Privacy Policy

Wave AI Studio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide when using our App, including:

• Email address (for account creation)
• Profile information
• Payment information (processed through Apple's In-App Purchase system)

1.2 Face Data

Our App collects and processes facial images that you voluntarily upload. This includes:

Types of Face Data Collected:

• Facial photographs uploaded from your device's photo library
• Facial photographs captured using your device's camera
• Saved face images stored in your profile (up to 4 slots) for quick reuse

Purpose of Face Data Collection:

• To provide AI-powered face swap functionality
• To generate transformed images based on your facial features
• To allow you to save faces for convenient reuse in future face swap operations

1.3 Automatically Collected Information

When you use the App, we may automatically collect:

• Device information (device type, operating system)
• Usage data (features used, interaction patterns)
• Crash reports and performance data

2. How We Use Your Information

2.1 General Uses

We use the information we collect to:

• Provide and maintain our App services
• Process your transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Improve our App and develop new features

2.2 Face Data Usage

Your face data is used exclusively for:

• AI Face Swap Processing: Your facial images are processed through AI algorithms to create face swap transformations with template images
• Saved Faces Feature: Optionally storing your preferred face images for quick access in future sessions
• Result Generation: Creating and displaying the final generated images

We do NOT use your face data for:

• Facial recognition or identification purposes
• Creating biometric identifiers
• Advertising or marketing purposes
• Training our AI models with your personal images
• Any purpose other than providing the face swap service you requested

3. Third-Party Services and Data Sharing

3.1 AI Processing Partners

To provide our face swap services, your facial images are transmitted to the following third-party AI processing services:

• Replicate.com: AI model hosting and inference platform
• Fal.ai: AI image generation service

These partners:

• Process your images only for the purpose of generating face swap results
• Do not permanently store your facial images after processing
• Process images transiently and securely
• Are bound by their own privacy policies and data protection practices

3.2 Cloud Storage

We use Supabase as our cloud infrastructure provider for:

• Storing your uploaded images securely
• Storing generated result images
• Managing your saved face images
• User authentication and account management

3.3 Other Third Parties

We may also share information with:

• Apple Inc.: For In-App Purchases and App Store services
• Analytics providers: Anonymized usage data for app improvement
• Legal authorities: When required by law or to protect our rights

4. Data Storage and Security

4.1 Where Your Data is Stored

• Your face images and generated results are stored on secure cloud servers (Supabase)
• Data is stored in data centers with industry-standard security measures
• All data transmission uses encrypted connections (HTTPS/TLS)

4.2 Security Measures

We implement appropriate security measures including:

• Encryption of data in transit and at rest
• Row Level Security (RLS) ensuring only you can access your own data
• Secure authentication mechanisms
• Regular security assessments

4.3 Access Control

• Only you can access your saved faces and generated images through your authenticated account
• Our team does not access your personal images unless required for technical support with your explicit permission

5. Data Retention

5.1 Face Data Retention

• Processing Images: Temporarily retained only during the generation process, then automatically deleted from processing servers
• Saved Faces: Stored until you explicitly delete them or delete your account
• Generated Results: Stored in your gallery until you choose to delete them

5.2 Account Data

• Account information is retained as long as your account is active
• Upon account deletion, all associated data is permanently removed within 30 days

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access your personal data stored in the App
• Delete your saved faces at any time
• Delete generated images from your gallery
• Delete your entire account and all associated data

6.2 How to Exercise Your Rights

• Delete Saved Faces: Go to Profile Settings → Saved Faces → Delete
• Delete Generated Images: Long-press on any image in Gallery → Delete
• Delete Account: Go to Settings → Account → Delete Account
• Contact Us: Email us at [YOUR_SUPPORT_EMAIL] for data-related requests

6.3 Data Portability

Upon request, we can provide you with a copy of your personal data in a commonly used format.

7. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using our App, you consent to such transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification if changes are significant

Your continued use of the App after changes constitutes acceptance of the revised policy.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Legal Basis for Processing:

• Consent: For processing face data for face swap services
• Contract: For providing our services and managing your account
• Legitimate Interests: For improving our services and ensuring security

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: info@tomx.co

13. Summary of Face Data Practices