Privacy Policy

1. Information We Collect

Account Information

We collect the following personal information when you create an account and use our services:

• Email address (required for account creation and authentication)
• Display name (optional, used within the App)

Face Photos and Biometric Data

Studio's core functionality requires you to upload a face photo ("Source Photo") for AI video generation. When you upload a Source Photo:

• Your photo is securely transmitted to our AI processing infrastructure for video generation
• Facial features are analysed by our AI model to map your likeness onto video templates
• Source Photos are used solely for the purpose of generating your requested video and are not used to train AI models
• Source Photos are automatically deleted from our processing servers after video generation is complete

Payment and Purchase Information

In-app purchases (coin packs and premium subscriptions) are processed through the Apple App Store or Google Play Store. We do not directly collect or store your credit card numbers, CVV codes, or other sensitive payment credentials. We retain records of transactions including coin balances, purchase dates, and subscription status.

Generated Content

When you generate videos using the App, we collect and store:

• Generated video files (temporarily stored for download)
• Template selections and generation preferences
• Generation history and timestamps

Device and Usage Information

We automatically collect certain technical information:

• Device model, operating system, and version
• App version and build information
• Feature usage patterns and interaction data
• Crash reports and error logs
• Push notification tokens (for sending notifications)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To generate AI-powered videos using your Source Photo and selected templates
• To manage your account, coin balance, and subscription status
• To provide, maintain, and improve our video generation services
• To process in-app purchases and manage your coin economy
• To send you notifications about generation progress, daily coin rewards, and new templates
• To improve and optimise the App through anonymous usage analytics and crash reporting
• To provide customer support and respond to your inquiries
• To comply with legal obligations, resolve disputes, and enforce our agreements

3. Information Sharing

We may share your information with the following parties and in the following circumstances:

AI Processing Providers

Your Source Photos are transmitted to our AI processing infrastructure (powered by Replicate, Inc.) for video generation. Photos are processed in real-time and are not retained by our processing providers after generation is complete.

App Store Platforms

In-app purchases are processed through the Apple App Store or Google Play Store. These platforms handle payment processing in accordance with their own privacy policies.

Analytics Providers

We use analytics services to understand how users interact with the App. These services collect anonymised usage data to help us improve performance and user experience.

Legal Requirements

We may disclose your information if required to do so by law, regulation, or legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Storage and Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it:

• Source Photos are transmitted via encrypted connections and automatically deleted after video generation
• Generated videos are stored temporarily using signed URLs that expire after a limited period
• Data is stored with Row Level Security (RLS) policies ensuring users can only access their own data
• All data is encrypted in transit using TLS (Transport Layer Security)
• Data at rest is encrypted using industry-standard encryption
• Authentication is performed via secure email verification with one-time passwords (OTP)
• We conduct regular security assessments and code reviews

5. Your Rights Under the PDPA

Under the Personal Data Protection Act 2012 of Singapore, you have the following rights regarding your personal data:

Access

You may request access to your personal data that we hold, including what data has been collected, how it has been used, and to whom it has been disclosed in the past year.

Correction

You may request the correction of any inaccurate or incomplete personal data we hold about you.

Withdrawal of Consent

You may withdraw your consent for us to collect, use, or disclose your personal data at any time by contacting us. Please note that withdrawal of consent may affect our ability to provide certain services to you.

Deletion

You may request the deletion of your personal data, subject to our legal obligations to retain certain records (see Data Retention below).

Data Portability

You may request a copy of your personal data in a commonly used, machine-readable format for transfer to another service provider.

To exercise any of these rights, please contact us at support@themagicalstudio.com.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law:

• Source Photos: deleted immediately after video generation is complete (not permanently stored)
• Generated videos: stored temporarily for download and deleted after the access period expires
• Account data (email, profile): retained while your account is active and for a reasonable period after account closure
• Transaction and purchase records: 7 years from the date of transaction, as required by Singapore regulatory requirements
• Coin balance and generation history: retained until you delete your account
• Usage and analytics data: anonymised and retained indefinitely for service improvement

7. Cookies and Tracking

Studio is a mobile application and does not use browser cookies. However, we use the following technologies:

• Anonymous analytics to understand feature usage and improve the App experience
• Crash reporting via Sentry to identify and fix technical issues
• Local device storage to cache your preferences and generation history for faster loading

We do not use tracking technologies that follow you across other apps or websites.

8. Children's Privacy

Studio is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such data as soon as practicable.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@themagicalstudio.com so we can take appropriate action.

9. Consent for Face Data

10. International Data Transfers

While we primarily store data using Singapore-based infrastructure, your personal data may be transferred to and processed in countries outside of Singapore in the following circumstances:

• AI video processing infrastructure (servers may be located globally)
• Cloud storage services for temporary video file hosting
• Analytics and crash reporting services

Where data is transferred outside Singapore, we ensure that adequate safeguards are in place to protect your personal data in accordance with the PDPA, including contractual obligations on data recipients to maintain a comparable standard of data protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through the App via a push notification or in-app notice.

Your continued use of Studio after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.