EXO Studio
Privacy Policy
TL;DR
Your photos and videos are edited on your device and are not uploaded to us. The app stores your exported videos locally. With your consent, Google services may process device identifiers, app activity, diagnostics, and advertising data to provide ads, analytics, messaging infrastructure, and remote configuration. You can change eligible advertising consent choices from the app's Privacy options.
1. Who we are
Photo Video Maker with Music is published by EXO Studio, Hanoi, Vietnam. This policy explains how the Android app handles information.
2. Information we process
| Category | What happens |
|---|---|
| Photos, videos, and audio | You choose specific media through Android's system picker. Editing, previewing, combining, and exporting happen on your device. We do not operate a server that receives your media. |
| Created files and preferences | Exported MP4 files, language, onboarding status, and editing preferences are stored locally on your device. |
| App activity and diagnostics | After consent, Firebase Analytics may receive app interactions and advertising-impression events, including ad format, placement, value, currency, and ad source. Google SDKs may also process diagnostic and performance information. |
| Device and advertising data | After consent where required, Google advertising services may process advertising identifiers, IP address, device characteristics, approximate location inferred from IP, ad interactions, and consent choices. |
| App-instance data | After consent, Firebase Remote Config and Firebase Messaging may use an app-instance identifier or registration token to deliver configuration and messaging infrastructure. |
The app does not provide user accounts, paid subscriptions, or in-app purchases. We do not collect names, email addresses, or payment information through the app.
3. How processing works
The app asks Google User Messaging Platform (UMP) to resolve advertising consent before initializing advertising, analytics, messaging, or remote-configuration services. If consent is denied or cannot be resolved, the app is designed to keep those services disabled for that session. Some regions may allow you to revisit eligible choices through Privacy options.
When you use Android's share sheet, the exported file is disclosed only to the app or person you choose. That sharing is initiated and controlled by you.
4. Purposes and legal bases
- Provide the app: process selected media locally, apply edits, export files, remember settings, and respond to your actions. The basis is performing the service you request.
- Advertising and consent: display and measure ads and remember eligible consent choices. The basis is consent where required and our legitimate interest in supporting an ads-funded app where permitted.
- Analytics and reliability: understand feature and ad performance and maintain configuration. The basis is consent where required and legitimate interests where permitted.
- Legal and security: prevent abuse, comply with law, and protect users and services. The basis is legal obligation and legitimate interests.
5. Service providers
The app integrates Google Mobile Ads, Google User Messaging Platform, Firebase Analytics, Firebase Remote Config, and Firebase Cloud Messaging. Google may process data as an independent controller or service provider under its own terms and privacy documentation. These services provide ads, consent controls, measurement, app configuration, and messaging infrastructure.
6. Sharing and sale
We do not sell personal information for money. We share data with Google only as described above and when those SDKs are enabled. Depending on applicable law, personalized advertising may be considered “sharing” or targeted advertising. Eligible users can manage consent through the UMP form or device advertising settings.
We may also disclose information when required by law, to protect rights and safety, or in connection with a business reorganization subject to appropriate safeguards.
7. Retention
Local exports and preferences remain until you delete them, clear app data, or uninstall the app. Media-picker access is limited to items you select. Third-party providers retain data under their own retention settings and policies. We retain support correspondence only as long as needed to respond and meet legal obligations.
8. Security
We use platform storage boundaries, scoped media access, consent gating, and encrypted network connections provided by integrated services. No system is completely secure, so we cannot guarantee absolute security.
9. Device permissions
- Selected photos and videos: Android's system picker grants access only to media you choose.
- Storage on Android 8–9: write access may be requested only when saving an exported video to the public gallery. Newer Android versions use MediaStore without broad storage access.
- Network and advertising identifiers: integrated Google services use network access and platform advertising APIs for the purposes described above.
- Notifications: Google messaging components declare notification-related capability; the app does not require notifications to edit or export media.
10. Children
The app is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
11. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent. Because user media and preferences remain on your device, you can usually control them by deleting files, clearing app data, resetting the advertising ID, changing device privacy settings, or uninstalling the app.
EEA and UK users may complain to their local supervisory authority. California and other eligible US residents may request information about collection, deletion, correction, and opt out of qualifying sharing or targeted advertising. We do not discriminate for exercising privacy rights. Email us to make a request; we may need information to verify it.
12. International transfers
EXO Studio is based in Vietnam, and Google services may process information in other countries. Where required, transfers rely on recognized safeguards such as contractual protections and applicable adequacy mechanisms.
13. Changes
We may update this policy when the app, providers, or legal requirements change. We will update the date above and provide additional notice when required.
14. Contact
EXO Studio
Hanoi, Vietnam
Email: exostudio.feedback@gmail.com