Privacy Policy

We collect your email address when you register or authenticate via Apple ID or Google Sign-In. Your email may also be used to verify your identity when you request account deletion or need account support.

We maintain records of your authentication provider identifiers (Apple ID / Google ID), credit balance, and transaction history for billing and service provision purposes.

We collect device-level technical information — including your operating system version (e.g., Android version) and device model — for the sole purpose of diagnosing crashes and technical errors through Google Crashlytics. This information is used exclusively for stability improvements and is not linked to your identity or account profile.

We collect approximate location data (country or region level) through Google Analytics to understand our user base geographically and to improve the App. Location data is processed in aggregated and pseudonymized form and is not linked to your account or personal identity.

We collect information about how you interact with the App, such as which buttons you tap, how frequently you use specific features, and how much time you spend on particular screens. This behavioral data is collected through Google Analytics and Google Events and is used solely to identify usage patterns and make product improvements. This data is not linked to your personal identity.

We store the text prompts you enter when generating AI content. Prompts are retained on our servers until you explicitly request their deletion.

AI-generated images and videos are created and hosted by our third-party AI providers (Runware and fal.ai). Moviegen does not store the actual media files. We store only the URLs (links) pointing to your generated content, so that you can access it within the App. These links are retained until you request their deletion.

With respect to content retention at the provider level: Runware deletes generated content from its servers within a maximum of one (1) month from the date of creation. fal.ai has not publicly disclosed a specific retention period; we therefore cannot make guarantees regarding fal.ai’s content retention timeline. For details, please refer to fal.ai’s own privacy policy.

If you upload images to use as input for AI generation, those images are transmitted directly to the relevant AI provider (Runware or fal.ai) for processing. Moviegen does not intentionally store or permanently retain uploaded images on its own systems. Uploaded images may pass transiently through secure network and server infrastructure solely for processing and transmission purposes.

We use Google Firebase exclusively for user authentication (sign-in and identity verification). Firebase is not used as our database or application backend. Firebase may collect device identifiers and authentication-related usage data as part of its standard operations. Privacy policy: https://firebase.google.com/support/privacy

We use Google Analytics to collect aggregated and pseudonymized data on App usage, user flows, and feature engagement. Data collected includes approximate location, in-app behavior, and session information. This data is not linked to your personal identity. Privacy policy: https://policies.google.com/privacy

We use Google Crashlytics to capture crash reports and diagnose technical issues. Crashlytics collects device model, operating system version, and crash stack traces. This data is used exclusively for stability diagnostics. Privacy policy: https://firebase.google.com/support/privacy

We use Firebase custom events to track specific in-app interactions (e.g., feature usage, conversion points) for the purpose of product analytics and improvement. Event data is aggregated and pseudonymized.

Runware is an AI image and video generation provider. Uploaded images and generation prompts are transmitted to Runware’s API for processing. Generated content is hosted on Runware’s infrastructure and deleted within a maximum of one (1) month. As of the date of this Policy, Runware’s API terms indicate that user data is not used for model training; however, this reflects Runware’s stated terms at the time of writing and may be subject to change. Privacy policy: https://runware.ai/privacy-policy

fal.ai is an AI inference platform used for certain generation tasks. Generation prompts and inputs may be transmitted to fal.ai’s API. fal.ai has not publicly disclosed a specific content retention period. We recommend reviewing fal.ai’s privacy policy for full details: https://fal.ai/privacy

Authentication is facilitated by Apple Sign-In and Google Sign-In. Credential management is handled entirely by Apple and Google under their respective privacy policies. We do not have access to your Apple or Google account passwords.

To authenticate your identity and manage your account.

To process your AI generation requests by transmitting prompts and inputs to the appropriate AI provider.

To store and display your generation history (prompts and links) within the App.

To manage your credit balance and transaction history.

To analyze aggregated and pseudonymized behavioral and location data to understand how users interact with the App.

To identify usability issues, prioritize features, and improve the overall user experience.

To diagnose crashes and technical errors using device information.

To detect and prevent fraudulent chargebacks, credit abuse, and policy violations.

To enforce our Terms of Service and Prohibited Content policy.

Moviegen does not use your prompts, generated content, uploaded images, or any personal data to train, fine-tune, or develop any artificial intelligence or machine learning model on its own systems or infrastructure.

With respect to third-party AI providers (including Runware and fal.ai): where such providers offer contractual controls or configuration options to restrict the use of user-submitted data for model training, Moviegen invokes those restrictions to the extent available. However, Moviegen cannot independently audit or guarantee the internal data practices of third-party providers, and their practices are governed by their own terms of service and privacy policies, which may change over time. Users are encouraged to review the current privacy policies of each provider directly for authoritative information on their data use practices.

We do not sell your personal data to third parties.

We do not use your data for targeted advertising or share it with advertising networks.

Uploaded images are not stored by Moviegen. They are transmitted in real time to the AI provider for processing only.

Actual media files (images and videos) are generated and hosted by Runware and fal.ai. Moviegen does not store media files on its own servers.

Runware deletes generated media from its servers no later than one (1) month after creation.

fal.ai does not publicly disclose a retention period. Users who require certainty over content lifecycle should contact fal.ai directly.

All personal data that Moviegen stores — including account information, prompts, and generated content links — is hosted exclusively on Moviegen’s own privately operated VPS (Virtual Private Server) infrastructure located in the Netherlands (European Union). Moviegen does not use any third-party cloud database service (including Google Firebase) to store personal data. Moviegen is the sole data controller and operator of this infrastructure.

Text prompts and the URLs of generated content are stored on Moviegen’s self-hosted VPS servers and are retained until the user explicitly requests their deletion. You may request deletion at any time through the in-app account settings or by contacting us.

Account information, authentication identifiers, credit balance, and transaction history are stored on Moviegen’s self-hosted VPS servers and retained for the duration your account remains active. Upon account deletion, all associated personal data is permanently removed from our systems, except where retention is required by applicable law or legitimate fraud-prevention purposes.

Aggregated and pseudonymized analytics and crash diagnostic data are retained by Google Analytics and Google Crashlytics in accordance with their respective data retention policies. As this data is not directly linked to your personal identity, it may be retained beyond the period of your account activity.

The App operates on a credit-based system. Credits are consumed upon initiating AI generation requests. Credits are non-transferable and hold no monetary value outside the App.

Credits are non-refundable once purchased or consumed. Due to the consumable nature of credits — which may be partially or fully used at the time of any refund request — we are unable to process refunds after purchase.

If we detect that a user has obtained a chargeback or refund for credits that have already been consumed, we reserve the right to deduct the corresponding credits from the user’s account balance. The account balance may become negative as a result. This measure is taken solely to deter credit fraud.

You may not use Moviegen to generate, reproduce, distribute, or otherwise exploit content that:

Infringes the copyright, trademark, trade dress, or other intellectual property rights of any third party, including using copyrighted visual references without authorization.

Involves the removal, obscuring, or circumvention of any trademark, watermark, or copyright notice.

Constitutes a “deepfake” — i.e., synthetic media depicting a real, identifiable person without their explicit informed consent — or any other form of non-consensual synthetic media.

Depicts, glorifies, or incites violence, self-harm, or harm to others.

Is sexually explicit (NSFW) or pornographic in nature.

Constitutes child sexual abuse material (CSAM) or any content that sexually depicts or exploits minors in any manner. Such content will be immediately reported to the relevant law enforcement authorities and, where applicable, to the National Center for Missing and Exploited Children (NCMEC).

Is designed to harass, bully, defame, or otherwise abuse any individual or group.

Violates any applicable local, national, or international law or regulation.

Moviegen employs server-side automated moderation systems that operate prior to and during the processing of each generation request. Specifically:

Prompt Screening: All text prompts submitted by users are subject to automated evaluation through the OpenAI Moderation API prior to being forwarded to any AI generation provider. This evaluation assesses prompts against categories including, but not limited to, hate speech, sexual content, violence, self-harm, and harassment. Prompts that are flagged as policy-violating are rejected before processing commences.

Image Input Screening: Where users submit images as generation inputs, those images are subject to automated content analysis through the OpenAI Moderation API to detect policy-violating visual content prior to transmission to any AI provider.

Keyword Filtering: In addition to AI-based moderation, all prompts are evaluated against a continuously maintained server-side keyword filter list. Prompts containing terms associated with prohibited content categories are automatically blocked from processing.

These automated systems operate as a pre-generation safeguard. They do not guarantee the complete elimination of harmful outputs, and Moviegen reserves the right to supplement automated systems with human review where warranted.

Users who encounter content that they believe violates this Content Policy may report it through the in-app support feature. Moviegen commits to reviewing reported content and taking appropriate action, which may include content removal, account suspension, or referral to law enforcement.

Accounts found to have generated, distributed, or attempted to generate prohibited content are subject to immediate suspension and permanent termination without notice or refund.

Moviegen cooperates fully with law enforcement authorities in connection with investigations involving illegal content. We reserve the right to disclose user information to the extent required by applicable law or valid legal process.

Subject to your compliance with these terms and all applicable laws, you are deemed to own the AI-generated outputs produced using your prompts and inputs, to the extent that such ownership is recognized under applicable law. You acknowledge that AI-generated content may not qualify for copyright protection in all jurisdictions.

By submitting any prompt, image, or other input to the App, you represent and warrant that:

You hold all necessary rights, licenses, and permissions to use such input for AI generation purposes.

Your inputs do not infringe the intellectual property rights, privacy rights, or any other rights of any third party.

You will not submit inputs consisting of content you do not own or for which you do not hold an appropriate license.

Moviegen assumes no liability arising from your submission of inputs for which you do not hold the requisite rights. You agree to indemnify and hold Moviegen harmless against any claims, damages, or expenses arising from your breach of these representations.

You grant Moviegen a limited, non-exclusive, royalty-free license to process your inputs and prompts solely for the purpose of providing the Service. This license does not extend to model training or any other purpose.

We reserve the right to suspend or permanently terminate your account, without notice or liability, if we determine in our sole discretion that you have:

Violated this Privacy Policy, the Terms of Service, or any other applicable policy.

Generated, distributed, or attempted to generate prohibited content.

Engaged in fraudulent activity, including unauthorized chargebacks.

Engaged in any conduct that is harmful to other users, third parties, or Moviegen.

Upon termination, your right to access the Service immediately ceases.

Any unused credits in your account are forfeited without compensation.

Stored data (prompts, links) associated with your account will be deleted in accordance with Section 5.

Obligations and liabilities incurred prior to termination survive the termination of this agreement.

You may request deletion of your account at any time through the in-app account settings. Account deletion is verified via email. Upon confirmation, your account and all associated personal data are permanently deleted from our systems.

Right of Access: You may request a copy of the personal data we hold about you.

Right of Rectification: You may request correction of inaccurate or incomplete personal data.

Right of Erasure: You may request deletion of your personal data by deleting your account or contacting us.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

As a data subject under Turkey’s Personal Data Protection Law (Law No. 6698, “KVKK”), you have the right to:

Learn whether your personal data has been processed.

Request information about the processing of your personal data.

Learn the purpose of processing and whether data is used in accordance with that purpose.

Know the third parties to whom your data has been transferred domestically or abroad.

Request rectification if your data is incomplete or inaccurate.

Request erasure or destruction of your personal data under conditions stipulated in Article 7 of KVKK.

Object to the processing of your data where it produces an adverse outcome through automated systems.

To exercise your KVKK rights, please contact us at the address or email provided in Section 16.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing: Moviegen does not sell or share personal information for cross-context behavioral advertising. No opt-out action is required.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, please contact us at the address or email provided in Section 16. We will respond within 45 days as required by law.

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR / UK GDPR) grants you the following rights. To exercise any of them, please contact us as described in Section 17.

Right of Access (Article 15): You have the right to obtain confirmation of whether we process personal data concerning you, and to receive a copy of that data along with supplementary information about how it is processed.

Right to Rectification (Article 16): You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data without undue delay.

Right to Erasure “Right to be Forgotten” (Article 17): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds.

Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.

Right to Data Portability (Article 20): Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object (Article 21): You have the right to object at any time to processing of your personal data that is based on our legitimate interests (Article 6(1)(f)). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.

Right Not to be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects concerning you. Moviegen does not make such automated decisions.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority in your EEA member state or, for UK users, with the Information Commissioner’s Office (ICO). A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

For the purposes of the GDPR and UK GDPR, the data controller is Moviegen. You may contact us regarding any data protection matter through the in-app support feature as described in Section 17.

Note: Moviegen’s primary servers are operated in the Netherlands (European Union). Personal data stored on Moviegen’s own infrastructure therefore remains within the EEA. See Section 14.4 for information on transfers to third-party providers outside the EEA.

We process your personal data on the following legal bases:

Performance of a Contract (Article 6(1)(b)): Account and authentication data, email address, prompts, generated content links, and credit/transaction records are processed to perform the Service you have requested.

Legitimate Interests (Article 6(1)(f)): Device information collected via Google Crashlytics (crash diagnostics, device model, OS version) is processed based on our legitimate interests in maintaining service stability and preventing failures. We have assessed that this processing does not override your fundamental rights and freedoms, as the data is technical, non-behavioural, and not used for profiling.

Consent (Article 6(1)(a)): For EEA and UK users, the collection of behavioral analytics data (in-app interactions, screen engagement) and approximate location data via Google Analytics and Google Events is based exclusively on your freely given, specific, informed, and unambiguous consent. We will request this consent through an in-app prompt prior to activating analytics. You may withdraw your consent at any time without detriment (see Section 14.7). If you do not provide consent, analytics features will not be activated for your session.

Legal Obligation (Article 6(1)(c)): Transaction and billing records may be retained where required by applicable financial or tax law.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. Specifically:

Account data and transaction records: retained for the duration of your account and deleted upon account deletion, subject to any overriding legal retention obligation.

Prompts and content links: retained until you explicitly request deletion.

Device and diagnostic data (Crashlytics): retained in accordance with Google’s retention policies, typically up to 90 days.

Aggregated and pseudonymized analytics data: retained in accordance with Google Analytics’ retention settings.

Moviegen’s primary infrastructure is hosted on VPS servers located in the Netherlands (European Union). Personal data stored on Moviegen’s own infrastructure therefore remains within the European Economic Area and is not subject to a third-country transfer under GDPR Chapter V with respect to Moviegen’s own systems.

However, your data may be transferred to the following third-party AI providers, which operate outside the EEA:

Runware: processes generation inputs on its infrastructure. Please review Runware’s data transfer safeguards at https://runware.ai/privacy-policy

fal.ai (United States): processes generation inputs on its infrastructure. The US does not have an EU adequacy decision; transfers to fal.ai may rely on SCCs or other applicable mechanisms. Please review fal.ai’s privacy policy at https://fal.ai/privacy

Google (United States): Firebase Authentication, Analytics, and Crashlytics data is processed by Google LLC, which participates in the EU–US Data Privacy Framework and relies on SCCs for transfers. See https://policies.google.com/privacy

By using the App, you acknowledge that your data may be transferred, stored, and processed outside the EEA as described above.

Moviegen does not currently designate a formal Data Protection Officer, as we do not fall within the categories of controllers required to appoint a DPO under Article 37 GDPR (we do not carry out large-scale systematic monitoring of individuals or large-scale processing of special category data).

For all data protection enquiries, including the exercise of your GDPR rights, please contact us via the in-app support feature. We commit to responding within 30 days.

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the data protection supervisory authority in your EEA member state of habitual residence, place of work, or place of the alleged infringement.

For UK residents: Information Commissioner’s Office (ICO) — https://ico.org.uk

For EEA residents: a full list of national supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en

We nonetheless encourage you to contact us first so that we may try to resolve your concern directly.