Privacy Policy

1. Introduction

This Privacy Policy explains how Creatide (the "Service") collects, processes, protects, and shares personal data obtained through its mobile applications and website. The Service is operated by AIVID, LLC (the "Company"). Please read this Policy together with our Terms of Service, including Acceptable Use (Content Safety) and Copyright Complaints (DMCA). For help, visit Support.

2. Definitions

• Service: The Creatide mobile applications and website.
• Company / Controller: AIVID, LLC, the entity responsible for determining the purposes and means of processing personal data for the Service (except where noted). For certain payment flows, some providers act as independent controllers.
• User: Any individual who uses or performs functional operations within the Service.
• Personal Data: Any information relating to an identified or identifiable individual.
• Cookie: A small file placed on the device to store preferences, session info, or telemetry.
• SDK: Third-party software components used for auth, analytics, payments, attribution, etc.

3. Data We Collect

We collect the following categories of personal data to provide and improve the Service:

• Registration Data: Name, email address, profile photo, data from federated login (e.g., Google).
• Account & Usage Data: Actions within the app (e.g., generations, credits used), timestamps, crash/diagnostic logs.
• Device & Technical Data: Device model/OS, app version, language, IP address, user agent, approximate region.
• Payment & Transaction Data: Limited billing metadata from payment processors or app stores (e.g., order ID, status, currency). We do not store full card numbers; card data is handled by our payment processors.
• Content Data: Prompts, uploaded media, generated outputs, and related settings.
• Communications: Messages sent to Support and your preferences (e.g., marketing opt-ins).

4. Purposes & Legal Bases

We process personal data for the purposes below under these legal bases:

• Account & Service Delivery (Contract / Legitimate Interests): Authentication, maintaining sessions, processing generations/credits, troubleshooting.
• Safety, Abuse Prevention & Compliance (Legal Obligation / Legitimate Interests): Fraud detection, enforcing Terms and AUP, responding to lawful requests.
• Analytics & Performance (Legitimate Interests / Consent where required): Usage metrics, quality improvement, debugging.
• Marketing & Product Communications (Consent / Legitimate Interests): Feature updates and offers; you can opt out anytime.
• Payments & Billing (Contract / Legal Obligation): Processing purchases via payment processors or app stores.

5. Third-Party Services & SDKs

We integrate third-party providers to operate the Service. These providers act as independent controllers or processors depending on context. Categories include:

• Authentication & Identity: e.g., Firebase Authentication.
• Analytics & Attribution: e.g., Google Analytics, privacy-friendly attribution tools.
• Payments & Subscriptions: Stripe for card payments (see Stripe Privacy Policy ) and, where relevant, app stores (e.g., Apple App Store, Google Play) and subscription orchestration (e.g., RevenueCat).
• Marketing & Events: privacy-aware event tracking and campaign performance tools.
• Infrastructure & Hosting: Datacenters/hosting providers for application and storage.

Some payment providers (e.g., Stripe, app stores) act as independent controllers for payment instrument data. The list of key processors may change over time. For current questions, contact Support.

6. Cookies & Tracking

We use cookies, SDKs, and similar technologies to keep you signed in, secure the Service, measure usage, and (where permitted) personalize content. Types include essential (authentication, security), analytics, and marketing/attribution.

You can manage preferences in your browser or device settings and, where offered, via our cookie controls. Disabling certain cookies may affect functionality. We currently do not respond to browser Do Not Track signals.

7. How We Share Data

• Service Providers/Processors: To operate, secure, and support the Service under contracts and confidentiality.
• Payment Processors & App Stores: To process purchases, prevent fraud, and handle billing inquiries.
• Legal & Compliance: To comply with applicable law or valid legal process, or to protect rights, safety, and property.
• Business Transfers: In connection with mergers, acquisitions, or reorganization.
• With Your Direction: When you connect third-party accounts or share links/outputs.

As of the effective date, we do not sell personal information and we do not "share" personal information for cross-context behavioral advertising as defined under California law.

8. Data Retention

We retain personal data only as long as necessary for the purposes above or as required by law. Typical periods include:

• Account Data: Kept while the account is active; deleted upon verified request.
• Content & Logs: Operational logs and security records retained up to 5 years unless a longer period is legally required.
• Analytics: Aggregated/anonymized data may be stored for trend analysis.

9. Security

We implement technical and organizational measures appropriate to risk (e.g., encryption in transit, access controls, backups). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Children’s Privacy

The Service is intended for users 18+. We do not knowingly collect personal data from children under 13. If you believe a child provided data, contact us so we can delete it. If local law requires a higher age, we comply with that requirement.

11. International Data Transfers

We may process data in the United States, the European Union (e.g., Germany), Türkiye, and other countries via our providers. Where required, we use safeguards such as Standard Contractual Clauses and, where applicable, recognized adequacy mechanisms to protect personal data when transferred across borders.

12. Your Rights

12.1. EU/UK GDPR & Türkiye (KVKK)

Depending on your location, you may have rights to access, rectify, erase, restrict or object to processing, withdraw consent, and request portability. Türkiye residents may also exercise rights under KVKK (e.g., learning whether data is processed, requesting information, correction, deletion, notification to third parties, objecting to results arising from automated processing, and claiming damages).

To exercise these rights, contact [email protected] or submit a request via Support. We may need to verify your identity. You also have the right to lodge a complaint with your local authority (e.g., KVKK in Türkiye or an EU/UK data protection authority).

12.2. U.S. State Privacy (e.g., California)

Residents of certain U.S. states may have additional rights, which can include: (i) access/know, (ii) deletion, (iii) correction, (iv) portability, (v) opt-out of targeted advertising, sale, or profiling in furtherance of decisions with legal or similarly significant effects, and (vi) the right to limit the use and disclosure of sensitive personal information.

• California: We do not sell or share personal information for cross-context behavioral advertising. You may submit requests by emailing [email protected] or via Support. We will not discriminate against you for exercising your rights.
• Appeals: If we deny your request, you may appeal by replying to our decision notice. If unresolved, you may contact your state Attorney General or privacy regulator, where applicable.

13. Marketing Choices

You can opt out of marketing emails by using the unsubscribe link in the message or contacting Support. Transactional messages (e.g., receipts, critical notices) will still be sent where necessary.

14. Automated Decisions & Moderation

We may use automated systems to detect abuse, spam, or policy violations and to route support. You can request human review where applicable by contacting Support.

15. Changes to this Policy

We may update this Policy to reflect changes in practices or legal requirements. Material changes will be notified by email and/or in-app/web notice. Continued use after the effective date constitutes acceptance.

16. Contact

Questions or requests regarding privacy:

• Email: [email protected]
• Support: creatide.ai/support
• Address: AIVID, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States