Privacy Policy

This Privacy Policy describes how NovaVid ("we", "us", "our") collects, uses, stores, and shares personal data when you download, install, access, or use the NovaVid mobile application (the "App") and related services (the "Service").

This Privacy Policy should be read alongside our Terms of Service. If you do not agree with the practices described here, please do not use the Service.

Throughout this policy, "Personal Data" refers to any information that relates to an identified or identifiable natural person, as defined under applicable data protection law.

We may collect Personal Data from you in the following ways:

• Directly from you when you provide it to us;
• Automatically as you use the Service;
• From third parties such as service providers, analytics partners, or vendors operating on our behalf.

The types of Personal Data we collect depend on how you use the Service and which features you access. Depending on applicable law, this may include account, payment, usage, device, and third-party login information, as described in more detail below.

When you use the Service, you may provide the following types of Personal Data:

• Uploaded images and videos. Files you upload are processed solely to deliver the features you request.
• Gender selection. Certain generation features may prompt you to choose a gender preference (Female, Male, or Other). This is used only to customize outputs for your selection and is not used for identification or profiling.
• Communications. When you contact us, we may collect your name, email address, and message content to respond and provide support.
• Account information. If you register an account, we may collect your email address and assign an internal unique identifier for account management.
• Payment and subscription information. For purchases, we may collect limited transaction-related details such as subscription type, payment status, transaction identifiers, and related URLs. Full payment card processing is handled by the platform through which you made your purchase (Apple App Store or Google Play) — we do not receive your card number.
• Other voluntary information. Any additional information you choose to provide when interacting with the Service.

How We Process Image Data

The Service processes images, videos, and other visual content you upload — including content that may contain faces — to generate AI-based videos, images, or other visual outputs. To deliver the output you request, we may perform necessary automated visual analysis on your uploads, such as detecting faces, subject location, pose, composition, or other visual features within the content.

Such processing is used solely to generate the content you actively request, such as image-to-video, first/last-frame video generation, template-based video generation, text-to-image, image-to-image, or other AI creation features. We do not use facial information to identify you, to verify your identity, or for surveillance, tracking, advertising targeting, or building biometric profiles.

Facial Information & Biometric Considerations

NovaVid is an AI video and image generation app. You may choose to upload images containing people or faces in order to generate AI videos or images.

To produce video effects and maintain consistent visual appearance of a person across different frames, scenes, or template effects, we may perform limited technical analysis on the content you provide, such as detecting whether a face or human subject appears in an image. Such processing is used only to generate the result you request — for example, animating a static photo, generating template effects, or maintaining the visual consistency of a person across a generated video.

We do not use facial information to identify or authenticate you, and we do not use it for identity verification, surveillance, tracking, advertising, user profiling, or biometric analysis.

We do not create, store, or maintain face templates, facial geometry templates, biometric identifiers, or similar data that could be used to identify an individual.

Third-Party AI Service Processing

To provide AI content generation, content safety review, and related features, we may send images, videos, text prompts, generation parameters, template selections, task information, and necessary technical information that you actively provide to our servers and to third-party AI service providers for processing.

The third-party AI services we currently use may include:

• OpenAI — for content safety review and text/image-related AI processing;
• Alibaba Cloud Model Studio — for AI video, image, or related generation processing;
• Google Gemini / Google AI — for large language model-related processing;
• xAI / Grok — for large language model-related processing.

These third-party providers will process relevant data only to the extent necessary to fulfill your requested AI generation, content safety review, or related services. We do not instruct third-party AI service providers to use your uploaded images, videos, facial information, or related analysis data for identity recognition, identity verification, surveillance, tracking, advertising targeting, building a facial recognition database, or building a biometric profile.

For information on how these third-party AI service providers handle faces, biometrics, data use, data retention, model training, or security protections, please refer to the following official policies or documentation:

• OpenAI:
  • "Respect privacy" section of the Usage Policies;
  • "Our commitments" and "Model training FAQ" sections of Enterprise Privacy at OpenAI.
  • https://openai.com/policies/usage-policies/
  • https://openai.com/enterprise-privacy/
• Alibaba Cloud Model Studio:
  • "Privacy protection" section of Security certifications and privacy.
  • https://www.alibabacloud.com/help/en/model-studio/privacy-notice
• Google Gemini / Google AI:
  • Section 1 "Do not engage in dangerous or illegal activities, or otherwise violate applicable law or regulations" of the Generative AI Prohibited Use Policy;
  • "How We Handle Data" section of Gemini API Abuse Monitoring.
  • https://policies.google.com/terms/generative-ai/use-policy
  • https://ai.google.dev/gemini-api/docs/usage-policies
• xAI / Grok:
  • "2. Personal information we collect (Notice at collection)" section of the Privacy Policy;
  • "3. How we may use personal information" section of the Privacy Policy.
  • https://x.ai/legal/privacy-policy

Regardless of the third-party AI services used, we do not sell or rent your uploaded images, videos, facial information, or any derived facial-analysis data. We do not use your uploaded images, videos, or facial information to train our own machine learning models without your explicit consent.

Retention of Image & Facial Data

We process uploaded images, videos, text prompts, generation parameters, generated results, and related task information only for the period necessary to provide the Service.

We do not store facial-analysis data, biometric templates, or facial geometry templates that could be used to identify an individual. Facial-related visual information used for temporary processing is deleted or no longer retained after the generation task is complete.

Uploaded content, generated results, and related task data may be retained for a reasonable period to display your generated results, support history access, safeguard the Service, handle content moderation, troubleshoot errors, respond to user requests, and comply with legal obligations. You may contact us in accordance with this Privacy Policy to request deletion of relevant data.

Restrictions on Use

We do not sell or rent your uploaded images, videos, facial information, or any derived facial-analysis data.

We do not use uploaded images, videos, or facial information for identity verification, authentication, surveillance, tracking, advertising targeting, or building biometric profiles.

We do not use your uploaded images, videos, or facial information to train our own machine learning models without your explicit consent.

Content Safety & Reporting

We apply automated measures to help detect and prevent generation or display of content that may violate our Terms of Service, including nudity, violence, illegal content, or other inappropriate material. Template and result pages include a visible Report entry point so users can flag problematic content.

If our systems detect that a generation request or result may violate our Terms of Service, we may display an in-app notice, block the generation or withhold the result, and, where appropriate, restore the Gems consumed for that generation.

When you use the Service, we may automatically collect the following categories of information, subject to applicable consent requirements:

Usage & Technical Data

• Device and technical information, such as IP address, device identifiers, operating system, language, and network information;
• App usage data, including feature interactions, frequency, and timestamps;
• App version and App Store region.

Subscription & Transaction Metadata

• Subscription status and limited transaction-related metadata (excluding full payment card details).

Payment processing is handled entirely by the platform through which you made your purchase (Apple App Store or Google Play). We do not receive or store your full payment information.

Advertising & Attribution Identifiers

• Identifiers such as Apple's IDFA, IDFV, Google's Advertising ID (GAID), UUIDs, or similar device-level identifiers, where permitted by your device settings and applicable law.

You may opt out by adjusting the tracking or advertising settings on your device:

• iOS: Settings > Privacy & Security > Tracking
• Android: Settings > Privacy > Ads (or Google Settings > Ads > Delete advertising ID)

If you opt out, we may still receive limited aggregated attribution data that does not identify you.

Diagnostic & Log Data

• Timestamps, crash reports, error diagnostics, and performance data collected to maintain, secure, and improve the Service.

Device Permissions

Depending on the features you use and your device settings, the App may request the following permissions:

• Photos or media library access, to let you select images or videos to upload;
• Camera access, to capture photos or videos for use in the Service;
• Notification permissions, for service-related notices or subscription updates;
• Tracking permissions (e.g., IDFA on iOS, Advertising ID on Android), where required and only with your consent, for attribution and measurement purposes.

You can manage or revoke these permissions at any time in your device settings. Denying certain permissions may limit the availability of some features.

Purposes of Processing

We process Personal Data for the following purposes, subject to applicable law:

• To provide and operate the Service and its features;
• To process your requests and generate the content you ask for;
• To provide customer support and respond to inquiries;
• To monitor usage, analyze performance, and improve the Service;
• To ensure security, prevent fraud, and prevent abuse;
• To comply with legal obligations and enforce our Terms of Service;
• For any other purpose disclosed at the time of collection or with your consent.

Legal Bases for Processing

Where required by applicable law, we rely on one or more of the following legal bases:

• Performance of a contract, where processing is necessary to provide the Service;
• Your consent, where you have been asked to provide it;
• Our legitimate interests, where those interests are not overridden by your rights;
• Compliance with legal obligations.

We disclose Personal Data only where it is lawful, necessary, and proportionate to the purposes described in this Privacy Policy.

Service Providers & Partners

We may share Personal Data with third-party service providers and business partners who help us operate, maintain, and improve the Service. These providers process Personal Data on our behalf and only for the purposes we specify, subject to contractual confidentiality and security obligations. Examples include:

• Analytics and measurement providers;
• Attribution and advertising measurement providers;
• Cloud hosting and infrastructure providers;
• Authentication and identity management services;
• App stability and crash reporting services;
• Customer support and communication tools.

Legal & Regulatory Disclosures

We may disclose Personal Data in good faith where necessary to:

• Comply with applicable laws, regulations, legal process, or lawful government requests;
• Enforce our Terms of Service, policies, or agreements;
• Detect, prevent, or address security, fraud, or technical issues;
• Protect the rights, property, or safety of users, ourselves, or others, as required or permitted by law.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, Personal Data may be transferred as part of that transaction. Where required by law, we will take reasonable steps to notify you and ensure appropriate protections are in place.

We and our partners may use cookies, SDKs, and similar technologies to collect data about how you use the Service. These technologies support functionality, usage analysis, and advertising or measurement activities.

Technologies in use may include: functional technologies (required for core features), measurement and analytics tools, and marketing or attribution tools where permitted by law.

You can manage tracking preferences through your device settings. Disabling certain technologies may affect Service functionality.

Security Measures

We implement reasonable technical and organizational safeguards to protect Personal Data from unauthorized access, loss, misuse, or alteration. That said, no transmission or storage method is entirely secure, and we cannot guarantee absolute security.

Retention Periods

We keep Personal Data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and processing purpose. When you delete your account or request erasure, we will delete or anonymize your data unless retention is required by law.

Account Deletion

You can delete your account at any time from the Account page within the Service. Deletion permanently removes your Personal Data, subject to legal retention requirements. Note: account deletion does not automatically cancel active subscriptions on the Apple App Store or Google Play.

The Service is not intended for children under the minimum age required by applicable law (generally 18). We do not knowingly collect Personal Data from children under 18. If you believe a child has provided Personal Data to us, please contact us so we can take appropriate action.

The Service uses third-party SDKs, APIs, and service providers ("Third-Party Services") to help us operate, secure, analyze, and improve the Service, and to provide features such as AI content generation, content safety review, account sign-in, payment verification, crash analytics, attribution measurement, and customer support.

These third-party providers may process necessary personal data on our behalf and in accordance with our instructions. We require them to process data only to the extent necessary to provide the relevant services and to apply reasonable confidentiality, security, and data protection measures.

Categories of Third-Party Services may include:

• AI content generation services;
• AI content safety review services;
• Cloud hosting, compute, and data storage services;
• Account sign-in and identity management services;
• App stability, crash analytics, and diagnostic services;
• Analytics, measurement, and attribution services.

The Third-Party Services currently used by the Service include:

We do not control the independent privacy practices of Third-Party Services. We encourage you to review the privacy policies of the third parties listed above to learn how they handle data. We will update the list of Third-Party Services in line with the Service's actual usage.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and related local data protection laws apply to our processing of your Personal Data.

Legal Bases for Processing

We process Personal Data only where we have a valid legal basis, including:

• Performance of a contract, where processing is necessary to deliver the Service you requested;
• Your consent, where you have been asked to provide it;
• Our legitimate interests, where those interests are not overridden by your rights;
• Compliance with legal obligations.

Your Rights

Subject to applicable law, you have the right to:

• Access your Personal Data;
• Correct or update inaccurate or incomplete data;
• Request erasure of your data;
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time, where processing is consent-based.

To exercise these rights, contact us using the details in the Contact section below. You may also lodge a complaint with your local data protection authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights over your Personal Data.

Categories of Personal Data Collected

We collect the categories of Personal Data described throughout this Privacy Policy for the purposes outlined above.

Your Rights

Subject to applicable law, California residents have the right to:

• Know what Personal Data we collect, use, disclose, and share;
• Request deletion of Personal Data, subject to legal exceptions;
• Request correction of inaccurate Personal Data;
• Opt out of the sale or sharing of Personal Data where applicable;
• Not be discriminated against for exercising these rights.

Do Not Sell or Share

Where required by law, you may opt out of the sale or sharing of Personal Data used for targeted or cross-context behavioral advertising.

Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf, subject to identity verification requirements.

To submit a CCPA/CPRA request, contact us using the information below. We may need to verify your identity before processing your request.

We may revise this Privacy Policy periodically. Where changes materially affect your rights, we will provide notice or obtain consent as required by applicable law. The updated Privacy Policy will be effective as of the date shown at the top of this document.