Privacy Policy

1. Scope

This Privacy Policy applies to the Doolai mobile application and related services.

For convenience, the application and related features are collectively referred to as the "Service".

2. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you through the App or by updating the "Last Updated" date at the top of this Privacy Policy.

Your continued use of the Service after changes become effective means you accept the updated Privacy Policy.

3. Information We Collect

The types of information we collect depend on how you use the Service.

We collect information that you provide directly, information collected automatically, and information necessary to provide AI generation features.

3.1 Information You Provide Directly

(a) Photos, Images, Videos, and Uploaded Content

When you use AI generation features, you may upload or enter:

• Photos
• Images
• Videos
• Logos
• Text prompts
• Visible facial features contained in the media you select
• Other content used to generate AI-created results

We process this content only for providing the requested AI generation services.

(b) Generated Content

We may process and store AI-generated content, including:

• AI images
• AI videos
• AI logos
• Other generated materials

This information is used to deliver generation results and display your in-app history.

(c) Account Information

If you create an account or contact us, we may collect:

• Email address
• Account identifier
• Information you voluntarily provide

(d) Purchase Information

Purchases and subscriptions are processed through Apple App Store.

We do not directly collect or store your payment card information.

We may receive limited transaction-related information necessary to manage subscriptions and provide purchased features.

3.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device model
• Operating system version
• App version
• Device identifiers
• IP address
• Crash reports
• Usage statistics
• Performance information

This information is used to improve app stability, security, and user experience.

3.3 Camera and Photo Permissions

If you grant access to your camera or photo library, we may access photos or videos selected by you.

These permissions are used only to provide AI creation features.

You can manage or disable these permissions through your device settings.

4. AI Content Processing and User-Uploaded Media

The Service provides AI-powered image, video, face replacement, animation, and visual effect generation features.

User-Uploaded Content

When you choose to use an AI creation feature, you may voluntarily select photos, videos, images, or other media files and provide text prompts or instructions.

The user-selected media and instructions are transmitted to the applicable third-party AI service only when necessary to provide the AI generation feature requested by you.

Uploaded photos or videos may contain visible facial features. Any facial features contained in the uploaded media are processed only as part of the requested AI generation or visual effect.

We do not use uploaded media to identify individuals, authenticate identity, or create facial recognition profiles.

Face Data Handling

The Service does not extract or maintain a separate facial recognition profile, facial embedding, biometric template, or other biometric identifier.

If a user-selected photo or video contains a person's face, the facial features contained in that media may be processed by the applicable AI service only to perform the AI generation requested by the user.

We do not use facial information for:

• Identifying or authenticating individuals
• Creating biometric profiles or facial recognition databases
• Advertising or marketing
• User profiling or tracking
• Training our AI models

Facial information is not separately stored by us as biometric data. A copy of a user-selected source photo may, however, be stored as media in Alibaba Cloud object storage and linked to the corresponding local App record so that the photo can be reused for later generation requests.

Data Processed

Depending on the AI feature selected by the user, the Service may process:

• User-selected photos, videos, or other media files, which may contain visible facial features
• Text prompts or instructions provided by the user
• Information necessary to perform the requested AI generation
• Task identifiers and generation parameters
• Technical request information necessary to securely process and deliver the requested service

Collection and Third-Party Transmission

When a user initiates an AI generation request, the App provides an in-app disclosure explaining that the selected media and related information will be transmitted to the third-party AI service required for the selected feature.

The disclosure identifies:

• What categories of data will be transmitted
• The applicable third-party AI services that may receive the data
• The purpose of the transmission and processing

The user must provide consent before the applicable media is transmitted to a third-party AI service. The App does not transmit user-selected media for AI processing before the user provides the required consent.

Storage, Retention, and Deletion

Generated results downloaded by the App are stored on the user's local device. We do not maintain a separate cloud-based library of generated results.

We do not separately store facial biometric identifiers, facial embeddings, facial recognition templates, or biometric profiles.

A user-selected source photo uploaded for generation may remain in Alibaba Cloud object storage so it can be reused for later generation requests. Removing its face entry in the current version of the App removes the corresponding App database record but does not automatically delete the cloud object. You may request deletion of the cloud copy using the contact information in Section 14.

Other media and information transmitted to a third-party AI service are processed under the provider-specific retention and deletion practices described in Section 5. We use such services only as necessary to provide the AI generation requested by the user.

AI Training

User-uploaded photos, videos, facial information, prompts, and generated results are not used by us to train our AI models.

4.1 AI Image and Video Generation

When you select media and provide prompts or instructions, the Service transmits the information required for the selected AI feature to the applicable third-party AI service to generate the requested result.

We do not use uploaded content to identify individuals.

We do not create biometric profiles.

We do not use uploaded photos, videos, facial information, prompts, or generated results to train our own AI models.

Generated results downloaded by the App are stored locally on the user's device and are not maintained by us as a separate cloud-based media library.

4.2 Facial Data Processing

Some uploaded images or videos may contain human faces.

If facial features are processed during an AI generation request:

• They are processed only to provide the requested AI feature
• They are not used to identify individuals
• They are not used for facial recognition or authentication
• They are not used to create biometric profiles, facial embeddings, or facial recognition templates
• They are not used for advertising, tracking, or user profiling
• They are not used by us to train AI models

We do not separately collect or store facial biometric data. Facial features remain part of the user-selected media submitted for the requested AI generation.

5. Third-Party AI Services

After the user provides the required in-app consent, Doolai may transmit the user-selected media, visible facial features contained in that media, prompts, task information, and necessary technical request information to the third-party AI processor required for the selected feature.

The applicable processor depends on the feature selected by the user:

• Alibaba Cloud — application infrastructure, task processing, and related media transmission or storage required to provide the Service.
• API.market and MagicAPI/Capix — face replacement and related image processing.
• Modal — hosted AI workflow computing and video generation processing.
• Replicate — hosted AI model processing.
• PixVerse and 302.AI — AI video generation.
• Vidu — AI video generation.

Only the processor necessary for the selected feature receives the applicable data.

For example, a face replacement request may transmit the selected image and the information required for the face replacement operation to the applicable face replacement processor. An AI video generation request may transmit the selected media, user-provided prompt, and generation parameters to the applicable AI video processor.

These third-party services process the transmitted information as necessary to provide the requested AI functionality, subject to the applicable service agreements and privacy requirements.

We do not authorize third-party processors to use user-uploaded media or facial information for advertising, user profiling, or identification purposes. We require processors acting on our behalf to:

• Process data only to provide AI generation services
• Not use your content for their own purposes
• Apply the same or an equivalent level of privacy and security protection described in this Privacy Policy

User-selected media is encrypted during transmission. Some third-party AI processors may process information in countries other than the country in which you reside.

Provider Retention and Deletion Practices

Retention and deletion periods vary by provider and product. The following summary is based on the providers' published practices as of the Last Updated date above:

• Alibaba Cloud: media stored by Doolai in Alibaba Cloud object storage remains until it is deleted by us or deletion is requested. Alibaba Cloud states that other personal data is retained while needed for the requested service, legitimate business purposes, or legal requirements, then deleted or anonymized.
• API.market and MagicAPI/Capix: API.market states that its FaceSwap service automatically deletes image data after processing and does not keep a permanent record of images or user content.
• Modal: Modal states that request and response payloads for Server and Auto Endpoints are not stored; Function inputs and outputs may be retained for up to seven days; files intentionally placed in persistent Volumes or Images remain until deleted by the customer.
• Replicate: Replicate states that, by default, API prediction inputs, outputs, files, and logs are automatically removed after one hour.
• PixVerse: PixVerse states that personal data is retained no longer than necessary for the stated purposes unless a longer period is required or permitted by law.
• 302.AI: 302.AI states that personal information is retained as needed to provide its service, comply with legal obligations, resolve disputes, and enforce policies, and that verified deletion requests are honored subject to applicable exceptions.
• Vidu: Vidu states that personal data is stored only as long as required for the collection purpose or applicable legal requirements, after which it is deleted or anonymized.

Provider practices may change. You may request deletion of information controlled by Doolai using the contact details in Section 14. Where appropriate, we will also direct the applicable processor to delete information, subject to legal, security, backup, and contractual limitations.

6. How We Use Information

We use collected information to:

Provide AI image, video, and logo generation services

• Process subscriptions and purchases
• Improve app performance and features
• Provide customer support
• Detect abuse, fraud, or security issues
• Comply with legal obligations

We only use information for purposes necessary to operate and improve the Service.

7. How We Share Information

We do not sell your personal information.

We may share information only with:

(a) Service Providers

We may share limited information with trusted third-party providers that help us operate the Service, including:

• The cloud hosting, storage, and AI processing providers identified in Section 5
• Analytics providers
• Customer support providers

These providers may only process information as necessary to provide services to us.

(b) Legal Requirements

We may disclose information if required by law, legal process, or to protect our rights, safety, and property.

8. Data Retention

We retain information only for as long as necessary to provide the Service.

Reusable face media may remain in cloud storage while needed to support that feature. Other uploaded images, videos, prompts, generated results, and task records may be retained for generation, result delivery, security, fraud prevention, troubleshooting, and support.

Retention may vary by processor and feature. We delete or anonymize information when it is no longer needed for these purposes, subject to legal and security obligations. You may request deletion at any time by contacting us.

When information is no longer needed, it is deleted or anonymized.

9. Security

We use reasonable technical and organizational measures to protect your information.

These measures may include:

• Encryption during transmission
• Access restrictions
• Security monitoring

However, no method of electronic storage or transmission is completely secure.

10. Your Privacy Rights

Depending on applicable laws, you may have rights to:

• Access your personal information
• Request correction
• Request deletion
• Withdraw consent
• Request information about data processing

To exercise your rights, please contact us at:

leichuang1101@163.com

You can withdraw permission for future AI processing at any time in Doolai under Settings > AI Data Sharing. After withdrawal, Doolai will not send new photos, videos, visible facial features, or prompts to AI processors unless you grant permission again. Withdrawal does not automatically delete data already needed for completed tasks; contact us to request deletion.

11. Children's Privacy

The Service is not directed to children under 13 years old.

We do not knowingly collect personal information from children.

If we learn that we have collected personal information from a child, we will take reasonable steps to delete it.

12. Third-Party Services

The Service may contain integrations with third-party services.

Those third parties have their own privacy policies, and we encourage you to review them. Providers processing personal data on our behalf are subject to the protection requirements described in Section 5.

13. International Data Transfers

Your information may be processed in countries other than your own.

We take reasonable steps to ensure that personal information remains protected according to applicable privacy laws.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: leichuang1101@163.com