Privacy Policy

Update Date: December 25, 2024

Effective Date: December 25, 2024

BodyAI (including the BodyAI client and its server-side, end-user client programs, documents, including upgraded and improved versions of the aforementioned content, hereinafter referred to as "Application" or "We") is committed to protecting the privacy rights of our users (hereinafter referred to as "Users" or "You"). We understand the importance of personal information to you, and your trust is very important to us. We will protect your personal information and privacy security in accordance with legal regulations and by referring to industry best practices. We have formulated this "Privacy Policy" and particularly remind you to carefully read and understand this Privacy Policy before using BodyAI and related services, so that you can make appropriate choices.

This Privacy Policy will help you understand:

We will collect and use your information in accordance with the Privacy Policy, but will not adopt a bundled approach to collect personal information solely because you agree to this Privacy Policy.

When you use or enable related functions or services, we will collect and use relevant information necessary to realize the functions and services. Unless it is necessary for business functions or required by laws and regulations, you can refuse to provide the necessary information without affecting other functions or services. We will explain the information to be collected item by item in the Privacy Policy.

Microphone, album (storage), and Bluetooth permissions will not be enabled by default and will only be used to achieve specific functions or services with your explicit authorization, which you can also withdraw.

The following will help you understand in detail how we collect, use, share, transfer, disclose, store, and protect personal information; and help you understand how to manage your personal information. This policy is closely related to your use of our services, and we recommend that you read and understand the entire content of this policy carefully and make choices you deem appropriate. Important content regarding your personal information rights has been highlighted in bold, please pay special attention.

1. How We Collect and Use Personal Information

2. How We Share, Transfer, and Disclose Personal Information

3. How We Store Personal Information

4. How We Protect Personal Information

5. How to Exercise Rights Related to Personal Information

6. Protection of Minors

7. Revisions and Notices of the Privacy Policy

8. How to Contact Us

1. How We Collect and Use Personal Information

1.1 We collect the following types of information about you:

Information You Provide. Including:
- Information you provide to us when registering an account for the platform services or using the platform services;
- Shared information you provide to other parties through the platform services, and the information you store when using the platform services.
Information about you legally shared by third parties.
Information we legally obtain about your use during the process of providing services to you.

We may also receive information about your interests and usage of various products, plans, services, and existing content. This personal data will only be collected under the following circumstances:

You voluntarily provide this information to us;
We need this information to provide the services you request. If we intend to use this data for actions not mentioned above, we must obtain your prior consent.

Camera/Album Permissions

Camera and album permissions are sensitive permissions, and we will only use them with your explicit authorization when you use BodyAI for functions such as image, video editing, and feedback, and you can withdraw authorization at any time. We will never activate the camera, read album information to steal your privacy, read your image content, or collect your daily conversation dialogues without your consent, nor will we use such illegal means for information or advertising push.

Metadata

Metadata is typically technical data associated with your use of the application. Metadata describes how, when, and by whom a piece of user content was created and how that content is formatted. We use such data solely to improve and develop the core functions of the application. However, this data is not associated with specific users, and we will not track specific users through this data.

Log Data

To track how our services are accessed and used, we use third-party analytics tools, such as Google Firebase, to gather user behavior data, such as the web pages you visit, plugins, and other information that helps us improve services. This information is non-personally identifiable and will not be used to track individual users.

Third-Party Services

Our advertising partners may use cookies and other tracking technologies to compile information about your device's access and usage patterns on our services to personalize the advertising content displayed to you. Sharing information with these third parties does not constitute our collection or storage of this data. If our advertising partners' software development kits ("SDK") integrated into our application are updated, we will promptly integrate new features to inform you of how your data will be used by these third parties.

Machine Learning Features

We provide features such as one-click body beautification, facial reshaping, and image expansion based on machine learning technology. These features may require you to upload images or videos to the server for processing due to the high-performance servers needed for deep learning technology. We will not use your uploaded images for other purposes. We guarantee that your data will be promptly deleted after processing, and we will not collect, permanently store, or share any of your data.

Log Information Related to AI-Generated Services

To ensure the security and compliance of internet AIGC generation services, we collect log information such as your network type, IP address, and device model when initiating tasks. This information helps track and handle anomalies when necessary. We encrypt all collected log information and user-published information to prevent data leakage and ensure information security.

1.2 We may collect necessary information for different purposes, including the following purposes and information:

1.2.1 To enable you to smoothly use the functionalities of this application

We currently have developed or may develop in the future features using deep learning technologies commonly used in image and video processing apps. These deep learning technologies require high-performance servers to process, necessitating the upload of images or videos to the server for processing. These features include but are not limited to: AI breast enhancement, AI buttock enhancement, one-click body beautification, background protection, facial reshaping, one-click makeup, AI hair color, erasure, and image expansion. To use these features, access to your device's photo library will require your permission.

How we handle personal images and videos uploaded to the server:

To use these features, your images and videos must be uploaded to the server. We will take strict encryption measures to protect this information during transmission and storage in accordance with legal requirements to ensure your information is secure.

Management of usage rights for such information:

The use of such information is limited to providing these functional services to you. Once the service is completed, the system will automatically delete the aforementioned information, and it will not be retained. These images and video information will be automatically deleted from our servers after 24 hours. Images or videos generated by the application based on your uploads will be automatically deleted from our servers after 15 days. The technology implemented in the application does not allow for unique identification or authentication of individual users.

Expansion and optimization of such features:

For the training and improvement of deep learning-related features, we use entirely publicly available compliant datasets or specially procured legal datasets. User-uploaded images/videos will not be used for any purpose other than the user function itself, including not being used for feature training or improvement.

Responsibility statement for uploaded content:

You must ensure that you have the corresponding legal rights for the uploaded content or have obtained legal authorization from others and are entitled to use the aforementioned features. Otherwise, you will bear all consequences and losses.

Exceptions to obtaining authorization consent:

Please understand that under the following circumstances, according to laws, regulations, and relevant national standards, we do not need to obtain your prior authorization and consent to collect and use your personal information:

Related to our fulfillment of obligations stipulated by laws and regulations;
Directly related to national security and defense security;
Directly related to public safety, public health, and significant public interests;
Directly related to criminal investigations, prosecutions, trials, and execution of judgments;
For the purpose of safeguarding your or others' significant legitimate rights and interests such as life and property, but it is difficult to obtain your consent;
Personal information that you have disclosed to the public on your own;
Necessary for signing and fulfilling contracts according to the requirements of the personal;
Collected from legally disclosed information, such as legal news reports, government information disclosure, and other channels;
Necessary for maintaining the safe and stable operation of software and related services, such as discovering and handling faults of software and related services;
Necessary for conducting legal news reporting;
Necessary for academic research institutions to conduct statistical or academic research based on public interest, and when providing academic research or description results to the public, the personal information contained in the results is de-identified;
Other circumstances stipulated by laws and regulations.

Please pay special attention that if information cannot identify your personal identity by itself or in combination with other information, it does not constitute your personal information in the legal sense; when your information can identify your personal identity by itself or in combination with other information, or when data that cannot be linked to any specific personal information is combined with your other personal information, such information will be treated and protected as your personal information during the period of combination according to this Privacy Policy.

User facial data usage statement:

We do not collect, upload, store, save, or share any user facial data by ourselves or with any third party. The application only uses facial data when users utilize facial reshaping, one-click makeup, and other facial editing and enhancement features. During a single editing session, this data is temporarily retained on the local device to expedite the user's use of multiple facial editing functions. Once the user completes editing or exits the editing page, the facial data is immediately deleted. Each feature we provide is built and optimized using mature legal open data and does not use user data for development-related purposes. For deep learning features, any user-uploaded images will be automatically deleted from the cloud server after 24 hours. The 24-hour retention of data is to prevent users from losing editing results if they exit the application before cloud processing is complete. Images and videos generated based on user uploaded images or videos will be automatically deleted from the cloud server after 15 days.

1.2.2 Improve our application and quality

To ensure the quality of services and application stability, and to track and improve our application content, we use Google Firebase to collect, analyze, and correct faults and errors, helping to combat illegal use or abuse of the application. We will collect statistical data on user usage of features and ensure that this data does not track individual users but is based on users.

1.2.3 Process and respond to user support communications

To assist users in resolving issues encountered during use, we will collect identity information and contact details (such as name and email address) you provide to us, as well as the specific content of your communication or request. We will use this data solely for user support, and it will be deleted within 1 year after the case is closed.

1.2.4 Analyze your usage information, including your preferences, interests, and behaviors when using our products.

We will promote our products and services to more creators similar to you and reach inactive users through our advertisements. The effectiveness of our activities is measured by analyzing relevant data from usage information, making our advertisements more relevant.

This data includes your identifiers and internet and network activity information (such as IDFA or AAID, and IP address), information about your interactions with the application, and other relevant information about your use of the application.

IDFA (on iPhone or iPad) and AAID (on Android devices) are unique device identifiers provided by your device's operating system, allowing advertisers to track and identify users for advertising purposes.

How to disable this tracking?

In iOS and iPadOS 14.5, go to "Settings" > "Privacy & Security" > "Tracking," and tap to turn off or on "Allow Apps to Request to Track" or "Allow Tracking for Specific Apps." On earlier versions of iOS or iPadOS, go to "Settings" > "Privacy" > "Advertising," and turn on the "Limit Ad Tracking" button to manage.

2. How We Share, Transfer, and Disclose Personal Information

2.1 Sharing

Except in the following circumstances, we will not share your personal information with any third party outside of our platform without your consent:

To provide our services to you. We will share your information with partners and other third parties to enable the functions of our products and services, allowing you to use the services you need normally. This includes payment institutions providing payment services, partners providing data services (including online advertising monitoring, data statistics, data analysis), partners providing advertising services, and other service providers.
Necessary sharing with affiliates. To facilitate providing you with consistent services based on a unified account system, and to enable unified management, recommendations, system and account security, your personal information will be necessarily shared between us and our affiliates.
To achieve the purposes described in Part I "How We Collect and Use Personal Information" of this policy.
To fulfill our obligations and exercise our rights under this policy or other agreements we have with you.
To share with partners who entrust us with promotion, to help them understand the coverage and effectiveness of their promotions. For example, we may inform the partner of how many people viewed their promotional information or purchased their products after seeing such information, or provide them with non-personally identifiable statistical information to help them understand their audience or customers.
Within the scope permitted by laws and regulations, to comply with the law, protect the interests, property, or safety of us and our affiliates, partners, you, other platform users, or the public from harm, such as preventing fraud and reducing credit risk. However, this does not include selling, renting, sharing, or otherwise disclosing information for profit in violation of the commitments made in this policy.
As per your legal requirements or with your authorized consent.
According to the provisions of a single service agreement signed with you (including electronic agreements signed online and corresponding platform rules) or other legal documents.
To enhance our security management and technical research capabilities and promote service security and technical levels to provide users with better services, we will share data processed through de-identification or anonymization with research institutions, scientific research institutes, universities, etc., within a reasonably necessary scope, ensuring legitimate purposes and data security. Without your explicit authorization, we will not share information that can identify your personal identity with the aforementioned institutions.
To provide based on compliance with laws and regulations for the public interest.
If there is a change in the type of personal information transferred to third parties, the identity of the third party receiving the data, etc., we will notify you in an appropriate manner and obtain your consent.

2.2 Transfer

We will not transfer your personal information to third parties without your authorization. If we undergo a merger, acquisition, asset transfer, division, dissolution, bankruptcy declaration, or similar situations, your personal information may need to be transferred (e.g., deleted if bankrupt without a successor). We will inform you of the relevant situation, inform you of the name and contact information of the recipient, and require the new recipient to continue to protect your personal information in accordance with laws and regulations and no less than the requirements of this policy.

2.3 Disclosure

We will only disclose your personal information in the following situations and under the premise of taking industry-standard security protection measures:

Based on your request, disclosing information you specify in a manner you explicitly consent to;
When required by laws, regulations, mandatory administrative enforcement, or judicial requirements, we may disclose your information based on the required type and manner of disclosure. Under the premise of compliance with laws and regulations, when we receive such disclosure requests, we will require the recipient to provide corresponding legal documents, such as subpoenas or investigation letters. We firmly believe that requests for information disclosure should be as transparent as possible within the legal framework. We carefully review all requests to ensure they have a legal basis and are limited to data that law enforcement agencies have the legal right to obtain for specific investigation purposes.

2.4 Exceptions to Prior Authorization for Sharing, Transferring, and Disclosing Information

In the following situations, sharing, transferring, and disclosing your information does not require your prior authorization and consent:

a. Related to national security and national defense security;
b. Related to public safety, public health, and significant public interests;
c. Related to crime investigation, prosecution, trial, and judgment execution, etc., in judicial or administrative enforcement;
d. To protect your or other individuals' life, property, and other major legitimate rights and interests, but it is difficult to obtain your consent;
e. Information you disclose to the public on your own;
f. Information collected from legally disclosed information, such as legal news reports, government information disclosure, etc.

According to legal provisions, sharing, transferring, and disclosing personal information that has been de-identified and ensuring that the data recipient cannot restore and re-identify the information subject does not belong to the behavior of external sharing, transferring, and public disclosure of personal information. The preservation and processing of such data will not require separate notification and consent from you.

3. How We Store Personal Information

Your personal data may be processed through automated and non-automated means and may be stored on our premises and on the servers of our service providers. The technical and organizational measures we take are designed to prevent the loss, misuse, and alteration of your personal data.

Personal data processed for the aforementioned purposes (including personal facial images) will be retained no longer than necessary for the stated purposes, and images uploaded to the application will be deleted from our servers after 24 hours. Images or videos generated by the application based on the pictures or videos you upload will be deleted from our servers after 15 days.

Why do we need to store user image data (including user faces) for 24 hours?

Because after users upload images to the server, the server needs time to process them. During processing, errors may occur in the model, requiring reprocessing from the original image. Additionally, users may need to recreate results or switch devices to redownload results. Therefore, we store user images for 24 hours after the first download to ensure service quality and reduce failure situations.

Personal data processed for the stated purposes will be retained for no more than 2 (two) years after the termination of the agreement. Unless there is any legal obligation to set a longer data retention period, the processed personal data will be deleted or anonymized at the end of these periods.

4. How We Protect Personal Information

We take the security of your personal information very seriously and strive to take reasonable security measures (including technical and managerial aspects) to protect your personal information from misuse or unauthorized access, disclosure, use, modification, damage, loss, or other risks.

We will use encryption technology, anonymization, and other reasonably feasible means not lower than industry standards to protect your personal information, and use security protection mechanisms to prevent malicious attacks on your personal information.
We will establish a dedicated security department, security management system, and data security processes to ensure the security of your personal information. We implement strict data usage and access policies to ensure that only authorized personnel can access your personal information, and conduct timely security audits on data and technology.
Despite the above reasonable and effective measures and compliance with relevant legal standards, please understand that due to technical limitations and various possible malicious means, it is impossible to guarantee 100% information security in the internet industry, even with our best efforts to enhance security measures. We will do our best to ensure the security of the personal information you provide to us.
You acknowledge and understand that the systems and communication networks you use to access our services may encounter problems due to factors beyond our control. Therefore, we strongly recommend that you take proactive measures to protect the security of your personal information, including but not limited to using complex passwords, regularly changing passwords, and not disclosing your account passwords and related personal information to others.
We will develop emergency response plans and immediately activate them in the event of a user information security incident to mitigate the impact and consequences of such incidents. In the event of a user information security incident (leakage, loss), we will promptly inform you in accordance with legal and regulatory requirements: the basic situation and possible impact of the security incident, the measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you. We will promptly notify you of the incident via push notifications, emails, letters, SMS, and related forms. If it is difficult to inform you individually, we will take reasonable and effective ways to issue announcements. At the same time, we will also report the handling of user information security incidents to the relevant regulatory authorities as required.
Once you leave 【BodyAI】and related services to browse or use other websites, services, and content resources, we will have no ability or direct obligation to protect any personal information you submit on software or websites outside of 【BodyAI】, regardless of whether you log in, browse, or use the aforementioned software or websites based on links or guidance from【BodyAI】.

5. How to Exercise Rights Related to Personal Information

We highly value your management of personal information and strive to protect your rights to access, copy, correct, supplement, delete, withdraw consent, cancel your account, make complaints, report issues, and set privacy functions related to your personal information, enabling you to safeguard your privacy and information security.

5.1 Access, Copy, Transfer, Correct, Supplement, and Delete Your Personal Information

During your use of our services, we will provide you with the appropriate settings to manage your personal information based on specific circumstances, allowing you to access, copy, transfer, correct, supplement, delete, or withdraw your related personal information.

5.1.1 Access Personal Information

Enter the platform and click on the avatar;
Conduct information query access.

5.1.2 Obtain a Copy of Personal Information

You have the right to obtain a copy of your personal information. If you need a copy of the personal information we have collected about you, you can contact the platform through online customer service. The customer service representative will verify your personal information, and we will need you to provide your name, ID number, a photo of you holding your ID, registered mobile number, and proof of mobile network access. Once your identity is confirmed, we will provide a copy of your personal information through the app's online customer service. We will provide your personal information copy as per your request, provided it complies with relevant legal regulations and is technically feasible.

5.1.3 Transfer Personal Information

If you need to transfer the personal information we have collected and stored, we will provide a transfer path according to legal and regulatory requirements.

5.1.4 Correct, Supplement, Delete Personal Information

You can correct, supplement, or delete your personal information in the following ways:

a. Correct/Supplement account information: Click on the avatar account area to operate;
b. Access/Copy/Delete historical conversations: Click on the dialogue box-click on a single conversation to operate.

If you cannot complete the operation through the above methods, you can contact us via 【】.

5.2 Cancel Account

You can apply to cancel your account, and the company will delete or anonymize your personal information. You can go to [My] - [Settings] - [Apply for Cancellation] to enter the account cancellation interface or contact platform customer service. Please understand that due to technical limitations, legal or regulatory requirements, we may not be able to meet all your requests. We will respond to your request within 15 days. When you apply for account cancellation, we will require identity verification to ensure account security. After account cancellation, we will delete or anonymize your personal information. Unless otherwise stipulated by laws and regulations, when you correct, delete your personal information, or apply to cancel your account, we may not immediately correct, delete, or anonymize the corresponding information from the backup system, but will correct, delete, or anonymize this information during backup updates.

5.3 Withdraw Consent

You can choose whether to disclose information. Some information is necessary to use the platform services, but most other information is provided at your discretion. You can change the scope of information you authorize us to collect or withdraw your authorization by deleting information, disabling device functions, etc. After you withdraw authorization, we will not be able to continue providing the services corresponding to the withdrawn authorization, nor will we process your corresponding information. However, your decision to withdraw authorization will not affect the information processing previously conducted based on your authorization. You can withdraw consent to the privacy policy and user agreement and exit via [My] - [Settings] - [About] page by clicking "Withdraw Consent Agreement" at the bottom.

5.4 Change the Scope of Your Authorized Consent

Please be aware that to use the platform services normally, you need to enable relevant permissions on your device and/or provide basic personal information. If you wish to disable the aforementioned device permissions, you can do so through the settings page on your device. If you wish to withdraw your prior authorization for certain functions within the platform services, you can do so through the platform's settings page or the settings page on your device. After you change your consent scope, we will no longer collect and use your corresponding personal information. However, please understand that we will not be able to provide you with the corresponding products and/or services. You agree that changing the scope of your authorized consent or withdrawing consent will not affect our processing of your personal information based on your previous authorized consent.

5.5 Complaints and Reports

You can make complaints or reports according to our published procedures. If you believe your personal information rights may have been violated or have clues about violations of personal information rights, you can go to [My] - [Contact Customer Service] to enter the user feedback interface. We will verify and respond to your complaint and report within 15 days.

5.6 Access Privacy Policy

You can view the full content of this privacy policy in your personal account under [My] - [Settings] - [Privacy Policy].

5.7 Notification of Cessation of Operations

If we cease operations, we will promptly stop collecting your personal information and notify you of the cessation of operations through individual notifications or announcements. We will delete or anonymize your personal information held by us.

6. Protection of Minors

We place great importance on the protection of minors.

You understand and promise that the age information you provide to us is true. If we determine through technical means that you may be a minor, we have the right to impose restrictions on your account, including but not limited to limiting your account's browsing, use of specific functions, limiting consumption behavior, stopping service provision, etc. These restrictions are to protect the physical and mental health and safety of minors, and you irrevocably waive any claims against us. If you believe you are not a minor, please undergo real-name verification. We will immediately lift the restrictions and restore your account to its original state upon verifying your identity.

We recommend that if you are a minor under 18 years old, you should read this policy in the company of your guardian and use the services in minor mode only after both you and your guardian agree to the full content of this policy. If we have evidence that you have violated the above agreement, we have the right to stop providing our services.

7. Revisions and Notifications of the Privacy Policy

Due to business development and regulatory updates, we may update or modify this policy from time to time. We will publish the updated privacy policy on this page, but we will not reduce your rights under this policy without your explicit consent. Such changes constitute part of this policy. Please read the updated policy carefully. When you agree and continue to use our products and services, it means you agree to the content of this policy (including updated versions). In case of significant or substantive changes, we will notify you prominently based on the specific situation (including but not limited to sending you update notifications, pop-ups on the page, or in-site messages).

Significant or substantive changes include but are not limited to the following:

(1) Significant changes in our service model, such as changes in the purpose of processing personal information, the type of personal information processed, and the way personal information is used;
(2) Major changes in ownership structure, organizational structure, etc., such as changes in ownership due to business adjustments, bankruptcy mergers, etc.;
(3) Changes in the main recipients of personal information sharing, transfer, or public disclosure;
(4) Significant changes in your rights to participate in personal information processing and how they are exercised;
(5) Changes in the department responsible for personal information security, contact methods, and complaint channels;
(6) When the personal information protection impact assessment report indicates a high risk.

8. How to Contact Us

We will strictly protect your personal information in accordance with this privacy policy. If you have any complaints or reports about personal information security, or if you have any questions, comments, or suggestions about this privacy policy or your information, please send an email to AIDreamerStudio@outlook.com.After verifying your user identity, we will promptly respond to your complaint and report.