Privacy Policy

1. Privacy at a glance

2. Information we process

• Accounts and identifiers. The iOS app can create an anonymous account. We process its user ID, session token and a persistent device identifier derived from the identifier for vendor (IDFV) or a generated identifier. When you choose Apple or Google sign-in, we receive authentication information and account details made available by that provider, such as your user ID, email address and display name. These identify your account, credit balance and processing tasks.
• Videos and processing tasks. We receive videos you choose to submit, including any audio contained in them, and technical information such as duration, dimensions, format and file size. We process your enhancement settings, task identifiers, status, generated outputs and feedback. Task records and media are associated with your account or anonymous session so that you can access your results.
• Purchases. We process product IDs, transaction or receipt information, purchase status and credit history to verify payments and provide credits. The payment provider handles payment credentials. We do not receive your full card number or Apple Account password.
• Notifications. If notifications are enabled, we process an app installation identifier and push token to deliver service notifications, such as task updates, through Apple Push Notification service and Firebase Cloud Messaging.
• Technical information. Service requests include information such as IP address, request time, platform, app version and language. We process upload outcomes, file paths or names included in upload diagnostics, sizes, processing times and error information to operate and troubleshoot the Service. Service providers may also process limited device and SDK diagnostics.
• Support. If you contact us, we receive your email address and the information you choose to send. Please avoid sending unnecessary sensitive information.

3. How we use information

We use this information to authenticate users, maintain accounts and anonymous sessions, process and deliver enhanced videos, manage credits, verify purchases, send service notifications, respond to support requests, diagnose problems, protect against fraud and misuse, and meet applicable obligations. We do not use app user IDs or device IDs for other purposes, including advertising, advertising attribution, or matching users with data from other companies.

4. Video processing and permissions

Enhancement is a cloud service, not solely on-device editing. Selecting a video lets you prepare it locally; submitting an enhancement task uploads the selected video, or the preview segment when you request a preview, to our processing and storage infrastructure. Only submit content you have the right to upload and process.

We enhance video quality without performing face analysis, facial recognition or creating biometric identity profiles. We do not use uploaded videos or enhanced outputs to train AI models.

The iOS app uses system media selection and photo-library permissions for selecting and saving videos. It does not need access to your contacts, microphone or precise location for video enhancement. You can manage Photos and notification permissions in iOS Settings. Denying a permission may prevent the associated function, such as saving a result or receiving a task notification.

5. Service providers and sharing

We share information needed to provide the Service with the following categories of providers:

• Authentication and notifications: Apple and Google, including Firebase Authentication and Firebase Cloud Messaging, process sign-in information, authentication identifiers and delivery tokens for their respective functions.
• Cloud processing, storage and delivery: Our hosting and video-processing providers, including Volcengine for video enhancement, process submitted videos, outputs and task information to fulfil your requests.
• Payments: Apple processes iOS in-app purchases. A payment provider identified at checkout processes any website purchase. We receive the transaction information needed to verify the purchase and credit your account.
• Website measurement: Google Analytics for Firebase and Baidu Analytics process website usage information as described below. These website integrations are separate from the native iOS app.

We do not sell personal information, share app data with data brokers, or link app data with third-party data for targeted advertising or advertising measurement. We may disclose information where required by law or necessary to protect users and the Service. If our business is transferred or reorganized, information may transfer as part of that transaction, subject to applicable privacy obligations.

6. Website cookies and analytics

Interactive website pages use authentication cookies and browser storage to maintain sign-in. A login cookie is configured for up to 30 days and can be cleared on logout or earlier when invalid. A referral cookie can retain a campaign or referral source for up to 30 days. Google and Baidu analytics on those website pages measure visits, page interactions, browser and device characteristics, and technical performance; their technologies may use cookies or browser identifiers.

The Privacy Policy and Terms of Service pages do not load our website authentication, referral tracking or analytics integrations. Reading these pages from the iOS app does not start those integrations. Ordinary hosting requests still process network information needed to deliver the pages.

You can remove or restrict cookies through your browser settings; this may affect website sign-in. The native iOS app does not include Firebase Analytics or advertising attribution SDKs. Website analytics data is not combined with native app user or device identifiers for advertising.

7. Retention and deletion

Uploaded originals and enhanced video outputs are automatically cleaned up after 24 hours. Download results promptly and keep your own originals. Vhotopia is not a long-term media storage service. Deleting server media does not remove copies you have saved to your own device.

Account, credit, purchase and task records are separate from video files. We retain these records as needed to provide your account and transaction history, resolve support or payment issues, prevent abuse and meet applicable recordkeeping requirements. Technical logs and support records are retained only as needed for their operational purposes and applicable obligations.

You can initiate account deletion from the account or settings area of the Service. This revokes account access and removes the associated authentication account. Contact vhoto.ai@gmail.com to request access to or deletion of remaining personal information, including information associated with an anonymous account. We may need to verify ownership; certain transaction, security or legally required records may need to be retained. Uninstalling the app alone does not delete your server account.

8. Security and international processing

We use safeguards such as encrypted network connections, authentication and access controls to protect information. No storage or transmission method is completely secure. Our company is based in China, and cloud and service providers may process information in other countries. Where applicable, we use the safeguards required for international transfers and require providers to protect information processed on our behalf.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your information; restrict or object to processing; withdraw consent where processing relies on consent; and complain to a data protection authority. We will handle requests in accordance with applicable law and may verify your identity before acting. You may contact us without receiving discriminatory treatment for exercising your rights.

Where applicable law requires a legal basis, we process information to perform the service you request, meet legal obligations, pursue legitimate interests such as service security and support, or with consent when required. Withdrawing consent does not affect prior lawful processing. You may stop submitting videos, manage device permissions, clear browser storage or request account deletion.

10. Children

The Service is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below that age. If you believe a child has provided information, contact us so that we can investigate and take appropriate action.

11. Changes and contact

We may update this policy as the Service changes. We will update the effective date and provide additional notice or request consent when required for material changes. Changes do not remove your rights under applicable law.

For privacy questions or requests, contact vhoto.ai@gmail.com with "Vhotopia Privacy" in the subject line, or write to Xiamen Youyou Information Technology Co., Ltd., Room C201, No. 396, Jiahe Road, Huli District, Xiamen, Fujian, China.