Privacy Policy
Visoria AI is an AI video app that turns your photos and prompts into short videos and video effects. This Privacy Policy describes how Metin Gökmen (“we”, “us” or “our”) processes personal information through the Visoria AI mobile app and this website (together, the “Service”). It also serves as our information notice under Türkiye's Personal Data Protection Law No. 6698 (“KVKK”) and the EU and UK General Data Protection Regulation (“GDPR”).
The short version
- Visoria AI is run by Metin Gökmen, an independent developer based in Türkiye. You can reach us at visoria.app@gmail.com.
- You do not need to give us your name, email address or phone number. The app signs you in with an anonymous ID.
- We use what you submit (photos, prompts and other inputs) to create your videos with the help of an AI service provider. We do not use your content to train our own AI models.
- We do not sell your personal information. We show optional rewarded ads through Google AdMob; on iOS ads are only personalized if you allow tracking.
- Payments are handled by Apple or Google. We never see your card details.
- You can ask us for a copy of your data, or to correct or delete it, at any time.
Contents
- Who we are
- Information we collect
- Photos and AI processing
- How we use your information
- Legal bases (GDPR and KVKK)
- How we share your information
- Analytics, ads and tracking
- How long we keep your information
- Your choices
- Your rights
- International data transfers
- Security
- Children
- Changes to this policy
- How to contact us
Who we are
The Service is provided by Metin Gökmen, an independent software developer based in Türkiye. We are the data controller (veri sorumlusu) for the personal information described in this policy under KVKK and the GDPR. Contact: visoria.app@gmail.com.
Information we collect
Information you provide
- User input: Photos you take with the camera or choose from your gallery, prompts, and the effects or templates you select.
- Generated content: Videos generated for you and the history of your generations.
- Communications: the content of emails you send us and our replies, and your email address if you contact us.
Information collected automatically
- Identifiers: an anonymous user ID created by Firebase Authentication when you first open the app, and an app instance ID.
- Device data: device model, operating system and version, app version, language and region settings, and IP address.
- Purchase data: details of in-app purchases and subscriptions received from the App Store or Google Play through RevenueCat — product, price, currency, transaction ID, purchase and renewal dates, subscription status and your coin balance. We do not receive your payment card details.
- Usage data: screens viewed, features used, generations started and completed, and similar in-app events collected with Google Analytics for Firebase.
- Advertising data: your device's advertising ID (IDFA on iOS, only if you allow tracking; Google Advertising ID on Android, unless you have deleted or reset it) and information about the ads you see and interact with.
- Push token: if you allow notifications, a token issued by Apple or Google that lets us send notifications to your device.
We do not ask for your name, email address, phone number, contacts or precise location, and we do not ask you to create a password.
Please don't share sensitive information. We do not need information about health, religion, political opinions, sexual life, criminal records or other special categories of personal data (özel nitelikli kişisel veri). Please do not include such information in your prompts or photos.
Photos and AI processing
- When you choose a photo, the app uploads it to our cloud storage and sends it, together with your prompt and selected effect, to our AI service provider (Eachlabs Inc.), which returns the generated videos.
- We use photos only to create the content you request. We do not use them to identify you or anyone else, we do not create facial recognition templates or other biometric identifiers, and we do not use your photos or generations to train AI models.
- Photos may show other people. Only upload photos of yourself, or of people who have given you permission — see our Terms of Use.
- The app accesses your camera or photo library only when you choose to add a photo, and only with your permission.
How we use your information
We use personal information to:
- Provide the Service: create your generations, store your history, run the app's features and keep your coin balance and purchases in sync.
- Process purchases: verify App Store / Google Play purchases, unlock subscriptions and coins, and prevent purchase fraud.
- Support: answer your questions and requests, including privacy requests.
- Safety and security: protect the Service and its users, detect abuse (for example, attempts to generate unlawful content) and enforce our Terms of Use.
- Improve the Service: understand how the app is used, fix bugs and plan improvements (using analytics events).
- Advertising: show optional rewarded ads and, if you allow it, personalized ads.
- Notifications: tell you when a generation is ready and send other service notices; you can turn these off at any time.
- Legal compliance: comply with applicable laws, respond to lawful requests from authorities and establish or defend legal claims.
We may also create aggregated or anonymized statistics that no longer identify you. If we ever want to use personal information for a purpose that is not compatible with these purposes, we will ask for your consent first.
Legal bases (GDPR and KVKK)
Data protection laws require a legal basis for each use of personal information. We rely on the following:
| Purpose | Information involved | Legal basis |
|---|---|---|
| Provide the Service; process purchases; support | User input, generated content, identifiers, device data, purchase data, communications | Performance of a contract with you (GDPR Art. 6(1)(b)); KVKK Art. 5(2)(c) |
| Safety and security | Identifiers, device data, user input, generated content | Legitimate interests in keeping the Service secure and lawful (GDPR Art. 6(1)(f)); KVKK Art. 5(2)(f) |
| Improve the Service | Identifiers, device data, usage data | Legitimate interests in understanding and improving our app (GDPR Art. 6(1)(f)); KVKK Art. 5(2)(f) |
| Personalized advertising | Advertising ID, device data, ad interactions | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), which you can withdraw at any time |
| Non-personalized rewarded ads | Device data, ad interactions | Legitimate interests in funding the free features of the Service (GDPR Art. 6(1)(f)); KVKK Art. 5(2)(f) |
| Notifications | Push token | Your consent given through the operating-system prompt (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Legal compliance and legal claims | Any relevant data | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) and establishing or defending legal claims (KVKK Art. 5(2)(e)) |
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
How we share your information
We do not sell your personal information. We share it only as follows:
Service providers
These companies process information on our behalf to run the Service, under their own data processing terms:
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Google Firebase (Google LLC / Google Ireland Ltd.) | Hosting and back end: anonymous sign-in (Firebase Authentication), database (Cloud Firestore), file storage (Cloud Storage), server functions (Cloud Functions) and remote configuration, analytics (Google Analytics for Firebase), push notifications (Firebase Cloud Messaging). | Firebase user ID, app instance ID, device and OS details, IP address, your inputs, generations and account data, usage events, push token. | United States and other countries where Google operates |
| Eachlabs Inc. | Runs the AI video models (for example Google Veo and PixVerse) that create videos from your photos and prompts. Eachlabs routes each request to the underlying model provider. | The photos, prompts and other inputs you submit, and the content generated from them. | United States |
| RevenueCat, Inc. | Validates App Store / Google Play purchases and keeps track of your subscription status and coin entitlements. | Anonymous app user ID, purchase receipts and transaction IDs, product, price and currency, subscription status, device and OS details. | United States |
| Google AdMob (Google LLC) | Shows optional rewarded video ads that you can watch to earn coins. | Advertising ID (only if you allow tracking on iOS / have not opted out on Android), IP address, device and app information, ad interactions. | United States and other countries where Google operates |
Others
- Apple and Google process your purchases and app downloads under their own privacy policies. We receive only the purchase information described above.
- Authorities and legal process: when we believe in good faith that the law requires it, or to protect rights, property or safety.
- Professional advisors such as lawyers and accountants, under confidentiality obligations.
- A successor if the app is transferred to another owner, who would have to respect this policy for the information it receives.
Analytics, ads and tracking
We use Google Analytics for Firebase to understand how the app is used, and Google AdMob to show optional rewarded ads that you can choose to watch to earn coins.
- iOS: the app asks for your permission through Apple's App Tracking Transparency prompt. If you do not allow tracking, your IDFA is not shared and ads are not personalized based on your activity in other companies' apps and websites.
- Android: you can delete or reset your advertising ID, or opt out of ads personalization, in your device's Google settings.
- AdMob may still show non-personalized ads, which rely on contextual information such as the app and your general location (from your IP address).
Some U.S. state laws may treat personalized advertising as “sharing” or “targeted advertising”. You can opt out at any time with the device settings above.
This website does not use cookies or analytics.
How long we keep your information
We keep personal information only as long as necessary for the purposes described above, including legal, accounting and dispute-related requirements. When it is no longer needed, we delete or anonymize it; information in backups is deleted when the backup cycle ends.
- Account data, inputs and generations: kept while you use the app and deleted as soon as you delete your account in the app, or within 30 days after you ask us by email to delete your data.
- Purchase records: kept for as long as needed to provide what you bought and to meet our accounting and tax obligations.
- Support emails: kept for up to 2 years after the conversation ends, unless we need them longer to handle a dispute.
- Our providers' copies: AI and infrastructure providers keep copies only as long as their own data processing terms allow; for example, some keep request logs and backups for a limited period.
Your choices
- Delete your data: You can delete your account in the app under Settings › Account › Delete Account. This immediately and permanently deletes your account and all data linked to it — your profile, coin balance, generation history, uploaded photos, generated videos and any videos you shared to Explore. If you no longer have the app, email us at visoria.app@gmail.com with details that help us find your records (for example, the approximate date of a recent generation or an App Store order ID), and we will complete the deletion within 30 days. Deleting your account does not cancel an App Store subscription; cancel it in your App Store account settings.
- Permissions: you can change camera, photo library, notification and tracking permissions in your device settings at any time.
- Subscriptions: manage or cancel in your App Store or Google Play account settings. Deleting the app does not cancel a subscription.
- Stop all collection: uninstall the app.
Your rights
Depending on where you live, you have some or all of the following rights. We honor them for all users wherever we reasonably can.
Everyone
- Access: learn whether we process your information and get a copy of it.
- Correction: ask us to fix inaccurate information.
- Deletion: ask us to delete your information.
- Portability: receive your information in a machine-readable format.
- Objection and restriction: object to processing based on legitimate interests, or ask us to limit it.
- Withdraw consent: where we rely on consent, withdraw it at any time; this does not affect processing that already took place.
Türkiye (KVKK Article 11)
You may learn whether your personal data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request erasure or destruction under Article 7; request that third parties to whom data was transferred be notified of such correction or erasure; object to a result against you arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing. We answer requests free of charge within 30 days at the latest (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ). If we reject your request or you are not satisfied with our answer, you may complain to the Personal Data Protection Authority (KVKK).
EEA, UK and Switzerland
You have the rights listed above under the GDPR, UK GDPR or Swiss law. We respond within one month. You also have the right to lodge a complaint with the data protection authority in the country where you live or work; in the UK this is the Information Commissioner's Office.
United States
Residents of California and other U.S. states with comprehensive privacy laws may have the right to know, access, correct and delete personal information, to opt out of its sale, sharing or use for targeted advertising, and not to be discriminated against for exercising these rights. We do not sell personal information for money; you can opt out of personalized ads as described in “Analytics, ads and tracking”. We do not knowingly sell or share the personal information of consumers under 16.
How to make a request
Email visoria.app@gmail.com. Because we do not know your name or email address, please include details that let us find your records (for example, the approximate date and content of a recent generation, or an App Store / Google Play order ID). We may ask for additional information to confirm that the request is yours. You may also appoint an authorized agent where the law allows.
International data transfers
We are based in Türkiye, and our service providers listed above store and process information in the United States and other countries. This means your information is transferred outside Türkiye and outside the EEA and UK. We rely on the safeguards available under KVKK Article 9 and Chapter V of the GDPR for these transfers — such as adequacy decisions (including the EU–U.S. Data Privacy Framework where the provider is certified) and standard contractual clauses included in our providers' data processing terms. Contact us for more information about the safeguard used for a particular provider.
Security
We use technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS), authentication for all access to our back end, and limiting administrative access to the people who need it to run the Service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the competent authorities as the law requires.
Children
The Service is not directed to children. You must be at least 13 years old to use it, or older if the law where you live requires it (for example, 16 in some EU countries). We do not knowingly collect personal information from children below these ages. If you believe a child has used the Service, contact us at visoria.app@gmail.com and we will delete the information.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “last updated” date and, if the changes are material, inform you by appropriate means, such as an in-app notice, before they take effect.
How to contact us
Metin Gökmen · Türkiye
Email: visoria.app@gmail.com
Structure adapted from the open-source legal templates published by General Legal, PC under CC0 1.0. General Legal has not reviewed this document.