Privacy Policy

This Privacy Policy exists to explain clearly what data HypeReel ("we", "us", "our") collects, why we collect it, and how it is used, stored, and shared — so you can make informed choices before and while using the HypeReel mobile application (the "App") and its related services (the "Service").

For the purposes of this policy, "Personal Data" means any information that can identify or be reasonably linked to a specific individual, in line with how that term is defined under applicable data protection law.

This policy works together with our Terms of Service — please read both. If you disagree with anything described here, we ask that you refrain from using the Service.

HypeReel gathers information in three ways: directly from you when you interact with the App; automatically through your device and usage activity; and occasionally from third parties such as analytics partners or vendors acting on our behalf. What we actually collect depends on which features you use — not every data point listed below applies to every user or every session.

The information you actively give us falls into these categories:

• Uploaded images and videos. Any files you upload are used exclusively to carry out the specific creation task you triggered — nothing else.
• Uploaded images and videos — gender preference. Some creative features let you select a gender option (Female, Male, or Other) to customize generated results. This choice is used solely for that purpose and is never used to profile or identify you.
• Account details. When you create an account, we collect your email address and generate an internal identifier to manage your account.
• Purchase and subscription data. When you make an in-app purchase, we may receive limited transactional metadata — such as subscription tier, payment status, transaction ID, and associated URLs. Your actual card number is never shared with us; all payment processing goes through Apple App Store or Google Play directly.
• Support messages. If you reach out for help, we receive your name, email address, and the content of your message so we can respond effectively.
• Anything else you choose to share. Any other information you voluntarily submit while using the Service.

Visual Content Processing

When you upload images, videos, or other visual content to HypeReel — including content featuring people or faces — we process that material to generate the AI-powered output you requested. This may involve automated analysis such as detecting faces, subject placement, pose, or composition, all of which is performed solely to fulfill your creation request (e.g., image-to-video, first/last-frame generation, template effects, text-to-image, or image-to-image transformations).

Facial information gathered during this process is never used to identify you, verify your identity, conduct surveillance, power advertising targeting, or build any kind of biometric profile.

Faces in Your Uploads

HypeReel is built for AI video and image creation. When you upload photos containing people or faces, we may carry out limited technical analysis — such as confirming whether a face or human subject is present — to produce consistent, high-quality results across frames, scenes, or template sequences.

This analysis exists purely to serve your creative request, for example animating a still photo or keeping a person's appearance consistent throughout a generated video. It is not used to identify or authenticate you, and it plays no role in surveillance, tracking, advertising, profiling, or biometric analysis of any kind.

We do not build, store, or retain face templates, facial geometry records, biometric identifiers, or any similar data that could be used to recognize an individual.

AI Partners & Data Handling

Delivering AI content generation, content safety review, and related features requires us to send relevant data — including images, videos, text prompts, generation parameters, template selections, task details, and necessary technical metadata — to our servers and to third-party AI service providers.

The third-party AI services we currently work with may include:

• OpenAI — for content safety review and text/image-related AI processing;
• Alibaba Cloud Model Studio — for AI video, image, or related generation processing;
• Google Gemini / Google AI — for large language model-related processing;
• xAI / Grok — for large language model-related processing.

Each of these providers receives only what is needed to complete your requested generation or safety review — nothing more. We do not authorize them to use your images, videos, facial information, or derived analysis for purposes such as identity recognition, identity verification, surveillance, tracking, advertising targeting, building a facial recognition database, or constructing a biometric profile.

To understand how these providers handle faces, biometric data, data retention, model training, and security protections in their own right, please consult their official documentation:

• OpenAI:
  • "Respect privacy" section of the Usage Policies;
  • "Our commitments" and "Model training FAQ" sections of Enterprise Privacy at OpenAI.
  • https://openai.com/policies/usage-policies/
  • https://openai.com/enterprise-privacy/
• Alibaba Cloud Model Studio:
  • "Privacy protection" section of Security certifications and privacy.
  • https://www.alibabacloud.com/help/en/model-studio/privacy-notice
• Google Gemini / Google AI:
  • Section 1 "Do not engage in dangerous or illegal activities, or otherwise violate applicable law or regulations" of the Generative AI Prohibited Use Policy;
  • "How We Handle Data" section of Gemini API Abuse Monitoring.
  • https://policies.google.com/terms/generative-ai/use-policy
  • https://ai.google.dev/gemini-api/docs/usage-policies
• xAI / Grok:
  • "2. Personal information we collect (Notice at collection)" section of the Privacy Policy;
  • "3. How we may use personal information" section of the Privacy Policy.
  • https://x.ai/legal/privacy-policy

Regardless of which AI partner is involved, your uploaded images, videos, facial information, and any derived analysis data are never sold or rented. We do not use them to train our own machine learning models unless you have given us explicit consent to do so.

How Long We Keep This Data

Uploaded images, videos, prompts, generation parameters, outputs, and related task data are processed only for as long as needed to deliver the Service. Facial-analysis data, biometric templates, and facial geometry records are not stored — any facial information used during a generation task is discarded once that task is finished.

Generated results and associated task data may be held for a reasonable period to let you view your history, support content moderation, troubleshoot errors, handle user requests, and meet legal requirements. You can contact us at any time to ask us to delete relevant data.

What We Never Do With Your Images

To be explicit: we do not sell or rent your uploaded images, videos, facial information, or any derived data. We do not apply them to identity verification, authentication, surveillance, tracking, or advertising targeting, and we do not use them to build biometric profiles. We do not feed your uploaded images, videos, or facial information into our own machine learning models without your explicit prior consent.

Safety Filters & Flagging

HypeReel uses automated screening to prevent the generation or display of content that breaches our Terms of Service — including nudity, violence, illegal material, or other harmful content. Every template and result page includes a visible Report option so you can flag anything that concerns you.

When our systems flag a generation request or output as a potential policy violation, the App may show you an in-app notification, stop the generation or hold back the result, and — where appropriate — return any credits you spent on that request.

Beyond what you type or upload, HypeReel collects certain data automatically as you interact with the App — always subject to applicable consent requirements.

Device & Activity Signals

• Technical identifiers and device attributes, including IP address, device ID, operating system, language preference, and network type;
• How you engage with the App — which features you tap, how often, and when;
• Your App version and the App Store region associated with your device.

Purchase Records

• Your subscription status and a limited set of transaction metadata (such as subscription tier and payment confirmation status) — never your full card details.

All actual payment processing takes place on Apple App Store or Google Play. We receive only what those platforms pass along; your full financial details never reach us.

Ad & Attribution IDs

• Device-level advertising identifiers — such as Apple's IDFA or IDFV, or Google's Advertising ID (GAID) — collected only where your device settings and applicable law permit.

You can turn off ad tracking at any time through your device's settings:

• iOS: Settings > Privacy & Security > Tracking
• Android: Settings > Privacy > Ads (or Google Settings > Ads > Delete advertising ID)

Opting out may still result in us receiving limited, non-identifying aggregated attribution signals.

Crash & Performance Logs

• Event timestamps, crash reports, error diagnostics, and performance metrics used to keep the Service stable, secure, and continuously improving.

App Permissions

Certain features require your permission to work. Depending on what you use, the App may ask for:

• Access to your photos or media library, so you can select files to upload;
• Camera access, to capture photos or videos directly within the App;
• Notification permission, for delivery of service updates or subscription reminders;
• Tracking permission (e.g., IDFA on iOS, Advertising ID on Android), requested with your consent and used only for attribution and measurement.

You can adjust or withdraw any of these permissions in your device settings at any time. Turning off certain permissions may reduce what you can do in the App.

When you use HypeReel, your Personal Data is put to work for a defined set of purposes — running the Service and its features, fulfilling your content generation requests, answering your support questions, monitoring and improving App performance, detecting and stopping fraud or abuse, meeting our legal obligations, enforcing our Terms of Service, and carrying out anything else we tell you about at the point of collection or obtain your consent for.

Where the law requires us to identify a legal basis before processing, we rely on one or more of the following: the need to perform our agreement with you and deliver the Service; your explicit consent where we've asked for it; our legitimate interests in operating and improving HypeReel, provided those interests don't override your rights; or a legal obligation we must fulfil.

Any sharing of Personal Data is strictly limited to what is lawful, genuinely necessary, and proportionate to the purposes set out in this policy.

Vendors We Work With

Running HypeReel means working with a range of specialist companies. We share Personal Data with them only to the extent needed for the specific job they perform on our behalf, and each is bound by contractual obligations covering confidentiality and data security. These vendors fall into categories such as:

• App analytics and performance measurement;
• Advertising attribution and campaign measurement;
• Cloud infrastructure and hosting;
• Sign-in and identity management;
• Crash reporting and App stability diagnostics;
• Customer support and user communication.

When Law Requires Disclosure

There are circumstances in which we may be required — or permitted in good faith — to share Personal Data without your prior notice, including to:

• Satisfy applicable laws, regulations, legal process, or valid government requests;
• Uphold and enforce our Terms of Service, policies, or contractual commitments;
• Identify, investigate, or resolve security incidents, fraud, or technical vulnerabilities;
• Safeguard the rights, property, or safety of our users, ourselves, or the wider public, as the law allows.

Corporate Changes

Should HypeReel be involved in a merger, acquisition, asset sale, reorganization, or insolvency proceeding, your Personal Data may form part of what is transferred. Where required by law, we will take reasonable steps to let you know and to ensure your data continues to be appropriately protected.

HypeReel and its partners rely on cookies, SDKs, and similar technologies to understand how the App is used and to support measurement and advertising activities. The technologies in play generally fall into three groups: those essential for core functionality, those that measure usage and performance, and those used for marketing or attribution purposes — the last of these only where applicable law allows.

Your device settings give you control over tracking preferences. Switching off certain technologies may affect how some features of the App work.

How We Protect Your Data

HypeReel applies reasonable technical and organizational measures to guard Personal Data against unauthorized access, loss, misuse, or modification. However, no method of data transmission or storage is completely foolproof, and we are unable to make absolute guarantees about security.

How Long We Keep Your Data

Personal Data is held only for as long as it is needed — to deliver the Service, satisfy legal requirements, resolve disputes, and uphold our agreements. How long we keep specific data depends on what it is and why it was collected. Once you delete your account or ask us to erase your data, we will delete or anonymize it unless a law requires us to keep it longer.

Deleting Your Account

You can remove your account at any time from the Account page inside the App. This permanently deletes your Personal Data, subject to any legally mandated retention obligations. Keep in mind that deleting your account does not cancel any active subscriptions on Apple App Store or Google Play — those must be cancelled separately.

HypeReel is designed for adults and is not directed at anyone under 18 (or the higher minimum age set by applicable local law). We make no knowing effort to collect Personal Data from children, and we do not want to. If you think a child has somehow submitted their data to us, please get in touch straight away — we will look into it promptly and take the necessary steps to remove the information.

To build and run a capable AI creative app, we depend on a set of external SDKs, APIs, and specialist service providers (collectively "Third-Party Services"). These partners power capabilities such as AI content generation, content safety screening, account sign-in, payment verification, crash diagnostics, attribution measurement, and customer support — none of which we could deliver entirely in-house.

Each provider is authorized to handle personal data only to the degree needed to perform their specific role, and each is required to maintain appropriate confidentiality, security, and data-protection standards.

The functional categories covered by these partners include:

• AI-driven content generation;
• AI content safety screening;
• Cloud computing, hosting, and data storage;
• Account authentication and identity management;
• App stability monitoring, crash reporting, and diagnostics;
• Usage analytics, performance measurement, and ad attribution.

Below is the current list of Third-Party Services integrated into HypeReel:

Each of these companies maintains its own privacy practices, which are outside our control. We recommend reviewing their policies directly to understand how they handle your data. This list will be kept up to date as our use of third-party services changes.

Users in the European Economic Area, the United Kingdom, or Switzerland benefit from the protections of the General Data Protection Regulation (GDPR) and related national data protection laws. Those rules govern how we handle your Personal Data.

Why We're Allowed to Process Your Data

Every instance of processing rests on at least one valid legal ground. Depending on the activity, we rely on:

• Contractual necessity — processing required to actually deliver the Service you signed up for;
• Your consent — where we have specifically asked for it and you have given it;
• Legitimate interests — our reasonable operational or business interests, provided they do not override your fundamental rights;
• A legal obligation we are required to meet.

Rights Available to You

Depending on your situation and applicable law, you may be entitled to:

• Obtain a copy of the Personal Data we hold about you;
• Have inaccurate or incomplete data corrected;
• Ask us to erase your data;
• Restrict how we process your data, or object to certain uses of it;
• Receive your data in a portable format;
• Withdraw any consent you have given, at any time, without affecting what was done before.

Send your request to us via the Contact section at the end of this policy. If you are not satisfied with our response, you have the right to raise a complaint with your local data protection authority.

California residents are covered by the California Consumer Privacy Act (CCPA), as strengthened by the California Privacy Rights Act (CPRA). Together, these laws give you meaningful control over how your Personal Data is handled.

What We Collect

The categories of Personal Data we collect from California residents are the same ones described throughout this Privacy Policy, used for the same purposes explained above.

Your California Rights

As a California resident, you have the right to:

• Know which Personal Data we collect about you, and how we use, disclose, and share it;
• Ask us to delete your Personal Data, subject to certain legal exceptions;
• Request that inaccurate Personal Data be corrected;
• Opt out of any sale or sharing of your Personal Data for targeted advertising, where applicable;
• Exercise all of the above without fear of being penalized or treated differently for doing so.

Opting Out of Data Sharing

To the extent required by California law, you may direct us not to sell or share your Personal Data for the purpose of targeted or cross-context behavioral advertising.

Acting Through a Representative

If you would prefer to have someone else submit a request on your behalf, you may designate an authorized agent to do so. We may need to verify both your identity and the agent's authorization before acting on the request.

To make a CCPA/CPRA request, reach out using the contact details at the bottom of this page.

This Privacy Policy is reviewed and updated from time to time to reflect changes to our practices, legal requirements, or the Service itself. When an update meaningfully affects your rights, we will notify you or seek your consent as the law requires. The revised policy takes effect on the date shown at the top of this page — so checking back occasionally is a good habit.