Privacy Policy

Last Updated: August 19, 2026

ViviSpark ("ViviSpark", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, share, retain, and protect information when you use the ViviSpark mobile application and related services.

ViviSpark provides AI-based creative tools for generating and editing images and videos. We do not send your photos, prompts, face data, videos, or other user-generated content to any third-party AI service. AI processing is performed using models and processing infrastructure operated and controlled by our development team.

1. Information We Collect

1.1 Account, Session, and Device Information

ViviSpark may create an anonymous account or session so that the App can provide generation history, credits, subscription status, and secure access to requested features. We may collect or generate account identifiers, anonymous identifiers, session tokens, refresh tokens, app identifiers, app version, build version, device model, operating system version, locale, time zone, screen size, storage information, network status, and similar technical information.

Some identifiers may be stored securely on your device, including in the iOS Keychain, to keep your session active and to reduce duplicate account creation.

1.2 User Content, Photos, Videos, Prompts, and Task Parameters

ViviSpark allows you to upload or select photos and other media, enter text prompts, choose templates, and provide task parameters so that we can generate the image or video result you request. Uploaded photos, selected images, videos, prompts, and task parameters may include personal information and may contain faces.

User content is used only to provide the requested AI image, AI video, editing, preview, history, and save features. We do not use your uploaded photos, videos, prompts, or generated results to identify you, build biometric profiles, or target advertising based on face data.

1.3 Face Data

When you use AI image, AI video, image-to-image, image-to-video, or face effect features, ViviSpark may process images that contain facial information. We collect and use face data only as follows:

• What we collect: Images you upload or select that may contain your face or the face of other individuals, together with related prompts, selected templates, uploaded image URLs, and task parameters needed to perform the feature you request.
• How we use it: Face data is used only to create the AI result you requested, to show task progress, to deliver the generated result, and to support your related history or save actions. We do not use face data for identity verification, facial recognition, profiling, advertising targeting, or determining a person's identity.
• Disclosure and sharing: We do not sell face data or share it with data brokers. Face-containing images and related task data are processed only on infrastructure we control and on servers operated or controlled by our development team. We do not send uploaded photos, prompts, videos, or face data to any third-party AI service.
• Storage: Face data may be stored temporarily on your device and on infrastructure we control while your requested AI result is being generated, delivered, displayed in history, or made available for download. We do not store face data on third-party AI platforms.
• Retention: Source images, uploaded media, and task inputs that may contain face data are automatically deleted from our active processing systems within 7 days after processing completion. You may request deletion at any time as described in Section 8; we will process deletion requests within 30 days unless a longer period is required for legal, security, or fraud-prevention reasons.

Face data collection, use, disclosure, sharing, storage, and retention are explained in this Section and in Sections 3, 4, 6, 7, and 8 of this Privacy Policy.

1.4 Purchases, Subscriptions, Credits, and Transaction Information

ViviSpark offers subscriptions and consumable credit packages through Apple in-app purchase. We may process product identifiers, purchase status, transaction identifiers, subscription status, expiration information, plan type, credit balance, verification responses, and related server-side records needed to verify purchases, prevent duplicate processing, restore purchases, and provide paid features.

Apple processes your App Store payment information. We do not receive your full payment card number from Apple.

1.5 Feedback and Support Information

If you contact us or submit feedback through the App, we may collect your feedback content, complaint type, app version, user identifier, submission time, and related technical context needed to respond, troubleshoot, and improve the App.

1.6 Analytics, Attribution, Advertising, and Tracking Information

With your permission where required by Apple's AppTrackingTransparency framework, ViviSpark and its attribution or analytics providers may collect or receive advertising identifiers, IDFV, AppsFlyer identifiers, campaign or referrer information, install and conversion data, event names, purchase event details, subscription event details, and limited device or app information. This information helps measure advertising performance, understand subscription and purchase flows, detect fraud, and improve service reliability.

You can choose whether to allow tracking when the iOS permission prompt is displayed, and you can change your choice later in iOS Settings.

1.7 Photo Library Access

ViviSpark requests access to your photo library only when you choose to select photos or save generated images or videos. Photos are not accessed unless you grant permission and select content for use in the App or choose to save generated content.

2. How We Use Information

We use the information described above for the following purposes:

• To provide AI image, AI video, image-to-image, image-to-video, and related creative features you request.
• To upload selected user content to infrastructure we control, create generation tasks, show progress, deliver generated results, and support result previews and history.
• To maintain account sessions, credit balances, subscription status, purchase verification, restore purchase functionality, and user support workflows.
• To provide app configuration, content listings, feature cards, templates, and task history.
• To process feedback, troubleshoot errors, maintain service security, prevent abuse, and improve performance.
• To measure advertising performance and attribution when permitted by applicable law and your iOS settings.
• To comply with legal obligations, enforce our rights, and protect users, the App, and our services.

3. AI Processing and Service Providers

ViviSpark provides AI-based creative features using models and processing infrastructure operated and controlled by our development team. When you choose an AI feature and submit content, your prompts, uploaded images, uploaded videos, technical task parameters, and result-related metadata are processed on our own or controlled servers to generate the result you request.

Other service providers may receive limited non-content information needed to operate the App, such as authentication, storage infrastructure, app configuration, analytics, attribution, crash or diagnostic support, payment processing, media delivery, or fraud prevention. These providers do not receive your uploaded photos, prompts, videos, or face data for AI model inference.

4. How We Share Information

We do not sell your personal information. We do not sell face data. We do not share your content, including photos, videos, images containing faces, prompts, or task parameters, with any third-party AI service.

We may disclose limited information in the following circumstances:

• Service providers: We may use service providers to support authentication, backend hosting, app configuration, secure storage, media delivery, analytics, attribution, purchase verification, payment processing through Apple, feedback processing, and security operations. They may process information only as needed to provide services to us and under applicable contractual or legal obligations.
• Apple and App Store services: Apple processes in-app purchases, subscriptions, refunds, restore purchase requests, App Store account interactions, and related transaction information under Apple's own terms and privacy practices.
• Analytics and attribution providers: Facebook/Meta and AppsFlyer may receive limited event, attribution, advertising identifier, and device information when allowed by your settings and applicable law. They do not receive your uploaded photos, prompts, videos, or face data for AI generation.
• Legal and safety reasons: We may disclose information if required by law, legal process, enforceable government request, fraud prevention, security investigation, or to protect the rights, property, and safety of users, ViviSpark, or others.
• Business transfers: If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate privacy protections.

5. Third-Party Services

ViviSpark may use limited third-party services for authentication, backend infrastructure, app analytics, attribution, advertising measurement, payment processing, and similar non-AI operational needs. These may include Apple services, Supabase-related authentication or backend infrastructure, Facebook/Meta analytics, and AppsFlyer attribution services.

ViviSpark does not use any third-party AI services. No user data, including photos, videos, face data, prompts, task parameters, or other user-generated content, is sent to external AI providers for AI processing. We do not share face data or user-generated images with third-party AI providers.

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Source images, uploaded media, prompts, and task inputs: User-uploaded source photos, videos, prompts, and task inputs are processed temporarily to create requested AI results and are automatically deleted from our active processing systems within 7 days after processing completion.

Face data and media content: Images, videos, and task inputs containing facial information that are processed for AI features are automatically deleted from our active processing systems within 7 days after processing completion. Users may request deletion at any time as described in Section 8; we will process deletion requests within 30 days unless a legal, security, or fraud-prevention exception applies.

Generated results and task history: Generated results, task identifiers, output URLs, credit usage, and task status information may remain available in your history or account so that you can view, save, or manage previous creations. You may request deletion of account-related results as described in Section 8.

Account, purchase, support, and security records: Account identifiers, subscription records, purchase verification records, feedback records, technical logs, fraud-prevention records, and security records may be retained as needed to provide the App, support users, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

7. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include encrypted transport, access controls, token-based authentication, secure device storage for session credentials, and limited access to operational systems.

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information in a manner appropriate to the nature of the data and the risks involved.

8. Your Rights and Deletion Requests

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. You may also request deletion of your user content, generated results, account-related data, or face-containing media processed by ViviSpark.

To request deletion or exercise privacy rights, contact us at the email address in Section 13 and include enough information for us to locate your account or request. We will process deletion requests within 30 days unless a longer period is necessary or permitted for legal, security, fraud-prevention, accounting, dispute-resolution, or technical reasons.

Deleting certain account or task data may affect your ability to access previous creations, credits, purchase history, or subscription-related features.

9. App Tracking Transparency and Advertising Choices

ViviSpark uses Apple's AppTrackingTransparency framework before accessing the advertising identifier (IDFA) or engaging in tracking as defined by Apple. If you grant permission, the App may use the advertising identifier and related attribution information to measure ad performance, understand campaign effectiveness, and support fraud prevention.

If you deny permission or disable tracking in iOS Settings, ViviSpark will not access the IDFA for tracking purposes. You can change your tracking preference at any time in your device settings.

10. Children's Privacy

ViviSpark is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

11. International Processing

Your information may be processed in countries or regions where we or our service providers operate. These locations may have data protection laws different from those in your place of residence. Where required, we use appropriate safeguards for international transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date above. Your continued use of ViviSpark after an updated Privacy Policy becomes effective means you accept the updated policy to the extent permitted by law.

13. Contact Us

If you have questions about this Privacy Policy, AI processing, face data, or deletion requests, please contact us: