Privacy Policy

• Account info: your email address, display name, and avatar (via Clerk, our identity provider).
• Content you submit: photos, videos, and prompts you upload to generate output. These are processed by our AI providers and stored on our infrastructure in your private user-scoped folder.
• Generation history: a record of the jobs you run (template id, status, credit cost, timestamp) so we can show your library and bill credits correctly.
• Technical data: device model, OS version, language, and crash diagnostics. We do NOT collect IDFA or any tracking identifier, and we do NOT share data with advertising networks.

• To provide the App's features: render generations, show your library, debit/refund credits.
• To prevent abuse: rate-limiting, content moderation, and investigating reports.
• To support you: respond to messages you send us at support@clickefy.ai.
• To meet legal obligations: tax records, law-enforcement requests with valid legal process, mandatory reporting (e.g. CSAM).

• Identity: Clerk (authentication).
• Hosting & storage: Cloudflare (Workers, R2 object storage), Neon (Postgres database).
• AI providers: Google (Gemini family), Kling.
• Subscriptions & billing: RevenueCat, Apple, Google.

We sign data-processing agreements with each provider where applicable. We do not sell your personal data.

Our infrastructure runs on globally-distributed networks (Cloudflare's edge, Neon's US/EU regions). Your data may be processed in countries other than the United Arab Emirates. For transfers regulated by the UAE PDPL we rely on the cross-border transfer mechanisms permitted by Article 22 of the PDPL (transfers to jurisdictions with an adequate level of protection, transfers under standard contractual safeguards, or transfers based on your explicit consent). For EU/UK transfers we use the European Commission's Standard Contractual Clauses or an equivalent safeguard.

• Active accounts: as long as you keep your account.
• Deleted accounts: PII is anonymised immediately; uploaded files and generation outputs are purged from active systems within 30 days of deletion, and from backups within 90 days. We retain anonymised aggregate analytics indefinitely.
• Reports of harmful content and the moderation decisions on them are retained for 1 year for safety and audit purposes.

UAE residents — under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), you have the right to: (a) request information about how we process your data; (b) ask us to correct inaccurate data; (c) ask us to delete your data; (d) request a portable copy of the data you provided to us; (e) restrict or object to certain processing; and (f) withdraw consent at any time where consent is the basis for processing.

You can exercise all of these inside the App (Profile → Account → Delete account) or by emailing support@clickefy.ai. We respond within 30 days. If you believe we have not handled your data properly you may contact the UAE Data Office.

EU/UK residents: our lawful bases under the GDPR / UK GDPR are contract performance (to provide the App), legitimate interests (security, abuse prevention), legal obligation, and consent (for optional features).

California residents: we do not sell or share your personal information as those terms are defined by the CCPA/CPRA.

The App is not intended for users under 13 (or the minimum digital-consent age in your country). If we learn we have collected personal data from a child below that threshold, we will delete it.

We use TLS for all traffic, encryption at rest for stored content, scoped credentials for our backend services, and least-privilege access controls for our team. No system is perfectly secure; please use a strong password on your sign-in provider.

We may update this Privacy Policy from time to time. When we do, we bump the effective date above and, for material changes, notify you in-app or by email.

Questions about your privacy? Email support@clickefy.ai.