Last Updated: 6th November 2025
This Privacy Policy describes how AI UGC Creator ("we", "us", or "our") collects, uses, and protects your information when you use our mobile application. We are committed to protecting your privacy and being transparent about our data practices.
Information We Collect
Personal Information
- Account Information: Email address, password, and authentication data when you create an account
- Profile Information: Name, profile preferences, and subscription tier
- Payment Information: Billing details processed securely through Stripe (we do not store card details)
Usage and Performance Data
- Video Generation History: Records of videos you've generated, including timestamps and success/failure status
- Usage Patterns: Feature usage, app interactions, and performance metrics
- Subscription Data: Current tier, usage limits, and billing history
Device and Technical Information
- Device Information: Device type, operating system version, app version, and screen resolution
- Performance Data: App performance metrics, crash reports, and error logs
- Network Information: Connection type and performance data for service optimization
Content Data
- Text Prompts: The text descriptions you enter for AI video generation
- Reference Images: Images you upload for video generation (temporarily processed and not permanently stored)
- Generated Content: AI-generated videos stored in your account library
- Content Metadata: Video duration, resolution, and generation parameters
How We Use Your Information
Core Service Functionality
- AI Video Generation: Process your text prompts and reference images through our AI video generation service to create videos
- Account Management: Authenticate your account and manage your subscription tier
- Usage Enforcement: Track and enforce daily video generation limits based on your subscription
- Content Storage: Store and serve your generated videos in your personal library
Service Improvement and Analytics
- Performance Analysis: Analyze app usage patterns to improve features and user experience
- Error Resolution: Use crash reports and error logs to fix technical issues
- Feature Development: Understand how features are used to guide product improvements
- Quality Assurance: Monitor service performance and identify areas for optimization
Communication and Support
- Account Notifications: Send important updates about your account, subscription, or service changes
- Customer Support: Respond to your inquiries and provide technical assistance
- Feature Updates: Notify you about new features, improvements, or policy changes
Legal and Security Purposes
- Fraud Prevention: Monitor for suspicious activities and prevent abuse of our service
- Legal Compliance: Comply with applicable laws, regulations, and legal requests
- Security Protection: Protect against unauthorized access, data breaches, and other security threats
Information Sharing and Disclosure
Service Providers and Partners
We may share information with trusted third-party service providers who assist us in operating our service:
- Cloud Infrastructure: Supabase for data hosting, storage, and database management
- Payment Processing: Stripe for secure payment processing and subscription management
- AI Services: OpenAI for AI video generation services
- Analytics: Performance monitoring and usage analytics services
- Communication: Email and notification services for account communications
Legal Requirements
We may disclose your information when required by law or to:
- Protect our legal rights and property
- Prevent fraud, abuse, or security incidents
- Comply with court orders, subpoenas, or legal processes
- Respond to government requests or regulatory inquiries
Business Transfers
In the event of a merger, acquisition, sale of assets, or other business transfer, your information may be transferred as part of the transaction. We will notify you of any such changes and ensure your data continues to be protected.
Data Retention and Deletion
Retention Periods
- Account Data: Retained while your account is active and for 3 years after account deletion for legal compliance
- Generated Content: Stored in your account until you delete it or close your account
- Usage Logs: Retained for 2 years for security, analytics, and compliance purposes
- Payment Data: Retained according to Stripe's retention policies and legal requirements
Account Deletion Process
You can request complete deletion of your account and associated data by:
- Going to Account Settings in the app
- Selecting "Delete Account"
- Confirming your request through email verification
What Gets Deleted:
- Your account profile and authentication data
- Generated videos and content (subject to our Terms of Service regarding content ownership)
- Usage history and preferences
- Any other data associated with your account
What We May Retain:
- Information required by law for tax, legal, or regulatory purposes
- Aggregated or anonymized data used for analytics and service improvement
- Data necessary to protect our legal rights or resolve disputes
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: End-to-end encryption for data in transit and at rest
- Access Controls: Strict authentication and authorization requirements for data access
- Regular Audits: Periodic security assessments and vulnerability testing
- Secure Architecture: Redundant systems and backup procedures
- Employee Training: Privacy and security training for all team members
Despite these measures, no system is completely secure. We encourage you to use strong passwords and keep your account information confidential.
International Data Transfers
Your data may be processed and stored in data centers located outside your country, including in the United States and European Union. We ensure appropriate safeguards are in place to protect your information during international transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions where applicable
- Other legally recognized transfer mechanisms
Your Rights and Choices
Depending on your location and applicable law, you may have the following rights:
Access Rights
- Right to Access: Request a copy of the personal information we hold about you
- Right to Know: Understand how we collect, use, and share your information
Correction Rights
- Right to Rectification: Update inaccurate or incomplete information
- Right to Correction: Amend errors in your personal data
Deletion Rights
- Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Right to Erasure: Have your data removed under certain circumstances
Other Rights
- Right to Portability: Receive your data in a portable, machine-readable format
- Right to Restriction: Limit how we process your information in certain cases
- Right to Object: Object to certain processing activities, including direct marketing
- Right to Withdraw Consent: Withdraw consent for data processing where applicable
How to Exercise Your Rights: Contact us at privacy@byveya.com to exercise any of these rights. We will respond within 30 days and may require verification of your identity.
Cookies and Tracking
Our mobile application may use local storage and similar technologies for:
- Session Management: Maintaining your login session
- Preferences: Remembering your app settings and preferences
- Performance: Optimizing app performance and user experience
We do not use third-party cookies or tracking pixels in our mobile application.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it immediately and take steps to prevent future collection.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Third-Party Services
Our Service integrates with third-party services that have their own privacy practices:
- AI Services: OpenAI for AI video generation services
- Supabase: Database and storage services - subject to Supabase's privacy policy
- Stripe: Payment processing - subject to Stripe's privacy policy
Your use of these third-party services is subject to their respective privacy policies and terms of service.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy in the app with a clear change indicator
- Sending an email notification to your registered email address
- Providing in-app notifications when you next use the app
Your continued use of the app after changes become effective constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@byveya.com
- Address: Byveya Ltd, [Business Address], United Kingdom
- Data Protection Officer: privacy@byveya.com
Compliance Information
This privacy policy complies with:
- GDPR (General Data Protection Regulation) for EU residents
- CCPA (California Consumer Privacy Act) for California residents
- UK Data Protection Act 2018 for UK residents
- Other applicable privacy regulations
For GDPR compliance, Byveya Ltd is the data controller for your personal information.
By using AI UGC Creator, you acknowledge that you have read, understood, and agree to the collection and use of information as described in this Privacy Policy.