Privacy Policy
This policy explains how KhoaMoya, a developer based in Vietnam ("we"), collects, uses, shares, retains, and deletes data when you use MorphGlide. The app does not require your name, email address, phone number, or a sign-in account.
1. Scope and data controller
KhoaMoya is responsible for processing activities determined by MorphGlide. Privacy contact: khoaroya02@gmail.com. Google and other providers may act as independent controllers for data they process for their own purposes under their policies.
2. Data we process
Photos, facial features, and videos
- Photos you select are checked on-device for face count and suitability. When you actively request a video, normalized copies are sent to cloud processing.
- The system analyzes facial features and positions to create transitions between photos. We do not use this data to determine identity, perform biometric authentication, track you, or create an identity profile.
- The result video is made available for preview, download, and on-device storage. We do not use your photos or videos to train or fine-tune AI models.
Technical and activity data
- A pseudonymous installation identifier derived from the app public key; the private key does not leave Android Keystore.
- IP address, a keyed HMAC of the IP address, session identifiers, refresh-token HMACs, request/job IDs, hashed request fingerprints, processing status, quotas, rewarded-ad credits, and reward transaction IDs.
- Image count and size, frame count, processing time, processing-device type, diagnostics, and error codes. Hashes are used for abuse prevention and job integrity, not facial identification.
Analytics and diagnostic data
The app uses Google Analytics for Firebase to collect anonymous performance and usage metrics (such as screens viewed, feature interactions during photo selection and video export, technical processing durations, failure rates, and basic device information). This data contains no photos, videos, names, emails, or personal identifiable information (PII), and is used solely to understand user experience, optimize stability, and enhance application quality.
Advertising data
When you use a rewarded ad, Google AdMob may process IP address, advertising or device identifiers, app information, ad interactions, diagnostics, and inferred information to deliver ads, measure performance, limit frequency, and prevent fraud. The specific scope depends on your privacy choices, region, and device configuration.
On-device data
The app may store selected or cropped photos, photo history, settings, encrypted session data, temporary files, and videos you save. You can delete individual items in the app or system library, clear cache or app data through the operating system, or uninstall the app. Operating-system backups may follow the platform provider's separate retention schedule.
3. Purposes and legal bases
- Providing the requested service: validate photos, create and deliver videos, maintain an installation session, and manage usage credits.
- Legitimate interests: secure the service, prevent fraud and abuse, detect token replay, analyze aggregated non-identifying metrics, troubleshoot, and improve reliability after considering user rights.
- Consent: personalized advertising, storing or accessing advertising identifiers, and other processing where consent is required. You may withdraw consent without affecting processing that was lawful before withdrawal.
- Legal obligations: respond to valid legal requests, enforce terms, and protect the rights and safety of users or the service.
We do not sell photos, videos, or personal data. We do not use MorphGlide data for credit, employment, insurance, or other decisions that produce legal effects concerning you.
4. Providers and disclosures
- Cloudflare for the gateway, content delivery, network security, abuse controls, and installation state;
- RunPod to receive photos and job settings for GPU processing and video creation;
- Cloudflare R2 or the S3-compatible storage provider configured for production for temporary result videos and related operational data;
- Google Analytics for Firebase for anonymous usage measurement, event metrics, and application performance diagnostics;
- Google AdMob for rewarded ads, privacy choices, measurement, and fraud prevention;
- Google Play/Android for app distribution, operating-system settings, and platform services.
We disclose only data needed for these purposes, subject to applicable contracts and settings. We may also disclose data in response to a valid legal request, to address abuse, protect rights or safety, or as part of an organizational transaction with appropriate notice and safeguards.
5. Retention and deletion
| Data | Period or criterion |
|---|---|
| Temporarily staged input photos (Cloudflare R2) | Retained for a maximum of 24 hours under R2 automated lifecycle rules; proactively deleted as soon as the render job reaches a terminal state (completed, failed, or cancelled). |
| Photos and GPU-worker files | Created in a temporary job directory and removed when the job ends. Infrastructure providers may retain separate security or operational logs under their applicable policies. |
| Cloud result videos | No more than 24 hours under the production storage lifecycle rule; download links may expire sooner. |
| Authentication challenges | Valid for about two minutes and unusable after expiry, use, or replacement. A record may remain longer until replacement or operational cleanup. |
| Refresh tokens and HMAC records | Refresh tokens are valid for up to 30 days. HMAC records and token families may be kept longer for replay detection, abuse investigations, and service security. |
| Installation, quota, reward, and job metadata | Currently retained while the installation remains active or until deletion is requested, and longer where reasonably necessary for fraud prevention, security, disputes, or legal obligations. |
| On-device data | Until you delete the relevant item, clear app data, or uninstall the app, subject to device backup behavior. |
6. Choices, rights, and deletion requests
You may choose not to select photos, submit a job, or view a rewarded ad. Depending on where you live, you may have rights to request access, correction, deletion, restriction or objection, a portable copy, withdrawal of consent, opt-out from personalized or targeted advertising data sharing, and an appeal of a decision about your request.
Email khoaroya02@gmail.com with a job or installation ID if available. Do not email photos or identity documents. We may request information reasonably necessary to verify control of the installation and will respond within the period required by applicable law. Because there is no named account, we may be unable to match data after relevant identifiers have been deleted. Minimal records may be retained where permitted for security, fraud prevention, or legal obligations.
7. Advertising, sale/sharing, and consent
Rewarded ads are optional. Where required by law, consent choices must be handled before personalized advertising or access to advertising identifiers. When required, you can reopen the form through the app's privacy choices and may also use device advertising settings. We do not sell personal data for money. AdMob's use of data for personalized or targeted advertising may be considered “sharing” under some laws; you may opt out through those choices or by contacting us.
8. Security
Data is transmitted over HTTPS/TLS. Long-lived tokens are encrypted on-device, and the gateway stores HMACs instead of plaintext refresh tokens. We use access controls, rate limits, Android Keystore private keys, and keep server secrets out of the app. No transmission or storage method is completely secure.
9. Children
MorphGlide is not intended for and does not permit use by children under 13. If the law where you live sets a higher age for digital consent, you may use the service only after meeting that age or after a parent or guardian has provided legally valid authorization. MorphGlide must not be used to create child-exploitative or abusive content. Contact us if you believe we unlawfully processed a child's data so that we can investigate and delete it where appropriate.
10. International transfers
Data may be processed in Vietnam, the United States, and other countries where providers operate. Their protections may differ from those in your country. Where required, we use recognized transfer mechanisms and appropriate contractual, organizational, or technical safeguards. Contact us for more information about an applicable mechanism.
11. Regional rights and complaints
If you are in the EEA, United Kingdom, or Switzerland, you may complain to the data-protection authority where you live, work, or believe an infringement occurred. California residents and users in jurisdictions with similar laws may request to know, access, correct, delete, or obtain a copy of data and may opt out of sale/sharing or targeted advertising where applicable. We do not discriminate against you for exercising a privacy right.
12. Changes and contact
We may update this policy as features, providers, or laws change. We will provide reasonable notice of material changes and revise the effective date. Developer and data controller: KhoaMoya, Vietnam. Privacy contact: khoaroya02@gmail.com.