile information about you from the social media provider.

Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

User-Uploaded Photos. When you choose to use our AI photo/video generation features, you voluntarily upload photos from your device. These photos may contain images of your face or the faces of other individuals. We collect these photos solely to transmit them to our third-party AI processing partner (Fal AI) for the purpose of generating the AI effect you requested. We do not store, analyze, or use these images for any other purpose. See Section 6A for complete details on how face data within these photos is handled.
Geolocation Information. We may request access or permission to track location-based information from your mobile device to provide certain location-based services.
Mobile Device Data. We automatically collect device information such as your mobile device ID, model, manufacturer, operating system, version information, browser type, hardware model, and IP address.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. The information we collect includes:

Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
Device Data. Information about your computer, phone, tablet, or other device you use to access the Services.
Location Data. Information about your device's location, which can be either precise or imprecise.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account.
To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.

3. What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you. We may rely on the following legal bases to process your personal information:

Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, this section applies to you. We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

4. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. The categories of third parties we may share personal information with are as follows:

AI Platforms
Cloud Computing Services
Data Analytics Services
Data Storage Service Providers
Payment Processors
Performance Monitoring Tools
User Account Registration & Authentication Services
Website Hosting Service Providers
Communication & Collaboration Tools

We also may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Offer Wall. Our application(s) may display a third-party hosted “offer wall” that allows third-party advertisers to offer virtual currency, gifts, or other items to users.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising.

6. Do We Offer Artificial Intelligence-Based Products?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

We provide the AI Products through third-party service providers (“AI Service Providers”), including Fal AI (fal.ai). Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products.

Our AI Products are designed for the following functions:

Image generation
Video generation

6A. How We Handle Face Data

In Short: When you use our AI generation features, your uploaded photos — which may contain your face — are securely transmitted to our third-party AI partner, Fal AI (fal.ai), solely to generate the effect you requested.

Reason for storing face data: When you choose to use an AI photo or video generation effect, you voluntarily select and upload a photo from your device's photo library or camera. This photo may contain an image of your face or the faces of other individuals. Face data is temporarily stored to allow users to generate AI photos, create animated videos, and apply unique art styles. This is the only face-related data we collect, and we collect it solely at your initiative and with your explicit in-app consent.

Explicit statement on retention of face data: We do not retain face data or any image(s), video(s) you upload after generation of AI Photos. After successful generation, the media you upload and the face data processed to generate AI photos are immediately deleted from our servers permanently. On Fal AI's servers, this process takes up to 7 (seven) days before permanent deletion.

Length of time face data is stored: As stated above, face data is immediately deleted from our servers permanently after your generation request is completed. On our third-party provider Fal AI's infrastructure, the deletion process may take up to 7 (seven) days.

Third-party sharing of face data: We use a third-party cloud provider (Fal AI) for secure temporary storage and processing of face data. This third party is responsible for hosting the data during the generation process and does not retain or use the data beyond this 7-day period. We confirm that any third-party AI service provider (including Fal AI) with whom we share user data provides the same or equal protection of user data as stated in this Privacy Policy.

Reasons for sharing face data with third parties: Your uploaded photo (including any face data it contains) is securely transmitted over HTTPS to Fal AI solely so that the AI model can apply the visual effect you selected. The photo is not used for facial recognition, identity verification, advertising targeting, model training, or any other purpose. These third-party services are necessary to ensure the efficient functioning of our App and safeguard user data through encryption.

Third parties storing face data: Fal AI (fal.ai) temporarily stores face data during the generation process period. After this time (up to 7 days), the data is automatically deleted. These third-party services do not retain or store face data beyond the defined period.

User consent and right to withdraw: Before your photo is transmitted for the first time, the app displays a clear disclosure modal identifying what data is sent, who it is sent to (Fal AI), and how long it is retained. You must explicitly tap “I Allow” before any photo is transmitted.

7. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details. We will receive certain profile information about you from your social media provider, such as your name, email address, and profile picture. We will use the information we receive only for the purposes described in this Privacy Notice.

8. Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, please be aware that your information may be transferred to, stored by, and processed by us in our facilities in the United States and other countries. We have implemented measures to protect your personal information, including by using the European Commission's Standard Contractual Clauses for transfers of personal information.

9. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

10. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

11. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the US or in some regions, such as the EEA, UK, Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at support@mthdstudios.com.

Account Information

If you would like to review or change the information in your account, you can:

Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at support@mthdstudios.com.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

13. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights.

Categories of Personal Information We Collect

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, IP address, email address, and account name	YES
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	YES
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	YES
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location	YES
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	YES
I. Professional or employment-related information	Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, an individual's preferences and characteristics	NO
L. Sensitive personal information		NO

Your Rights

You have rights under certain US state data protection laws. These rights include:

Right to know whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling

How to Exercise Your Rights

To exercise these rights, you can contact us by submitting a data subject access request, by emailing us at support@mthdstudios.com, or by referring to the contact details at the bottom of this document.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at support@mthdstudios.com.

California “Shine The Light” Law

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact details provided below.

14. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at support@mthdstudios.com or contact us by post at:

Ajhel Amanonce and Jacen Salvador

[Address details to be added]

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please contact us at support@mthdstudios.com.