Privacy Policy

1. INTRODUCTION

Welcome to ZAP ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ZAP mobile application ("App") and related services (collectively, "Services").

Please read this Privacy Policy carefully. By accessing or using the ZAP App, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this policy. If you do not agree with the terms of this privacy policy, please do not access the app.

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our App, including:

• Name and contact details (email address for account creation and communication)
• Account credentials (hashed password)
• Payment information (processed by secure third-party payment processors like Apple App Store and Google Play Store; we do not directly store your full payment card details)

2.2 User Content

We collect and store content that you create, upload, or receive from others when using our Services, including:

• Images and photos (which may include face data, as detailed in Section 2.4)
• Video files (which may include face data, as detailed in Section 2.4)
• Audio recordings (for voice cloning or as audio input for lip-sync)
• Text inputs for voice synthesis

2.3 Automatically Collected Information

When you use our App, we automatically collect certain information, including:

• Device information (e.g., device model, operating system version, unique device identifiers)
• Log data (e.g., IP address, access times, app features viewed, app crashes, and other system activity)

2.4 Face Data

To provide core features such as face swap and lip-synchronization, our App processes images and videos you upload or select. This involves collecting and using face data from this content.

The face data we collect includes:

• Facial features and landmarks (e.g., the position and shape of eyes, nose, mouth) derived from the images or videos you provide.
• The image or video frames themselves that contain faces.

This face data is used solely to generate the animated video content as requested by you within the App. We do not use face data for identifying or authenticating users, nor for building user profiles for any other purpose.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for various purposes, including:

• Providing, maintaining, personalizing, and improving our Services.
• Processing your face swap, voice cloning, and lip-sync requests using the User Content (including face data, audio, and text) you provide. This involves sending your content to third-party AI models for processing and generating the final animated video.
• Managing your account, providing customer support, and responding to your inquiries.
• Processing transactions for token purchases and managing your token credits.
• Sending you technical notices, updates, security alerts, and support and administrative messages.
• Monitoring and analyzing trends, usage, and activities in connection with our Services to improve the App.
• Detecting, investigating, and preventing fraudulent transactions and other illegal activities and protecting the rights and property of ZAP and others.

4. INFORMATION SHARING AND DISCLOSURE

We may share your information in the following situations:

• With Third-Party AI Service Providers: To enable the core functionalities of our App, such as face swap, lip-sync, and voice cloning, we share your User Content (including images, videos containing face data, and audio files) with specialized third-party AI processing services. Currently, these services include Fal.ai and Replicate. These providers process your data to generate the requested animated video outputs. Their use of your data is governed by their respective privacy policies.
• With Cloud Storage Providers: We use Supabase for backend services, including securely storing your User Content (such as uploaded images, videos, and audio, as well as generated videos) temporarily to facilitate processing and delivery.
• With Payment Processors: For processing token purchases, we integrate with platform-specific payment processors (e.g., Apple App Store In-App Purchases, Google Play In-App Billing). We do not directly store your full payment card details.
• For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of ZAP, (iii) prevent or investigate possible wrongdoing in connection with the Services, (iv) protect the personal safety of users of the Services or the public, or (v) protect against legal liability.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We do not sell your personal data to third parties.

Fal.ai (Features & Labels Inc.) - Face Data Storage Practices: Fal.ai processes facial images you send and the generated outputs solely for the purpose of producing the video/image output you request and monitoring service quality. On Fal.ai's servers, input and output files are stored for a maximum of 7 days, after which they are automatically deleted. Fal.ai does not use this data for model training, identification, or advertising profiling.

Replicate Inc. - Face Data Storage Practices: Replicate automatically deletes input parameters, output files, and logs from API operations by default after ~1 hour. For shared operations through the web interface, this period may extend up to 90 days; since our application only calls Replicate via API, the actual storage period is limited to 1 hour. Replicate retains this data only to complete your process, debug, and ensure service security; it does not use it for model training or other purposes.

5. DATA STORAGE, SECURITY, AND RETENTION

We implement commercially reasonable technical and organizational security measures designed to protect the security of any personal information we process. We store your information on secure servers, primarily through our cloud service provider, Supabase.

However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our App is at your own risk. You should only access the App within a secure environment.

5.1 User Content and Face Data Storage and Retention

Uploaded Source Files: Images, videos (containing face data), and audio files that you upload to use features like face swap, lip-sync, or voice cloning are temporarily stored on our secure cloud storage (Supabase). This temporary storage is necessary for the files to be accessed and processed by our third-party AI service providers (Fal.ai, Replicate). These uploaded source files are typically retained for up to 24 hours after upload, after which they are scheduled for automatic deletion from our active storage.

Processing by Third-Party AI Services: When your User Content is sent to Fal.ai or Replicate for processing, these services may temporarily cache or store the data on their servers as part of their operational pipeline, in accordance with their own data handling and privacy policies. We do not have direct control over the exact retention period on their platforms beyond their terms.

Generated Output Videos: The final animated videos created by the App are made available for you to download. These output videos may be stored by us on Supabase for a limited period, typically up to 7 days, to allow you sufficient time to access and download them. After this period, they are also scheduled for deletion from our storage.

We do not retain face data or your uploaded source content for longer than necessary to provide the Services, or as required for legal or security reasons.

5.2 Storage and Retention by Third-Party AI Providers

When your User Content (including face data) is sent to Fal.ai or Replicate:

• Fal.ai retains input/output files for up to 7 days solely to deliver the requested media and support quality-of-service monitoring; files are then deleted automatically.
• Replicate (API workflow) retains input/output data for approximately 1 hour and then automatically removes it; no face data is kept beyond that window.

Neither provider uses your face data to train models, identify individuals, or build advertising profiles. Their full privacy statements are available at fal.ai/privacy and replicate.com/privacy.

6. YOUR RIGHTS AND CHOICES

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

• Access and Update: You can access and update some of your account information through your account settings within the App.
• Deletion: You can request the deletion of your account and associated personal information by contacting us. Please note that some information may be retained for legal or legitimate business purposes, such as transaction records. User Content scheduled for deletion as per Section 5.1 will be removed accordingly.

To exercise these rights, or if you have questions about your data, please contact us at privacy@raygun.ai. We will respond to your request in accordance with applicable law.

7. THIRD-PARTY SERVICES AND LINKS

Our App may integrate with or contain links to other third-party websites, services, and applications that are not operated by us. These include:

• Authentication services (e.g., Google Sign-In, Apple Sign-In)
• Cloud infrastructure and storage providers (e.g., Supabase)
• Payment processing services (e.g., Apple, Google)
• AI processing services (e.g., Fal.ai, Replicate)

If you click on a third-party link or use a third-party service, you will be directed to that third party's site or service. We strongly advise you to review the privacy policy of every site you visit and service you use. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

8. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 13 (or a higher age threshold depending on the jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

9. INTERNATIONAL DATA TRANSFERS

Your information, including personal data and User Content, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Our servers and third-party service providers (including Supabase, Fal.ai, and Replicate) may be located in various countries, including the United States.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and other regions for processing. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page within the App and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Services after the posting of changes constitutes your binding acceptance of such changes.

11. CONTACT US

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@raygun.ai