Privacy
Policy

Welcome to Reelora AI. This Privacy Policy is written to give you a transparent, plain-language account of how we — Reelora AI ("we", "us", "our") — handle personal information when you use the Reelora AI mobile application (the "App") and the accompanying services we provide (the "Service").

Throughout this document, "Personal Data" refers to any information that identifies you or can reasonably be connected to you as an individual, interpreted in accordance with the data protection laws that apply in your location.

This Policy is part of a broader set of rules that govern your use of Reelora AI — our Terms of Service apply alongside it. If you have concerns about anything described here, we encourage you to get in touch or to stop using the Service until those concerns are resolved.

Reelora AI receives information about you through three main channels: what you actively submit while using the App; signals your device and usage patterns generate automatically; and data passed to us by trusted third-party providers who help power the Service. The scope of what we collect is tied directly to which features you engage with — not every category described in this Policy applies to every user.

The following types of information are collected when you voluntarily provide them:

• Media uploads. Any photos or videos you submit are processed exclusively to carry out the specific creative task you initiated. They serve no other purpose on our end.
• Gender preference for creative features. Certain AI creation tools allow you to indicate a gender option (Female, Male, or Other) to influence stylistic outputs. This selection is used only for that generation and has no bearing on your profile or identity.
• Account registration details. When you sign up, we collect your email address and assign an internal user identifier to manage your account.
• Transaction metadata. When an in-app purchase is made, the platform (Apple App Store or Google Play) may pass us limited details such as your subscription tier, payment confirmation status, transaction reference, and associated verification URLs. Your full payment credentials are never transmitted to us.
• Support correspondence. If you contact our support team, we receive your name, email, and the content of your inquiry in order to respond appropriately.
• Other voluntary submissions. Any additional information you choose to share with us while interacting with the Service.

How We Handle Visual Content

When you upload images, video clips, or other visual media to Reelora AI — including content that contains people or faces — that material is processed to generate the AI-powered creative result you requested. This processing may involve automated analysis of visual elements such as subject positioning, composition, or the presence of faces, all carried out solely to fulfill your request (for example: photo animation, style transfers, frame generation, or template-based transformations).

Any facial information encountered during this process is not used to identify you, authenticate your identity, enable surveillance, fuel advertising targeting, or build any biometric record of any kind.

Faces in Uploaded Content

Reelora AI is an AI-powered creative tool. When images containing people are uploaded, our systems may perform limited technical operations — such as determining whether a face or human figure is present — in order to produce coherent, high-quality results across frames or sequences.

This analysis is purely functional: it exists to help animate a still photo, maintain visual consistency across a generated video, or apply template effects accurately. It plays no role in identity recognition, authentication, behavioral tracking, advertising, biometric profiling, or surveillance of any kind.

We do not retain face templates, facial geometry data, biometric identifiers, or any comparable persistent record from which an individual could later be recognized.

AI Partners & Data Handling

Providing AI-powered creation features, running content safety checks, and maintaining service quality requires us to route relevant data — including your uploaded images, videos, text prompts, generation parameters, template selections, and supporting technical metadata — to our own infrastructure and to contracted third-party AI providers.

Our current AI service partners include:

• OpenAI — content safety screening and text/image AI processing;
• Alibaba Cloud Model Studio — AI video, image, and related generative processing;
• Google Gemini / Google AI — large language model processing;
• xAI / Grok — large language model processing.

Each of these providers receives only the data needed to complete the specific task at hand — nothing beyond that. We do not permit them to use your uploaded images, videos, facial information, or derived analysis for identity recognition, identity verification, surveillance, behavioral tracking, advertising targeting, facial recognition database construction, or biometric profiling.

For details on how each provider independently handles faces, biometric data, model training, data retention, and security, please refer to their official documentation:

• OpenAI:
  • "Respect privacy" — Usage Policies;
  • "Our commitments" and "Model training FAQ" — Enterprise Privacy at OpenAI.
  • https://openai.com/policies/usage-policies/
  • https://openai.com/enterprise-privacy/
• Alibaba Cloud Model Studio:
  • "Privacy protection" — Security Certifications and Privacy.
  • https://www.alibabacloud.com/help/en/model-studio/privacy-notice
• Google Gemini / Google AI:
  • Section 1 "Do not engage in dangerous or illegal activities" — Generative AI Prohibited Use Policy;
  • "How We Handle Data" — Gemini API Abuse Monitoring.
  • https://policies.google.com/terms/generative-ai/use-policy
  • https://ai.google.dev/gemini-api/docs/usage-policies
• xAI / Grok:
  • "2. Personal information we collect" and "3. How we may use personal information" — Privacy Policy.
  • https://x.ai/legal/privacy-policy

Regardless of which AI partner is involved in any given task, your uploaded images, videos, facial information, and any derived data are never sold, rented, or transferred for commercial exploitation. We do not use them to train Reelora AI's own machine learning models unless you have given your explicit, informed consent to that specific use.

Retention of Visual Data

Uploaded images, video files, prompts, generation parameters, outputs, and associated task data are held only for as long as is necessary to deliver the Service to you. Facial analysis data, biometric templates, and facial geometry records are not stored — any facial information processed during a generation request is discarded once that task completes.

Generated results and task history may be retained for a reasonable period to support features like viewing your creation history, assisting with content moderation, resolving technical issues, handling user requests, and fulfilling legal obligations. You may contact us at any time to request deletion of your data.

What We Categorically Do Not Do

To be unambiguous: Reelora AI does not sell or rent your uploaded visual content, facial data, or any derived information to third parties. We do not apply this data to identity verification, authentication, surveillance, behavioral tracking, or advertising targeting. We do not use your uploads to construct biometric profiles. We do not feed your visual content or facial information into our own AI training pipelines without your explicit, prior consent.

Content Moderation & Safety

Reelora AI employs automated screening systems to prevent the generation or display of content that violates our Terms of Service — including sexually explicit material, violence, or other harmful content. A visible Report function is available on every template and output page so you can flag anything that concerns you.

When our safety systems flag a generation request or output, the App may display an in-app notice, halt or withhold the result, and where applicable return any credits consumed by that request.

In addition to what you actively provide, Reelora AI automatically collects certain information as you use the App. This collection is always subject to any consent requirements applicable in your jurisdiction.

Device & Interaction Data

• Technical attributes of your device, including IP address, device identifier, operating system version, system language, and connection type;
• Interaction patterns within the App — which features you access, frequency of use, and session timing;
• Your App version and the regional storefront associated with your device.

Purchase & Subscription Records

• Subscription status and limited transaction metadata (such as tier and payment status) — your complete financial details are never accessible to us.

All billing and payment processing is conducted by Apple App Store or Google Play. We receive only what those platforms choose to forward; your full financial information does not reach Reelora AI.

Advertising & Attribution Identifiers

• Device-level advertising identifiers — including Apple's IDFA or IDFV, or Google's Advertising ID (GAID) — collected only where your device settings and applicable regulations permit.

Ad tracking can be disabled through your device's settings at any time:

• iOS: Settings → Privacy & Security → Tracking
• Android: Settings → Privacy → Ads (or Google Settings → Ads → Delete advertising ID)

Opting out may still allow us to receive limited, aggregated, non-identifying attribution signals in some cases.

Diagnostics & Performance Data

• Event timestamps, crash reports, error traces, and performance metrics used to maintain stability, diagnose issues, and improve the Service over time.

Device Permissions

Some features rely on device-level permissions to function. The App may request access to:

• Your photo library or media storage, to let you select content for upload;
• Your device camera, for capturing photos or videos within the App;
• Push notifications, for service updates or subscription-related alerts;
• Ad tracking (e.g., IDFA on iOS or Advertising ID on Android), requested with your consent and used solely for attribution and measurement purposes.

All permissions can be changed or revoked at any time through your device settings. Disabling certain permissions may limit specific features within the App.

Your Personal Data is used for a defined set of operational purposes: delivering and maintaining the Service and its features; executing your AI content generation requests; responding to support inquiries; monitoring and improving App performance; detecting and preventing fraud, abuse, and misuse; complying with our legal obligations; enforcing our Terms of Service; and any other uses we disclose to you at the time of collection or for which we obtain your consent.

Where applicable law requires us to establish a legal basis for processing, we rely on one or more of: the performance of our contract with you to deliver the Service; your consent, where specifically sought; our legitimate interests in operating and improving Reelora AI, balanced against your rights and freedoms; or a legal obligation we are required to meet.

We share Personal Data only when there is a lawful, necessary, and proportionate reason to do so — always within the scope of the purposes described in this Policy.

Service Providers

Operating Reelora AI requires us to engage specialist third-party companies. These vendors receive only the data required to perform their specific function on our behalf, and each is contractually bound to uphold appropriate confidentiality and data security standards. The categories of service they cover include:

• App analytics and user behavior measurement;
• Advertising attribution and campaign performance tracking;
• Cloud infrastructure, hosting, and storage;
• Sign-in and user identity management;
• Crash reporting and App performance diagnostics;
• Customer support and user communications.

Legal Requirements

We may disclose Personal Data without prior notice when required or permitted in good faith by law, including in order to:

• Comply with applicable legislation, regulation, legal process, or lawful government requests;
• Enforce or defend our Terms of Service, policies, and contractual rights;
• Investigate or address security incidents, fraud, or technical vulnerabilities;
• Protect the rights, property, or safety of our users, our organization, or the public, as permitted by law.

Business Transfers

In the event that Reelora AI undergoes a merger, acquisition, asset transfer, restructuring, or insolvency proceeding, Personal Data may be included among the assets involved. Where required by applicable law, we will take reasonable steps to provide notice and ensure continued protection of your data under any such transaction.

Reelora AI and certain of our partners use cookies, mobile SDKs, and similar tracking technologies to understand how the App is used and to support performance measurement and marketing activities. These technologies broadly fall into three groups: those required for core App functionality; those that analyze usage and performance; and those used for marketing or attribution purposes — applied only where permitted by law and your consent.

Your device settings give you meaningful control over your tracking preferences. Disabling certain technologies may affect the functionality of some App features.

Protecting Your Data

Reelora AI implements reasonable technical and organizational safeguards to protect Personal Data from unauthorized access, loss, misuse, alteration, or destruction. That said, no data transmission or storage system can be guaranteed to be completely secure, and we are unable to make absolute warranties regarding the security of your information.

How Long We Keep Data

Personal Data is retained only for as long as is genuinely necessary — to provide the Service, comply with applicable legal obligations, resolve disputes, and uphold our agreements. The specific retention period for any category of data depends on what it is and the purpose for which it was collected. Upon account deletion or a verified erasure request, we will delete or de-identify your Personal Data unless legal obligations require otherwise.

Account Deletion

You may permanently delete your Reelora AI account at any time from the Account settings within the App. Doing so triggers deletion of your associated Personal Data, subject to any legally required retention periods. Please note that deleting your account does not automatically cancel any active subscriptions managed through Apple App Store or Google Play — those must be cancelled separately through the respective platform.

Reelora AI is intended solely for adult users and is not directed at or designed for anyone under the age of 18 (or the higher minimum age established by the laws of your jurisdiction). We do not knowingly solicit or collect Personal Data from minors.

If you are a parent or guardian and believe that your child has inadvertently submitted personal information to us, please contact us promptly — we will investigate and take appropriate steps to delete the information as quickly as possible.

In addition to protecting children's personal data, Reelora AI has zero tolerance for the creation, processing, or distribution of any content that exploits or endangers minors. Our AI content partners are required to maintain safety filters for this purpose, and any suspected incidents of child exploitation may be reported to relevant authorities and child safety organizations including NCMEC and INHOPE. Detailed information about our child safety stance — including prohibited conduct, built-in protections, and reporting resources — is set out in our Terms of Service.

Delivering a capable AI creative application requires us to integrate a range of external SDKs, APIs, and specialist service providers (collectively, "Third-Party Partners"). These partners enable capabilities such as AI content generation, content safety screening, user authentication, payment verification, crash diagnostics, attribution measurement, and customer support.

Every partner is authorized to handle personal data only to the extent required to fulfill their designated function, and each is required to maintain appropriate confidentiality, security, and data protection standards consistent with this Policy.

The functional categories served by our current partners include:

• AI-driven content generation and processing;
• AI content safety and moderation screening;
• Cloud computing, hosting, and data storage;
• User authentication and identity management;
• App stability monitoring, crash reporting, and diagnostics;
• Usage analytics, performance measurement, and advertising attribution.

The services currently integrated into Reelora AI are as follows:

Each of these organizations operates under its own privacy practices, which are independent of Reelora AI's control. We encourage you to review their policies directly. This list will be updated as our third-party integrations evolve.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national data protection legislation govern how we process your Personal Data. These rules afford you a meaningful set of rights and protections.

Legal Bases for Processing

Every processing activity we carry out rests on at least one valid legal ground under the GDPR. The grounds we rely on, depending on the activity, include:

• Contractual performance — processing necessary to deliver the Service you have signed up for;
• Consent — where we have specifically requested and received your agreement;
• Legitimate interests — our reasonable business and operational interests, assessed against and balanced with your rights;
• Compliance with a legal obligation applicable to Reelora AI.

Your Rights Under GDPR

Depending on your circumstances and the applicable law, you may be entitled to:

• Request access to the Personal Data we hold about you;
• Require correction of data that is inaccurate or incomplete;
• Request erasure of your Personal Data;
• Restrict or object to certain processing activities;
• Receive your data in a structured, commonly used, machine-readable format (data portability);
• Withdraw any consent you have previously given, at any time and without affecting processing that took place prior to withdrawal.

To exercise any of these rights, please reach out using the contact information provided at the end of this Policy. If you are dissatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country.

If you reside in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights with respect to how your Personal Data is collected, used, and shared.

Categories of Data We Collect

The categories of Personal Data we collect from California residents are those described throughout this Privacy Policy, processed for the same purposes outlined herein.

Your Rights as a California Resident

California law provides you with the right to:

• Know which categories of Personal Data we collect about you, and how that data is used, disclosed, and shared;
• Request deletion of Personal Data we have collected, subject to applicable legal exceptions;
• Request correction of inaccurate Personal Data;
• Opt out of any sale or sharing of your Personal Data for cross-context behavioral advertising, where applicable;
• Exercise all of the above rights free from discrimination or retaliation.

Opting Out of Data Sale or Sharing

To the extent required by California law, you may instruct us not to sell or share your Personal Data for targeted or cross-context behavioral advertising purposes.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require verification of both your identity and the agent's authority before processing any such request.

To make any CCPA or CPRA request, please contact us using the details provided in the final section of this Policy.

This Privacy Policy is a living document. We will update it as our practices evolve, as legal requirements change, or as the Service develops. For revisions that materially affect your rights or how we handle your data, we will provide appropriate notice or seek your consent as required by law. The revised Policy becomes effective on the date shown at the top of this page — we recommend checking back periodically to stay informed.

Questions about this Policy, or looking to exercise a privacy right? We're here to help.