Danceify Privacy Policy

1. Information we process

• Photos and videos. The photo you select or capture, the resulting video, and the visible appearance of people in that media.
• Generation instructions. Your prompt, dance style, generation settings, task identifiers, processing status and timestamps.
• Account and consent records. A Firebase user identifier, the permissions you confirm, the applicable policy version, usage allowances and account restrictions.
• Purchases. Product and transaction identifiers, receipts or verification records, subscription status, credit balances and purchase-related device information.
• App activity. Firebase Analytics events such as screens viewed, styles selected, generation success or failure, purchases and export actions, linked to an app-instance identifier and your Firebase user identifier.
• Notifications. If you enable notifications, a device messaging token, language, time-zone information, notification preferences and recent app-open information used to manage reminders.
• Support and safety reports. Messages you send, any contact details or attachments you provide, the relevant creation identifier, report reason and review actions.

Danceify uses Firebase Anonymous Authentication, so standard use does not require a name, email address or password. The assigned identifier still links your activity, purchases and creations; it does not make this information fully anonymous. Service providers may also process IP addresses and technical connection information when delivering their services.

The app remembers recently selected photo paths and preferences on your device. Selecting a photo makes it available to the app; submitting a generation request sends it for the processing described below. Camera access requires device permission. Choosing a photo through the system picker gives the app access to that selected item without requiring access to your entire library.

Permissions and why we ask

• Camera: requested when you choose Camera, to take the source photo. You can use Gallery instead.
• Selected photo: the system picker lets you choose the specific image to animate; the app does not require full-library access to make that selection.
• Add to Photos: requested when needed to save a generated video to your device. You can view the result without saving it.
• Notifications: requested when you choose a notification-related action, such as continuing generation in the background or enabling reminders, or during the post-purchase welcome flow. Used for video-ready alerts. Reminders are enabled by default after notification permission is granted and can include return-to-app reminders and new-style announcements. Turn reminders off in Profile while keeping video-ready alerts, or disable all notifications in device settings.
• AI processing: an in-app confirmation, separate from device permissions, before your selected media and instructions are sent to the named AI services. It can be withdrawn in Profile.

Denying camera access leaves Gallery available. Canceling the photo picker does not select a new image. Denying Add to Photos prevents saving there but does not block playback. Denying notifications prevents alerts, not video generation. Without AI-processing permission, no new generation is submitted. Purchasing credits or a subscription does not grant any of these permissions.

Sharing opens your device's share sheet with a prepared video file. It does not grant another app access to your Danceify account or entire photo library. The app does not request location, contacts or microphone access. Firebase Analytics is not an operating-system permission; it processes the app activity described above separately from AI permission. In the current version, there is no separate in-app analytics preference. Contact us about an analytics-related privacy request.

The current app bundles its display fonts and does not download them from Google at runtime. Earlier versions could request font files from Google's servers, exposing connection information such as an IP address. The Ghaith Labs website also serves its font files locally from the website.

2. Photos containing faces

We process the visible face and appearance in your submitted photo to generate a dance video and preserve the depicted person's likeness. Photos and generated videos also undergo automated safety checks for prohibited content, including exploitation and sexualization of minors. These checks do not verify a person's age, identity or permission.

The app does not create or store a separate faceprint, facial mesh, landmark record or biometric identification template, and does not use facial recognition to authenticate you. Local photo-quality checks assess brightness, dimensions and orientation. These statements describe Danceify's own implementation; AI providers also process the media to perform their services.

We do not sell your photos or videos or use them for advertising. We do not include your uploaded media or custom prompt text in app analytics events. Submit only photos you have the right to use and permission to animate from every identifiable person shown.

3. AI processing and your permission

When you first choose Create, the app asks whether you allow the named services to process your selected photos and instructions for safety checks and video generation. Permission is saved for your account and the current policy version; it is not requested again for every video. Declining lets you browse without submitting a photo. Closing the request does not grant permission. If you later choose Create, the app asks again. You can grant permission then. Camera or photo-picker permission is separate from permission to send media for AI processing.

• Google Cloud Vertex AI receives the submitted photo and instructions for safety review, and the generated video, including its audio where present, for output review.
• Kie.ai receives approved source media through a temporary access link, together with the prompt, generation settings and task identifier. Danceify uses its grok-imagine/image-to-video integration. Kie.ai describes this as xAI's Grok Imagine model and may involve its model provider in processing. The app calls Kie.ai through our backend, rather than calling xAI directly.
• Google Firebase stores the uploaded photo, generated media and related account and job records used to deliver the result.

You can withdraw AI-processing permission in Profile. This blocks new processing and prevents an in-flight result from being released under the withdrawn permission. It does not reverse processing already performed or delete stored files. You can still access approved creations you own, delete them, or delete your account. Renewed permission is required before you can submit another request.

Deleting content in Danceify does not send a deletion request to Kie.ai or its model provider. Those providers have separate retention and deletion arrangements. Email us if you need help requesting deletion of copies held by a provider.

4. How we use information

We use this information to generate and deliver videos, maintain your library, verify purchases, manage allowances and credits, restore eligible purchases, provide notifications you enable, investigate reports, enforce restrictions and respond to support requests. App activity helps us understand reliability and how features are used.

For purchases, Apple handles payment and RevenueCat supplies purchase-verification and subscription information. We associate product and transaction identifiers and the credited amount with your Firebase account to record purchases, calculate your balance and prevent the same transaction from being credited more than once. Generation records identify whether a request used free allowance, trial or subscription allowance, or a purchased credit, and whether that use was restored after a failure. Photos and generation instructions are not needed for purchase verification and are not sent to Apple or RevenueCat for that purpose.

We also use limited records to prevent duplicate purchase credits, investigate abuse and meet legal obligations. We do not use your photos or videos for cross-app advertising or sell personal information. Where processing requires consent under applicable law, you may withdraw that consent. Other processing may remain necessary to provide a requested service, maintain security or meet a legal obligation.

5. Service providers and other disclosures

Google Firebase provides authentication, hosting infrastructure, databases, media storage, analytics and messaging. Google Cloud Vertex AI performs the safety review described above. Kie.ai provides video generation. RevenueCat processes purchase and entitlement information; Apple handles App Store purchases and billing. Danceify does not receive your full payment-card details.

We may disclose information when legally required, to investigate fraud or abuse, or to protect people's rights and safety. If the service changes ownership, any transfer of personal information must remain subject to applicable law and notice requirements.

Provider information is available in the Firebase privacy information, Google Cloud Data Processing Addendum, Kie.ai Privacy Policy, Kie.ai Terms of Use, RevenueCat Privacy Policy and Apple Privacy Policy. These documents describe the providers' practices; they do not replace our responsibility for the information we collect and send on your behalf.

We do not use submitted photos, videos or prompts to train a Danceify AI model. Provider processing is governed by the applicable service terms. We do not promise that every provider retains no data or applies the same training and retention rules.

We do not currently display your creation in a public feed. Downloading or sharing a file sends a copy to your device or a destination you choose. Those destinations have their own data practices.

6. Media access and retention

Uploaded photos and generated videos are stored privately. After checking ownership and safety approval, the service issues a read link that expires after five minutes. Kie.ai receives a source-photo link valid for up to 30 minutes. Anyone who obtains a signed link can use it until expiry; it is not restricted to the device that requested it. Files or copies already downloaded, shared or cached cannot be recalled by withdrawing permission.

Public access to media uploaded through earlier versions has been disabled. An older creation that has not passed the current safety review may be unavailable in the app. Copies previously downloaded, shared or cached cannot be recalled.

• Source photos and approved videos remain in Danceify's active storage until the creation or account is deleted or a deletion request is completed. We do not currently apply a fixed automatic expiry to approved media.
• Photos from failed requests can remain in storage if the request failed after upload. Delete your account or contact us to request their removal.
• Temporary output-review files are removed by the processing cleanup flow. Failed cleanup can require a retry; deletion is not represented as instantaneous.
• Account and generation records support your library, allowances and processing history. Minimal deletion or restriction records may remain to prevent delayed jobs from restoring removed content or bypassing restrictions.
• Purchase, support, analytics and safety records follow separate retention needs, including purchase verification, report handling, security, legal requirements and provider settings. They are not all erased by deleting one video.

The five-minute access-link expiry does not delete a stored file. Retention by Kie.ai and its model provider is separate from storage in Danceify; the same deletion schedule does not necessarily apply to each service.

7. Deleting a creation or account

Deleting a creation removes it from your library and deletes its stored source photo and video. A small record of the deletion prevents a delayed result from restoring it. If a file operation fails, deletion may need to be retried. Contact us if you need help removing an older upload.

Use Delete Account in Profile to remove the Firebase authentication account, creation history, generation records, in-app feedback and media held in Danceify's active Firebase systems. Limited security status, safety-report records and purchase records may remain for the purposes described above. Account deletion does not automatically erase historical Analytics events or records held by external providers. Contact us if your request includes those records.

Account deletion also removes the unused credit balance. The purchase-credit ledger retains the transaction identifier, product, credited amount and timestamp to prevent duplicate grants; the account identifier is removed from that ledger during deletion. A transaction record can still be linked to information held elsewhere, so we do not describe the retained ledger as fully anonymous. Withdrawing AI permission alone does not delete this balance, reverse payment or cancel billing.

In-app feedback is associated with your account so we can investigate the issue. It is removed by account deletion. Email correspondence is separate and may be retained as needed to resolve the request, document our response or meet a legal obligation. Do not include passwords, payment-card details or unnecessary sensitive information in feedback or email.

You may also email dydemiryasir@gmail.com. We may ask for an account or creation identifier, or other proportionate information, to verify the request. Uninstalling Danceify does not delete server data. Account deletion does not cancel an App Store subscription; manage that separately through your Apple account.

8. Your choices and rights

You choose which photo to submit and whether to enable notifications. You can change notification permission in device settings and reminder preferences in the app. Withdrawing AI permission does not automatically disable analytics or cancel a purchase.

Depending on applicable law, you may request access, correction, deletion, portability, restriction of processing or withdrawal of consent, or object to certain processing. You may also complain to your data-protection authority. Contact us to exercise these rights; we will explain any verification needed and any lawful reason that prevents us from fulfilling part of a request.

9. Processing locations and security

Our providers may process information outside your country, including in the United States. Processing locations and safeguards depend on the services and agreements involved. Contact us for information relevant to your data or an international-transfer request.

We use encrypted network connections, backend-held generation credentials and access checks. Security also depends on configuration, provider systems and how you handle downloaded files and links. See our Security Practices for the controls and their limits. No system provides an absolute security guarantee.

10. Children

Danceify is not directed to children under 13. Users must meet the applicable minimum age, and minors need permission from a parent or guardian. Images of minors require appropriate permission from their parent or guardian and must never be exploitative or sexualized. If you believe we have collected data from an ineligible child or processed an image without permission, contact us so we can investigate and address the data.

11. Privacy and image-rights concerns

If someone has used your image without permission, you do not need a Danceify account to contact us. Email dydemiryasir@gmail.com with a description and a creation identifier or link, if available. Do not send illegal imagery or unnecessary identity documents. Report an inappropriate result also lets the creator flag a result and hide it pending review.

12. Changes to this policy

We update this policy when our data practices change. The date above identifies this revision. Where required, we will provide additional notice or ask for renewed permission before a new use of your information. Reading this policy is not a substitute for the explicit AI-processing permission requested in the app.

13. Türkiye: kişisel verilerin işlenmesine ilişkin aydınlatma

Veri sorumlusu: Danceify'ı Ghaith Labs markası altında işleten Ahmet Yasir Demir. İletişim: dydemiryasir@gmail.com. Bu bölüm, Danceify uygulamasındaki veri işleme faaliyetleri hakkında 6698 sayılı Kanun'un 10. maddesi kapsamında bilgi verir. Bir açık rıza beyanı değildir; bu metni okumak veya uygulamayı kullanmak tek başına açık rıza verilmesi anlamına gelmez.

Toplama yöntemi: Seçtiğiniz fotoğraf, oluşturma talimatları ve uygulama içi geri bildirimler uygulama üzerinden elektronik ortamda alınır. Hesap kimliği, işlem durumu, kullanım hakkı, güvenlik ve uygulama etkinlik kayıtları hizmetin çalışması sırasında otomatik olarak oluşur. Satın alma bilgileri Apple ve RevenueCat üzerinden; bildirim belirteci ve tercihler cihazınız ve Firebase üzerinden elde edilir. Destek talepleri e-posta yoluyla da toplanabilir.

• Fotoğraf, talimatlar ve AI sonucu: seçtiğiniz fotoğrafı canlandırmak, girdi ve çıktıda yasak içerik denetimi yapmak ve sonucu size sunmak için işlenir. AI işlemeye ilişkin açık izin uygulamada ayrı olarak alınır; açık rızaya dayalı işlemler Kanun m.5/1 kapsamında değerlendirilir. Kamera veya Fotoğraflar izni bu onayın yerine geçmez.
• Hesap, üretim ve satın alma kayıtları: hizmeti sağlamak, üretim hakkını hesaplamak, satın almayı doğrulamak ve destek vermek için sözleşmenin kurulması veya ifasıyla doğrudan ilgili olma şartına (m.5/2-c) dayanır.
• Güvenlik, kötüye kullanım ve işlem itirazı kayıtları: hizmeti ve kullanıcıları korumak için temel haklarınıza zarar vermemek kaydıyla meşru menfaat (m.5/2-f), bir hakkın tesisi, kullanılması veya korunması (m.5/2-e) ve somut bir yasal yükümlülük bulunduğunda m.5/2-ç kapsamında işlenir.
• Uygulama kullanım analitiği: hangi ekranların ve özelliklerin kullanıldığını, üretim ve dışa aktarma hatalarını değerlendirmek için Firebase Analytics üzerinden işlenir. Amaç hizmetin kullanılabilirliğini ve güvenilirliğini geliştirmektir; hukuki sebep temel hak ve özgürlüklerinize zarar vermemek kaydıyla meşru menfaattir (m.5/2-f). Fotoğraf, video ve serbest metin istemleri analitik olaylarına eklenmez. AI iznini geri çekmek analitiği kendiliğinden kapatmaz.
• Bildirimler: etkinleştirdiğiniz bildirimleri göndermek için belirteç, dil, saat dilimi ve tercihler kullanılır. Video-hazır bildirimi istenen hizmetle bağlantılıdır. Sistem bildirim izni verildiğinde hatırlatmalar varsayılan olarak açıktır; geri dönüş hatırlatmaları ve yeni stil duyuruları Profil'den kapatılabilir. Sistem bildirim izni, pazarlama veya yurt dışı aktarım için sınırsız bir rıza değildir.

İzinlerin kapsamı ve krediler: Kamera izni kaynak fotoğrafı çekmek, sistem seçicisinde belirlediğiniz fotoğrafa erişim o görseli kullanmak, Fotoğraflar'a ekleme izni üretilen videoyu cihazınıza kaydetmek içindir. Kamera reddedilirse Galeri kullanılabilir; kaydetme veya bildirim izninin reddi video üretimini engellemez. AI izni olmadan yeni üretim başlatılmaz. Satın alma bu izinleri sağlamaz. Apple ve RevenueCat satın alma doğrulamasını destekler; Firebase hesabıyla ilişkilendirilen ürün, işlem, bakiye ve kullanım kayıtları kredileri teslim etmek, kullanım veya başarısızlık iadesini hesaplamak ve aynı işlemin tekrar kredilendirilmesini önlemek için işlenir. Satın alma doğrulaması amacıyla fotoğraf ve üretim talimatları Apple veya RevenueCat'e gönderilmez. Hesap silinince bakiye kaldırılır; tekrar kredi yüklenmesini önleyen işlem kaydından hesap kimliği çıkarılır. AI iznini geri almak tek başına bakiyeyi silmez, ödeme iadesi sağlamaz veya aboneliği iptal etmez.

Alıcılar ve aktarım amaçları: Google Firebase hesap, veri tabanı, depolama, analitik ve bildirim hizmetlerini; Google Cloud Vertex AI içerik güvenliği denetimini; Kie.ai ve ilgili model sağlayıcısı video üretimini; RevenueCat ve Apple satın alma ve abonelik işlemlerini sağlar. Gerekli bilgiler bu amaçlarla ilgili alıcıya iletilir. Yetkili makamlarla yalnızca hukuken gerekli olduğunda paylaşım yapılır. Paylaş düğmesiyle seçtiğiniz uygulamaya gönderilen kopya ayrıca o uygulamanın veri uygulamalarına tabidir.

Bu hizmetler nedeniyle verileriniz ABD dahil Türkiye dışında işlenebilir. Yurt dışı aktarım, Kanun'un 9. maddesindeki şartlar açısından ayrıca değerlendirilir; uygulamadaki AI izni veya bu aydınlatma metni tek başına düzenli yurt dışı aktarım için gerekli hukuki güvencenin yerine geçmez. Verilerinize ilişkin aktarım düzenlemeleri hakkında yukarıdaki adresten bilgi isteyebilirsiniz.

Saklama ve silme: Onaylı medya için sabit bir otomatik silme süresi uygulanmaz; eseri veya hesabı silene kadar tutulur. Hesap silme, uygulama içi geri bildirimleri de kaldırır. Sınırlı güvenlik, ihlal bildirimi ve satın alma kayıtları ilgili amaç veya yasal gereklilik devam ettiği ölçüde saklanabilir. Sağlayıcı kopyaları, geçmiş analitik olayları ve dışarıya paylaşılan dosyalar otomatik hesap silme işlemiyle bütünüyle silinmez. Ayrıntılar yukarıdaki saklama ve silme bölümlerindedir.

Haklarınız: Kanun'un 11. maddesi kapsamında verilerinizin işlenip işlenmediğini öğrenebilir; işlenmişse bilgi isteyebilir; işleme amacını ve amaca uygun kullanımı öğrenebilir; yurt içi veya yurt dışındaki alıcıları öğrenebilir; yanlış veya eksik verilerin düzeltilmesini, şartları varsa silinmesini veya yok edilmesini ve bu işlemlerin alıcılara bildirilmesini isteyebilirsiniz. Yalnızca otomatik analizle aleyhinize çıkan sonuca itiraz edebilir ve hukuka aykırı işleme nedeniyle zararın giderilmesini talep edebilirsiniz. Açık rızaya dayalı işlemler için rızanızı ileriye etkili olarak geri çekebilirsiniz.

Başvurunuzu dydemiryasir@gmail.com adresine iletebilirsiniz. Talebi ilgili hesapla ilişkilendirmek için ölçülü doğrulama bilgisi isteyebiliriz; gereksiz kimlik belgesi göndermeyin. Talebinizin niteliğine göre yasal başvuru usulü konusunda yönlendirme yaparız. Başvurunuz Kanun'daki süre ve usullere göre değerlendirilir; başvuru ve Kurul'a şikâyet haklarınız saklıdır.