Privacy Policy of CineSpark AI

<p>&nbsp;</p>
<h1>Privacy Policy of CineSpark AI</h1>
<h3>Updated Date: August 24, 2026</h3>
<p>This Privacy Policy explains how the App ("the App", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use it. It describes the current Android release of the App and is provided by Hong Kong Xingxingyuan Technology Co., Limited.</p>
<p>By using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.</p>
<h2>1. Information We Collect</h2>
<p>The App helps you create AI-generated videos and images, change outfits, build AI models, produce portrait photo packs, add soundtracks and voiceovers, render template videos, and manage a credit balance for these features. To operate these functions, the App may collect or process:</p>
<ul>
<li><strong>Anonymous guest session:</strong> the App creates an anonymous guest session so you can use it without registering. We process the session token, user ID, credit balance, membership or subscription state, daily claim records, and invite or redeem results returned by our server to operate your account features.</li>
<li><strong>Device and app information:</strong> app package name, app version, operating system version, language, platform, and an app-generated install handle. The handle is created by hashing the Android ID together with the app package name; the raw Android ID never leaves your device and is not uploaded as-is. If the Android ID is unavailable, a value generated from a random UUID and stored locally on your device is used instead. We do not collect IMEI, MAC addresses, or device serial numbers.</li>
<li><strong>Prompts and creation settings:</strong> when you submit a text-to-video, image-to-video, video-reference, start/end-frame, multi-image, text-to-image, image-to-image, outfit, AI model, portrait pack, soundtrack, voiceover, or template request, we process your prompt, selected model and specification, selected template, generation parameters, background-music style, and task identifiers.</li>
<li><strong>Photos you provide:</strong> when you take a photo inside the App or choose one from the App's recent list as input for a generation, the photo is uploaded to our servers for processing. The App does not hold any permission to browse your photo library.</li>
<li><strong>Audio you provide:</strong> when you record a short clip (up to 5 seconds) inside the App or choose a local audio file as custom audio for your video, the audio is uploaded to our servers for processing. Recording happens only in the foreground and only after your explicit action.</li>
<li><strong>Creation history and task status:</strong> task IDs, generation status, result records, favorite and viewed states, deletion requests, reports, and feedback, so the App can show and manage your history.</li>
<li><strong>Credit and feature activity:</strong> credit balance and ledger records, daily claims, subscription and top-up interactions, template browsing, search keywords, and selected categories, so creation features and balances work correctly.</li>
<li><strong>Purchase records:</strong> subscriptions and credit packs are billed by Google Play. We never receive your payment card details; we process only the purchase status and entitlement results needed to apply your subscription or credits.</li>
<li><strong>Install attribution and campaign measurement:</strong> to measure where an installation came from and how campaigns perform, the App reads, once after installation, the Google advertising ID (skipped when you have limited ad tracking), the Google Play Install Referrer and the campaign parameters it carries, and &mdash; only when the referrer did not deliver those parameters &mdash; a one-time read of the clipboard as a fallback (some download pages copy these parameters to the clipboard before opening the store; the clipboard content is parsed for those parameters and not stored). Together with the install handle described above, a Firebase installation identifier, a paid-campaign fingerprint hash, and basic device and environment information (user agent, screen resolution and pixel ratio, language, operating system version, device model, CPU core count, memory size, touch points, network type, charging state, time zone) and your device's public IP address (IPv4/IPv6), these signals are reported once to our own backend for attribution. Attribution is processed by our own backend; no third-party attribution SDK is used.</li>
<li><strong>Push notification identifiers:</strong> if you allow notifications, the App processes the push tokens and identifiers required to deliver notifications through Firebase Cloud Messaging and OneSignal.</li>
<li><strong>Support communications:</strong> if you contact us by email, we process your email address and message content to respond to your request.</li>
</ul>
<h2>2. Information We Do Not Collect</h2>
<p>The current release is focused on creation features, account and credit services, and billing. It does not include ad-network SDKs or cross-app behavioral advertising.</p>
<ul>
<li>We do not collect contacts, SMS, call logs, precise or background location, or installed app lists.</li>
<li>We do not browse or scan your photo library &mdash; no media-read permission is requested or held.</li>
<li>We do not record audio in the background; recording is foreground-only, user-initiated, and limited to a few seconds.</li>
<li>We do not use audio for voice recognition, speaker identification, or other biometric analysis, and we do not use facial information for face recognition or identity verification.</li>
<li>We do not collect payment card numbers; payments are handled entirely by Google Play.</li>
<li>We do not sell personal data and do not share it with third parties for their own marketing purposes.</li>
</ul>
<h2>3. How We Use Information</h2>
<p>We use information only to operate, maintain, and improve the App's features and to keep the service secure, including to:</p>
<ul>
<li>create and maintain your anonymous guest session and credit balance;</li>
<li>submit AI generation tasks and process your prompts, photos, audio, and generation settings;</li>
<li>upload the materials you select only for the creation feature you choose;</li>
<li>track generation progress and show results in your creation history;</li>
<li>display templates, discover and search content, credit balance, and credit records;</li>
<li>run daily claims, invite rewards, redeem codes, subscriptions, and credit top-ups;</li>
<li>process purchases through Google Play and apply the corresponding entitlements;</li>
<li>support saving, sharing, deleting, favoriting, reporting, and feedback on results;</li>
<li>deliver optional push notifications when you allow them;</li>
<li>measure install sources and campaign performance for the App itself;</li>
<li>check app version and service availability, and offer in-app rating and updates through Google Play;</li>
<li>prevent abuse, protect service security, and troubleshoot problems;</li>
<li>respond to support requests you send by email.</li>
</ul>
<h2>4. Photos, Audio, and Facial Information</h2>
<p>Several features process visual or audio materials you actively provide &mdash; for example animating a photo, generating a video from reference footage, changing an outfit, or building an AI model or portrait pack from your photos.</p>
<ul>
<li>Materials are uploaded only when you actively capture, record, or select them for a specific creation.</li>
<li>If your photos or videos contain faces, our systems or trusted service providers process facial features only to produce the result you asked for, such as animating the photo, applying the selected effect, changing an outfit, or rendering a template.</li>
<li>Uploaded materials and generated results may be stored on our servers or with trusted service providers for processing, delivering results, showing your history, troubleshooting, and handling reports and deletion requests.</li>
<li>We do not use facial information for face recognition, biometric identification, identity verification, or law-enforcement purposes, and we do not share it with advertising platforms.</li>
</ul>
<h2>5. Permissions Used by the App</h2>
<p>The current Android release may request the following permissions, each tied to a specific feature:</p>
<ul>
<li><strong>Internet and network state:</strong> to connect to our servers, submit generation tasks, upload selected materials, load templates and discover content, check progress, and retrieve results.</li>
<li><strong>Camera:</strong> only when you choose to take a photo as input for a creation. The camera is never accessed in the background, and the App holds no permission to read your photo library.</li>
<li><strong>Microphone:</strong> only when you choose to record a short audio clip (up to 5 seconds) as custom audio for your video. The App never records in the background.</li>
<li><strong>Notifications (Android 13+):</strong> to deliver optional push notices such as completed generations and product announcements. You can deny or disable notifications without losing any other feature.</li>
<li><strong>Billing (Google Play):</strong> to process subscriptions and credit packs. The App receives no payment credentials.</li>
</ul>
<p>Saving results to your gallery uses the Android system media-save mechanism (Android 10 and above) and requires no storage permission. The App requests no media-read or storage permissions and uses no foreground services.</p>
<h2>6. Data Stored on Your Device</h2>
<p>The App stores session data, an account snapshot, credit state, task queues, the recent-photo list used by the in-app picker, and app preferences in its private storage on your device. Photos captured for a creation workflow are staged in the App's private area until processing completes. Results you save are written to your gallery or chosen share destination. Where supported, sensitive stored data is excluded from Android backup and device transfer.</p>
<h2>7. Third-Party Services</h2>
<p>The current release uses:</p>
<ul>
<li><strong>Google Play and Android platform services</strong> for distribution, updates, in-app review prompts, billing, and the install referrer. Your use of Google Play is subject to Google's terms and policies.</li>
<li><strong>Firebase (Analytics, Installations, Cloud Messaging)</strong> for basic usage analytics, an anonymous installation identifier, and the push message transport.</li>
<li><strong>OneSignal</strong> to deliver push notifications; it processes the push token and device identifiers needed for delivery.</li>
<li><strong>Google advertising ID</strong> and <strong>install referrer</strong> for install attribution and campaign measurement of the App itself, reported to our own backend.</li>
<li><strong>Technical libraries</strong> for networking, media playback and processing, image loading and cropping, animation, and interface rendering. They support app functionality and are not used by us for advertising tracking.</li>
</ul>
<h2>8. How We Share Information</h2>
<p>We share information only as needed to provide the App's features:</p>
<ul>
<li>with our servers and trusted service providers that process generation requests, media uploads, storage, result delivery, billing support, or app operations;</li>
<li>with Google Play to process subscriptions and credit purchases, and with Firebase and OneSignal to operate analytics and push delivery;</li>
<li>when required by law, regulation, or legal process, or to protect our rights, users, or the security of the service.</li>
</ul>
<p>We do not sell personal data. The advertising ID and attribution data are used only to measure install sources and campaign performance of the App itself and are not shared with advertising networks for cross-app targeting or profiling.</p>
<h2>9. Data Security</h2>
<p>We use reasonable technical and organizational safeguards designed to protect your information, including encrypted (HTTPS) transport and access controls. The App's release network configuration blocks cleartext traffic. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.</p>
<h2>10. Data Retention and Deletion</h2>
<p>We keep information only as long as necessary to operate the App, maintain your creation history and credit balance, support billing and account operation, troubleshoot, comply with legal obligations, and resolve disputes.</p>
<p>You can delete items from your creation history in the App. You may also request access, correction, or deletion of your information by emailing us at the address below; we will respond within a reasonable period. Some data may be retained where required for security, legal compliance, dispute resolution, billing records, or backup integrity. Resetting the advertising ID in your device settings, or limiting ad tracking, stops the App from reading the advertising ID.</p>
<h2>11. Children's Privacy</h2>
<p>The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take reasonable steps to delete it.</p>
<h2>12. International Data Transfers</h2>
<p>The App is operated from Hong Kong, and your information may be processed on servers located outside your country or region. Where that happens, we take steps designed to protect your information as described in this policy.</p>
<h2>13. Changes to This Privacy Policy</h2>
<p>We may update this Privacy Policy from time to time. When we do, we will change the "Updated Date" above. If you keep using the App after an update takes effect, you accept the updated policy.</p>
<h2>14. Contact Us</h2>
<p>If you have questions or requests about this Privacy Policy, contact us:</p>
<p><strong>Company:</strong> Hong Kong Xingxingyuan Technology Co., Limited</p>
<p><strong>Region:</strong> Hong Kong</p>
<p><strong>Email:</strong> <a href="mailto:xinxinkejiper@gmail.com">xinxinkejiper@gmail.com</a></p>
<div class="footer">
<p>This Privacy Policy is provided by Hong Kong Xingxingyuan Technology Co., Limited for the App.</p>
</div>