Privacy Policy

Effective: September 3, 2026

This Privacy Policy explains how Fantasia AI ("Fantasia," "we," "our," or "us") collects, uses, shares, retains, and deletes information when you use the Fantasia mobile application and related services.

1. Information We Collect

• Account and identity information: Fantasia creates a Firebase anonymous identifier when you first use the app. If you optionally link Apple or Google sign-in, we receive the identifier and limited profile information that provider makes available, such as your email address or display name.
• Content: Prompts, uploaded photos, videos, audio, masks and other references, generated outputs, projects, and reports you submit.
• Transactions and entitlements: Subscription status, product identifiers, purchase transaction identifiers, credit balance, and credit activity. Apple processes payment-card information; Fantasia does not receive your full payment-card details.
• Technical and usage information: App version, device and operating-system information, request timestamps, generation status, feature usage, error information, and security logs.
• Notifications and support: An Apple Push Notification token if notifications are enabled, plus information you include when contacting support.

2. How We Use Information

• Provide, operate, troubleshoot, and improve image, video, audio, and editing features.
• Authenticate users, synchronize projects, manage subscriptions and credits, and prevent fraud or abuse.
• Send requested service notifications, such as generation-completion alerts.
• Moderate prompts and selected media paths, enforce our Terms, investigate reports, and comply with legal obligations.
• Respond to support, privacy, safety, and copyright requests.

3. Service Providers and Sharing

We share only the information needed to provide a requested feature or operate the service. Depending on the feature you use, recipients may include:

• Apple for App Store purchases, Sign in with Apple, and push notifications.
• Google for Firebase authentication and selected Gemini-powered generation, editing, planning, or speech features.
• Replicate and fal.ai for selected AI image, video, audio, transcription, and editing workloads. Prompts and the references required for your request are sent to the applicable processor.
• OpenAI for prompt moderation and selected image or text-processing features.
• Hive for safety classification of selected face-reference media and outputs, including CSAM, sexual-content, and deepfake signals.
• Cloudflare for object storage and delivery; Railway for application hosting; and managed database and queue providers for service data.
• RevenueCat for purchase entitlement and subscription management.

The underlying AI model used for a feature may change as the service evolves. Our processors are required by contract or applicable terms to protect information consistently with this Policy and applicable law. We may also disclose information when required by law, to protect users or the public, or in connection with a business reorganization subject to appropriate safeguards. We do not sell personal information or use your content for third-party advertising.

4. Content Moderation and Safety Reports

Prompts are screened before generation. Selected real-person or face-reference workflows also use blocking media review before delivery. If systems identify high-confidence apparent child sexual abuse material, we may report the content and available account and generation metadata to the National Center for Missing & Exploited Children CyberTipline. Reported evidence may be preserved as required by law even after an account-deletion request.

5. Retention and Deletion

We retain account data, projects, prompts, and generated media while needed to provide the service. You can delete individual content where the app offers that control and can delete your account from the Profile screen. Account deletion removes or de-identifies account data and stored media from active systems, subject to short operational backup periods, fraud and transaction records we must retain, unresolved disputes, and legal holds. Service providers may retain transient processing copies according to their applicable terms.

CyberTipline-related evidence and associated metadata are preserved for the legally required period, including at least one year where 18 U.S.C. § 2258A applies.

6. Your Choices and Rights

• Disable notifications in iOS Settings.
• Choose whether to link an Apple or Google identity to the default guest account.
• Delete your Fantasia account in the app’s Profile screen.
• Request access, correction, deletion, or other rights available in your jurisdiction by contacting us.

We may need to verify your identity before completing a privacy request.

7. Children

Fantasia is not directed to children under 13, and users must meet the minimum age stated in our Terms and the applicable App Store age requirement. We do not knowingly collect personal information from children who are not permitted to use the service.

8. Security and International Processing

We use administrative, technical, and organizational safeguards designed to protect information. No system is completely secure. Fantasia and its providers may process information in the United States and other countries, which may have different data-protection laws than your location.

9. Changes

We may update this Policy as the service or law changes. We will post the revised date here and provide additional notice when required.

10. Contact