Privacy Policy

1. Introduction and who we are

This Privacy Policy explains how the Movify mobile app and the website movifyapp.com (together, the "Service") collect, use, share and protect your personal data. Movify turns a photo you upload into an AI-generated dance or effect video.

In this policy, "Movify", "we", "us" and "our" refer to the operator of the Service, which is based in the Kingdom of Morocco. We are responsible for your personal data as described here.

We process personal data in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, for users in the European Economic Area (EEA), the General Data Protection Regulation (GDPR).

2. Data we collect

We only collect the data we need to run the Service:

• Photos you upload, and reference videos you provide for "motion" templates.
• AI-generated videos created from your uploads.
• An anonymous app user identifier. The app creates an anonymous account automatically. We do not collect your name, email address or a password to use the app.
• Coin balance, generation history and subscription status, so we can show your videos and manage your coins.
• Purchase information that Apple or Google shares with us through our subscription management provider, such as the product purchased, purchase and renewal dates and subscription status. We never receive your card or payment details.
• Push notification token, so we can tell you when your video is ready.
• Basic technical data needed to run the Service, such as device type, operating system version and IP address in server logs.
• Support messages, including your email address and anything you choose to include, if you contact us by email or phone.

We do not collect your contacts, precise location, or browsing activity in other apps.

3. How we use your data

We use your data to:

• generate the videos you request from your photos and reference videos;
• deliver your results and send notifications when a video is ready;
• manage your coins, subscriptions and purchases;
• respond to your support requests;
• keep the Service secure, prevent fraud and abuse, and enforce our Terms of Use;
• comply with our legal obligations.

Legal bases (EEA users)

Where the GDPR applies, we rely on: your consent for sending photos and reference videos to third-party AI providers; performance of our contract with you to provide the Service, coins and subscriptions; our legitimate interests in keeping the Service secure and preventing abuse; and legal obligations, for example keeping purchase records.

4. Third-party AI processing

To create your video, your photo (and, for motion templates, your reference video) is sent to third-party AI video generation providers. These providers act on our instructions and process your content only to create the video you requested.

• Consent first. Before your first photo upload, the app shows a consent screen explaining that your photo will be sent to third-party AI providers. Nothing is sent unless you agree.
• You can decline. If you do not give consent, no photos are sent for AI processing. You will not be able to create videos from photos until you consent.
• You can withdraw consent at any time in the app's Settings. Withdrawing consent stops future uploads from being sent for AI processing. It does not affect videos already created; you can delete those as described in section 8.

The current list of AI providers we use is available on request. Email us at elsaadev@gmail.com.

5. Service providers we use

We share data with the following service providers only as needed for them to perform their role for us:

• Google Firebase (Google LLC): anonymous authentication, database and push notifications.
• Cloudflare (Cloudflare, Inc.): storage and delivery of uploaded photos and generated videos.
• RevenueCat (RevenueCat, Inc.): subscription and purchase management.
• Apple App Store and Google Play: payment processing. Your purchases are also subject to Apple's or Google's own privacy policies.
• Our web hosting provider: hosting of our backend servers.
• Third-party AI video generation providers: creating your videos, as described in section 4.

We do not use any analytics, attribution or advertising tools. We may also disclose data if required by law, or to protect the rights, safety or property of our users, the public or Movify.

6. Facial images

Photos you upload may contain faces. We use them only to generate the video you requested.

• We do not use facial images for identification, verification or biometric recognition, and we do not create face templates or faceprints.
• We never sell facial images or share them for any other purpose.
• Facial images are handled like all your uploads: sent to AI providers only with your consent, deleted automatically within 30 days of upload, and deleted sooner if you delete your data.

7. Data retention

Uploaded photos and reference videos are used only to create your video and are deleted automatically within 30 days of upload. You can ask us to delete them sooner by email (see section 8).

Generated videos, your generation history and your coin balance are kept until you ask us to delete your data by email.

Server logs, which may include IP addresses, are kept for up to 14 days for security and troubleshooting. Support emails are kept for up to 12 months after your request is resolved.

Purchase and transaction records may be kept for as long as required by law, for example for tax and accounting purposes.

8. Deleting your data

You can ask us to delete your data at any time by emailing elsaadev@gmail.com with the subject "Movify data deletion request". Because the app does not collect your name or email, please include details that help us find your anonymous account, such as the user ID shown in the app's Settings (if available), your device model, the approximate date you last used Movify and, if you subscribed, the order ID from your Apple or Google receipt. We will confirm your request and complete the deletion within 30 days. See our Delete your data page for details.

Uninstalling the app does not by itself delete data stored on our servers.

9. International transfers

Our service providers may process your data outside Morocco, for example in the United States or the European Union. When data is transferred internationally, we take steps so that it remains protected, such as working with providers that offer appropriate safeguards (for example, standard contractual clauses) and complying with the requirements of Moroccan Law No. 09-08 and, where applicable, the GDPR.

10. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• object to or restrict certain processing;
• withdraw your consent at any time, without affecting processing that took place before;
• data portability (for EEA users): receive your data in a commonly used format.

To exercise these rights, email elsaadev@gmail.com and include the user ID shown in the app's Settings so we can find your data. Because the app does not ask for your name or email, we may need this ID to confirm the request relates to your account. We answer requests within 30 days.

You also have the right to lodge a complaint with the Moroccan data protection authority, the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel, www.cndp.ma) or, if you are in the EEA, with your local data protection authority.

11. Security

We protect your data with measures appropriate to the risks, including:

• encryption in transit (HTTPS) between the app, our servers and our providers;
• access to data restricted to what is needed to run the Service;
• secure cloud infrastructure from established providers.

No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any issue.

12. Children

• Movify is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the Service, contact us and we will delete their data.
• If you are under 18, you need permission from a parent or legal guardian to use Movify.
• Do not upload photos of minors unless you are their parent or legal guardian.

13. Push notifications

We send push notifications to let you know when your video is ready. You can turn notifications off at any time in your device settings. If you turn them off, you can still check your videos in the app.

14. Changes to this policy and contact details

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, for significant changes, let you know in the app or on this website.

If you have any questions about this policy or your data, contact us: