Privacy Policy
TL;DR
- No sign-up. The app creates an anonymous account (a random ID and secret kept in your iPhone Keychain). We do not ask for your name, email or phone number.
- Your selfie is checked on your iPhone with Apple Vision first. It is uploaded over HTTPS only after you agree, only to create the result you ask for, and it is deleted from our servers as soon as processing ends.
- Results stay on our servers for up to 24 hours so the app can download them, then they are deleted. Your copy stays on your device.
- We use Google Firebase (Analytics, Crashlytics, Remote Config) and Google AdMob ads on the launch and first-time setup screens, with Google consent tools and Apple's tracking prompt.
- Credits are bought through Apple. We never see your payment details. We do not sell your photos or results.
1. Who we are
Aivio: Mood Video Studio ("Aivio" or "the app") is published by EXO Studio, Hanoi, Vietnam ("EXO Studio", "we", "us", "our"). EXO Studio is responsible for the personal data processed through the app as described in this policy. Aivio turns one selfie that you choose into a styled result, such as a "Time Machine 1995" retro portrait or a "Mood Clip · Crying" video, when that effect is available. Creating a result uses credits that you buy in the app.
2. Information we collect
| Information | What it is | Where it is used |
|---|---|---|
| Selfie you choose | The photo you pick with the iOS photo picker for a creation. Before upload, the app resizes it and checks it on your device. | Your device. It is uploaded to our servers only when you create a result (see section 3). |
| Generated result | The image or video created from your selfie. | Our servers for up to 24 hours. Your copy is kept in the app's private on-device Vault. |
| Anonymous account identifiers | A random account ID and secret that the app creates on first launch. They are stored in your iPhone Keychain and used to authenticate requests. On our servers we keep the ID and a hash of the secret, not the secret itself. | Device Keychain and our servers |
| Credits and purchase records | Your credit balance, credit ledger entries (grants, reservations, charges, refunds), Apple transaction IDs, product IDs, the purchase environment, and refund/revocation notices received from Apple. | Our servers |
| Creation records | For each creation: the effect chosen, cost, status, progress, error code, timestamps, and the version of the face-photo consent you accepted. These records contain no images. | Our servers |
| Usage data | Screens viewed, first-time setup steps, creation started/succeeded/failed with the effect name, consent granted/withdrawn, credit purchases (product ID and credits), and ad impression and revenue events. | Google Firebase Analytics |
| Diagnostics | Crash reports and related technical data such as device model, OS version and app version. | Google Firebase Crashlytics |
| Advertising data | Ad requests, impressions and clicks, device and network information, and the advertising identifier (IDFA) only if you allow tracking. | Google AdMob and Google User Messaging Platform |
| Technical request data | When the app connects to our servers, your IP address is used to deliver the response and to rate-limit account creation. | Our servers (in memory for rate limiting) |
| On-device preferences | App language, onboarding answers, consent choice and similar settings. | Your device only |
We do not collect your name, email address, phone number, contacts, location or photo library contents. The photo picker gives the app only the photo you select.
3. How your selfie is processed
On your device
Before anything is uploaded, Aivio uses Apple's Vision framework on your iPhone to check that the photo contains exactly one face that is large enough. A photo that fails this check is not uploaded. The app also asks for your explicit consent to process face photos before your first upload. Without that consent, nothing is uploaded.
On our servers
When you create a result, the selected photo is sent over HTTPS to our servers with your anonymous account ID and the version of the consent you accepted. Our servers check the photo again (an automated face detector confirms it contains exactly one face), then create the result:
- Time Machine 1995: the photo is sent to EXO Image AI, an image-styling service used by EXO Studio, which returns a styled image. Our servers then add the date stamp.
- Mood Clip · Crying (when available): the photo is animated by an AI model that runs on our own server infrastructure.
The uploaded photo is deleted from our servers as soon as processing ends, whether it succeeds or fails. If processing does not finish within the time limit, the photo is deleted and your credits are returned.
Face data
We detect a face only to check that the photo is suitable and to restyle or animate it. We do not use face data to identify you or anyone else, we do not create face templates or biometric identifiers, and we do not use your photos for advertising, tracking or training AI models.
4. Purposes and legal bases
| Purpose | Data used | Legal basis (where GDPR/UK GDPR applies) |
|---|---|---|
| Create and deliver the result you request | Selfie, result, account identifiers, creation records | Your explicit consent for processing face photos, and performance of our contract with you |
| Keep your credit balance, process purchases and refunds | Account identifiers, purchase records, credit ledger | Performance of contract; legal obligations (accounting) |
| Keep the app working, fix crashes, prevent abuse | Diagnostics, technical request data, creation records | Legitimate interests in a secure and reliable service |
| Understand how the app is used and improve it | Usage data | Legitimate interests, or consent where the law requires it |
| Show ads during launch and first-time setup and measure ad revenue | Advertising data, usage data | Consent (collected through Google's consent form where required and Apple's tracking prompt); legitimate interests for non-personalized ads where permitted |
| Turn features and ads on or off remotely | App configuration requests | Legitimate interests |
5. Service providers
We share data only with providers that help us run the app, and only for the purposes above:
- Modal: cloud computing that hosts Aivio's servers, temporary media storage and the processing of creations.
- A managed PostgreSQL database hosted for us: stores account, credit ledger, purchase and creation records (no photos).
- EXO Image AI: receives the selfie for Time Machine 1995 creations and returns the styled image.
- Google (Firebase Analytics, Firebase Crashlytics, Firebase Remote Config): usage analytics, crash reporting and remote configuration (feature switches, ad switches and the server address).
- Google (AdMob and User Messaging Platform): ads and ad-consent management.
- Apple: App Store payments, purchase verification and refund notifications. Apple handles payment; we never receive your card or billing details.
Google's handling of data is described at policies.google.com/privacy and, for partner apps, policies.google.com/technologies/partner-sites. Apple's privacy policy is at apple.com/legal/privacy.
6. Advertising, consent and tracking
Aivio shows Google AdMob ads only on the launch screen and in the first-time setup screens (language, short survey and onboarding). There are no ads while you create, view results, buy credits, browse your Vault or change Preferences.
Before any ad is requested:
- Where required (for example in the EEA, the UK and Switzerland), Google's User Messaging Platform asks for your ad consent. No ad is loaded unless consent allows it.
- Apple's App Tracking Transparency prompt asks whether Aivio may use your advertising identifier. If you decline, the IDFA is not used for tracking.
You can change your ad consent at any time in Preferences → Privacy choices (shown where required), and tracking permission in iOS Settings → Privacy & Security → Tracking. Your photos and results are never used for ads or tracking.
7. Sharing and sale
We do not sell your personal information, and we do not sell or share your photos or results. Advertising data processed by Google AdMob, when you allow personalized ads, may be considered "sharing" for cross-context behavioral advertising under some US state laws. You can opt out by declining tracking, choosing non-personalized ads in Privacy choices, or contacting us. We may disclose information if required by law or to protect the rights, safety and security of users and the service.
8. Retention and deletion
| Data | How long |
|---|---|
| Uploaded selfie | Deleted from our servers as soon as processing ends (success, failure or timeout) |
| Result on our servers | Up to 24 hours, then deleted automatically. Download links are signed and expire after at most one hour. |
| Results on your device | Until you delete them, use Delete my data, or delete the app |
| Account, credit ledger, purchase and creation records | While your account is in use and as long as needed for credits, refunds, accounting and legal obligations |
| Analytics, crash and advertising data | According to Google's retention settings for these services |
Delete my data in Preferences deletes every creation stored in the app on your device and any photos or results still on our servers. Your credit balance and purchase records are kept so you do not lose credits you paid for. To ask us to delete your account and purchase records too, contact us (section 15); some records may be kept where the law requires.
9. Security
All connections between the app and our servers use HTTPS. Your account secret is stored in the iPhone Keychain and only a hash of it is kept on our servers. Result downloads use signed links that expire. Purchases are verified with Apple's signed transaction data. No method of transmission or storage is completely secure, but we work to protect your information.
10. Device permissions
- Photo picker: you choose a photo with the iOS photo picker. This does not give Aivio access to your photo library.
- Add to Photos (add-only): asked when you save a result as a video, image or Live Photo. Aivio cannot read your library through this permission.
- Camera: if iOS asks for camera access, it is used only so you can take a selfie for a creation.
- Tracking (App Tracking Transparency): optional, used only for ads as described in section 6.
You can change these permissions at any time in iOS Settings.
11. Children
Aivio is not directed to children under 13 (or the minimum age required in your country to consent to data processing, if higher). We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
12. Your rights (including GDPR and CCPA)
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict processing, to withdraw consent at any time, and to opt out of the sale or sharing of personal information or targeted advertising. California residents have the right to know what we collect and why, to delete and correct it, to opt out of sale or sharing, and not to be discriminated against for using these rights. EEA and UK residents may complain to their local data protection authority.
In the app you can:
- Withdraw face-photo consent with the toggle in Preferences. The app asks again before the next upload.
- Delete your photos and results with Delete my data in Preferences.
- Change ad consent in Preferences → Privacy choices (where shown) and tracking in iOS Settings.
Because the app uses an anonymous account, include your request details and, if possible, the date of your purchase or creation so we can locate the records. We will respond within the time the law requires.
13. International transfers
EXO Studio is based in Vietnam, and our service providers may process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as the providers' standard contractual clauses for these transfers.
14. Changes to this policy
We will update this page and the date above when our practices change. If changes are significant, we will give notice in the app or on this page before they take effect.
15. Contact
EXO Studio, Hanoi, Vietnam. Email: exostudio.feedback@gmail.com. You can also read the Terms of Service.