Privacy Policy

• Account data: your email address, and (if you sign in with Google) basic Google profile info such as your name and email.
• Content you provide: the photos and videos you upload or import, the text prompts you enter, and the swapped videos and AI avatars you generate.
• Usage & account records: your generation history (status and timestamps), credit balance, and credit transactions.
• Payment data: if you buy credits, payments are handled by a third-party payment processor. We do not store your full card details; we receive only limited transaction information.
• Technical & analytics data: log data such as IP address, device/browser type, and pages visited, and privacy-friendly, aggregated analytics about how the site is used.

We use your information to:

• provide the Service — sign you in, run face swaps, store and show your results, and manage credits;
• keep the Service secure, prevent abuse, and enforce our Terms;
• process payments and provide support;
• understand and improve the Service using aggregated analytics;
• comply with legal obligations and respond to lawful requests.

Where the GDPR or UK GDPR applies, we process your data on these bases: performance of our contract with you (to provide the Service), our legitimate interests (to secure and improve the Service and prevent abuse), your consent where required, and compliance with legal obligations.

We share data with trusted providers only as needed to run the Service. We do not sell your personal data or your media. Our key providers are:

• Supabase — authentication, database, and storage of your account, history, and result videos.
• fal.ai — AI processing of your images and videos to generate swaps and avatars.
• Apify — fetching a video when you import one from a TikTok or Instagram link.
• Vercel — website hosting, content delivery, and privacy-friendly analytics.
• Google — optional "Sign in with Google" authentication.
• Payment processor — to handle purchases (when paid plans are available).

We use strictly necessary cookies to keep you signed in and to operate the Service. We use privacy-friendly, aggregated analytics to understand traffic and performance; these do not use your media or sell your data. You can control cookies through your browser settings.

We keep your account data while your account is active. Your generated result videos and their history records are automatically deleted after 90 days, and you can delete results sooner from your account. Limited records we are required to keep (for example, transaction or audit logs) may be retained as long as the law requires.

Depending on where you live (including under the GDPR/UK GDPR and the CCPA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights — including deleting your account and associated content — email us at iammuneebrafi@gmail.com and we will respond within the time the law requires. We will not discriminate against you for exercising your rights.

The Service is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

We and our providers may process and store your data in countries other than your own, including where data-protection laws differ. Where required, we rely on appropriate safeguards for such transfers.

We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), row-level access controls on our database, time-limited signed links for your private videos, and restricted server-side access to secrets. No system is perfectly secure, but we work to protect your information and to limit what we collect.

We may update this policy; material changes will be reflected by the "Last updated" date. For any privacy request or question, email us at iammuneebrafi@gmail.com.