Privacy Policy

▶ Introduction

Welcome to AIToning (referred to as "Platform" or "the Company"). AIToning is an AI-powered online platform for face-changing and virtual dress-up experiences. We use advanced artificial intelligence algorithms to create unique and personalized content.

This Privacy Policy explains how we collect, use, and protect your information. By accessing or using AIToning's services—including applications, products, and content (collectively, "Services")—you consent to the practices described below.

If you do not agree with this policy, please discontinue use of our Services immediately.

▶ How It Works

Step 1: Upload - You upload a photo and choose a template.

Step 2: Personalization - A copy of our AI model (stable diffusion) is temporarily retrained using your upload.

Step 3: Avatar Creation - Your personalized avatar is generated.

Step 4: Deletion - Immediately after generation, your photo and the temporary model are permanently deleted.

Usage Rules:

• Avatars must not contain nudity.
• You must have permission to use photos of others.
• Your data is not used to train public AI models or shared for other products.

Content Moderation: We actively moderate content. Report concerns to: penlawenidi@gmx.com

▶ Information We Collect

Platform Usage Information

We collect data related to your activity—clicks, downloads, shares, video edits, and other interactions—to enable platform functionality and improve user experience.

Device and Log Information

When you use our Services on Android, we automatically gather:

• Device ID, Android ID, GAID (Google Advertising ID), device model, language, country
• Android version, API level, manufacturer information
• IP address, network type (WiFi/mobile), network quality
• App version, installation source, usage statistics
• Crash reports and error logs (anonymized)

This information helps ensure security, optimize performance, and support account safety.

Feedback and Contact Information

When you contact us, we collect your submitted materials and contact details (e.g., email, phone number) to respond and provide support.

Face Recognition Data

When using face-editing features:

✓ We detect facial features only to apply effects.
✓ We do not store photos, videos, or facial data.
✓ Renderings are returned directly to you and not shared.
✓ If editing someone else's face, you must have their consent.

Cloud Processing

To enable fast and accurate media processing, materials are briefly uploaded to cloud servers. These are used only for processing and are not stored or shared.

▶ Android Permissions

Our Android application may request the following permissions:

Permission	Purpose	Required
READ_EXTERNAL_STORAGE	Access photos and media for editing	Yes
WRITE_EXTERNAL_STORAGE	Save edited content to device	Yes
CAMERA	Capture photos and videos	Optional
INTERNET	Download materials and enable services	Yes
ACCESS_NETWORK_STATE	Check network connectivity	Yes
WAKE_LOCK	Prevent device sleep during processing	Optional
VIBRATE	Provide haptic feedback	Optional

You can manage these permissions in your Android device settings. Disabling required permissions may limit functionality, while optional permissions can be disabled without affecting core features.

▶ Google Sign-In Integration

Our Android application uses Google Sign-In for user authentication. When you choose to sign in with Google:

We receive basic profile information (name, email, profile picture) that you authorize us to access
Google's privacy policy also applies to the authentication process
You can manage your Google account permissions at any time through your Google account settings

▶ How We Use Your Information

Service Improvement:: Analyze usage to enhance performance and usability.
Security:: Protect accounts, detect abuse, and prevent illegal activity.
Communication:: Send important notices about policies, terms, or account changes.
Legal Compliance:: Fulfill regulatory obligations and respond to legal requests.
Android-specific:: Optimize app performance for different Android versions and devices.

▶ Data Storage on Android

On your Android device, we may store data in the following locations:

Internal Storage	App preferences, cache files, temporary data
External Storage	User-generated content, downloaded materials (with permission)
Shared Preferences	App settings and user preferences
SQLite Database	Structured app data (if applicable)

You can clear this data by uninstalling the app or using Android's app data clearing feature.

▶ Data Deletion

You have full control over your data:

Delete records anytime via app settings.
Clear app data through Android system settings.
Uninstalling the app removes all local data.
Deleted data cannot be recovered.
Request account deletion by contacting support.

Contact support with any deletion-related questions.

▶ Cookies & Tracking Technologies

We use cookies, web beacons, and similar tools to:

✓ Authenticate users
✓ Remember preferences
✓ Analyze traffic and trends
✓ Measure ad effectiveness
✓ Provide personalized content

On Android, we may also use:

• Device identifiers for app functionality and security
• Local analytics for app performance optimization

▶ Data Sharing

Important: We do not sell your personal information.

We may share data only in the following circumstances:

With service providers who assist in operating and improving our Services—under strict confidentiality and data protection agreements.
When required by law, to protect rights, or in emergencies.
Google Sign-In may collect and process authentication data according to Google's privacy policy.

In cases of merger or acquisition, new owners must continue to abide by this policy.

▶ Data Protection & Security

We implement physical, electronic, and managerial procedures to protect your data, including:

Encryption	SSL/TLS for data in transit
Android Keystore	Sensitive data storage
App Signing	Integrity verification
Security Controls	Training and policy reviews
Code Obfuscation	ProGuard/R8 to protect app integrity

While we strive to protect your data, no internet transmission or storage method is 100% secure. We will notify you of any breaches as required by law.

▶ Your Rights

Depending on your location, you may have the right to:

✓ Access or request a copy of your data
✓ Opt out of marketing profiling
✓ Correct inaccurate information
✓ Delete your data
✓ Restrict processing
✓ Data portability
✓ Withdraw consent
✓ Manage Android permissions and advertising preferences

To exercise any rights, contact us below. We may ask for identity verification before processing requests.

▶ Legal Basis for Processing

We process your data based on:

Legitimate interests: e.g., improving services, security
Legal obligations: e.g., tax, regulatory requirements
Vital interests: e.g., responding to security emergencies
Consent: e.g., for optional permissions and features

▶ Third-Party SDKs and Libraries

Our Android application may include third-party SDKs and libraries that collect data according to their own privacy policies:

Google Sign-In SDK for authentication
Social media SDKs (Facebook, Instagram, etc.) for social login

Please review the privacy policies of these third-party services for more information about their data practices.