Privacy Policy

1. Fundamental Principles of Data Integrity

SpellPic is built with privacy-preserving cloud computing and client isolation architecture:

• No Unauthorized Foundation Training: Your uploaded reference images, custom prompts, and privately rendered video outputs are never sold to third-party data brokers, nor are they ingested into open public foundational datasets without your explicit permission.
• Cryptographic Isolation: User generation galleries and cloud storage containers operate within cryptographically partitioned storage buckets to prevent cross-account data leaks.
• Ephemeral Processing Option: When using real-time generative camera filters or draft previews, temporary frame matrices are processed ephemerally in GPU memory and purged immediately following inference.

2. Information We Process

To operate our neural diffusion engines, fluid motion synthesizers, and user account systems, SpellPic collects and processes the following information:

a. Generative Inputs & Creative Media

• Text Prompts & Parameters: The descriptive phrases, negative prompts, seed values, CFG weights, aspect ratio settings, and artistic style preferences you configure.
• Uploaded Reference Assets: Images or video clips you upload for image-to-image synthesis, face-enhancement, motion-brush masking, or LoRA style reference tuning.
• Synthesized Outputs: The resulting 8K high-resolution images, video animations, and time-lapse clips generated by our GPU infrastructure for display and download in your account gallery.

b. Account Identifiers & Subscriptions

• Authentication Credentials: Email address, username, or anonymized federated authentication identifiers (such as Sign in with Apple or Google Identity Services).
• Membership & Credit Allocations: Information regarding your active subscription tier (Pro / VIP / Creator), available GPU generation credits, and token usage history.
• Payment Confirmation Records: Transaction identification tokens and timestamps handled through authorized application stores (Apple App Store, Google Play Store). We never store or process raw credit card details on our servers.

c. Device Diagnostics & Telemetry

• Device Performance Metrics: Hardware specifications, operating system version, app build number, and client-side rendering latency measurements used to calibrate high-framerate video playback.
• De-Identified Crash Logs: Technical stack traces and error reports used exclusively to resolve bugs and ensure GPU cluster reliability.

3. Neural Security & Data Safeguards

We maintain comprehensive defense-in-depth protections across all layers of our generation pipeline:

• TLS 1.3 Encryption in Transit: All communications between your client device and our cloud inference nodes are encrypted with modern cryptographic suites.
• AES-256 Storage Encryption: User image vaults, persistent generation histories, and metadata are secured using military-grade AES-256 GCM at rest.
• Automated Content Safety Filters: Automated neural safety classifiers evaluate incoming generation requests strictly to prevent severe societal harms, including non-consensual imagery, child exploitation, violent extremism, or hate speech, while safeguarding your creative freedom.

4. User Rights, Account Deletion & Erasure

You maintain full sovereignty over your creative assets and account profile:

• Gallery Asset Purge: You may delete individual generated images, prompt histories, or synthesized videos directly from your in-app studio at any time.
• Complete Account Deletion & Right to Erasure: You have the right to request permanent deletion of your SpellPic account and all associated cloud-stored media. Upon receiving your request via plain email at [email protected], your personal account credentials, credit balances, and stored images will be permanently purged from active production databases within 30 days.
• Global Privacy Framework Compliance: Whether you reside under the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), or other regional regulations, we honor your rights to access, rectify, export, and delete your personal data.

5. Third-Party Infrastructure Boundaries

SpellPic collaborates exclusively with certified enterprise infrastructure partners (such as high-performance cloud GPU providers) operating under strict Data Processing Agreements (DPAs) that prohibit any secondary monetization or unauthorized exploitation of your media assets.

6. Children's Privacy

SpellPic is engineered strictly for individuals aged 18 and older (or the age of legal majority in your jurisdiction). We do not knowingly solicit, collect, or store personal data or images from children or minors under 18 years of age. If we become aware that an account was created by a minor, the account and its associated generation records will be immediately terminated and wiped.

7. Policy Amendments

We may update this Privacy Policy periodically to reflect technological improvements, new AI generative features, or regulatory updates. Updated versions will be published on this page with an updated effective date.