Privacy Policy

1. Who we are and what this covers

Character Studio is operated by Jolly Bhagat, an individual based in India. Contact: support@vivarium-legal.com. Postal address: Jolly Bhagat, New Grain Market, Kothi No. 6, Khasra No. 9, Opposite Market Committee, Patiala 147004, Punjab, India.

This policy covers only the Character Studio iOS app and its related services, including role-based stories, AI character images, ending scenes and optional videos. The browser experience has a separate website privacy policy.

2. Information we process

• Account information: guest and account identifiers, installation identifiers, authentication credentials and account-linking state. Sign in with Apple can provide an Apple account identifier and email address, including a private relay address. Apple may offer your name during authorization.
• Creative content: a portrait you select for generation, uploaded or generated image references, selected role/template, creation requests, generated images and videos, job identifiers and processing status. The app separately stores project names, story choices and approved image copies on your device.
• Purchases: Apple product, transaction and subscription identifiers, verification and entitlement records, credit grants, balances and spending history. Apple processes your payment details; the app uses verified purchase information to deliver benefits.
• Service and diagnostic data: IP address, device/app/operating-system information, request identifiers, error categories, operation and security records, and the service signals described below.
• Support: the messages and details you choose to send us.

3. What stays on your device

Native projects retain a separate, resized JPEG copy of your chosen portrait, project names, story decisions, creation references and approved character/scene images under the current account on that device. These project files use system file protection and are excluded from device backup. Your photo in the Photos library is not overwritten. This local project storage does not promise cloud project synchronization or recovery on another device.

4. AI images and videos

In the iOS app, selecting a portrait for a local project does not itself start generation. When you confirm a creation, the app uploads the selected input where needed and sends a server-owned template identifier and an input reference. Character-image generation uses the selected portrait; an ending scene can use your approved generated character image; an optional video uses an approved scene image.

We use BytePlus AI services for this processing, including Seedream for images and Seedance for video. BytePlus receives the necessary input media and generation instructions to produce the requested result. Generated results and service records are stored by our service so that you can retrieve and review them. Story content and the selected ending guide the available creation templates; a local story record is distinct from the media sent for generation.

AI processing is part of delivering your chosen creation. This policy does not promise a particular likeness, a provider retention period, or that all provider processing takes place in one country. Provider handling is subject to the applicable service arrangements and BytePlus AI service terms. We do not grant an advertising or general model-training license to your content through these terms.

5. Why we use information

We process information to prepare and secure accounts; provide stories and requested creations; retrieve, display and export results; reconcile pending jobs; verify purchases and deliver credits; prevent abuse; diagnose failures; answer support and privacy requests; and satisfy legal obligations. We also use the limited measurement described below.

Where the applicable law requires a legal basis, we rely on performance of the requested service, our legitimate interests in operating and securing it, legal obligations, and consent where required. You may withdraw optional consent without undoing processing already lawfully performed.

6. Service providers and international processing

Providers supporting the service include BytePlus for AI media processing, AWS for backend hosting, Supabase for database services, Cloudflare for API delivery and object storage, Sentry for crash/error monitoring, and Apple for sign-in and App Store purchases. The current native release does not send app measurement events to Meta; optional Meta website measurement is described in the separate website privacy policy. Each receives information appropriate to its role.

The native Sentry integration is configured to disable default personal information, screenshots, view hierarchies, replay, automatic network capture and automatic breadcrumbs. Crash information and deliberately sanitized error categories and request/job identifiers may still be sent. Server operational and security records are separate.

Information may be processed outside your country by us and our providers. We use safeguards required by applicable law for such processing. We may also disclose information where legally required, to protect users and the service, or in a business transfer subject to applicable protections.

7. App signals and attribution

iOS: the service records first-party installation and account/service signals, such as a first app opening, viewing Account, verified purchase/subscription events and creation outcomes. The app synchronizes the system App Tracking Transparency (ATT) choice. Advertising attribution paths are subject to the applicable permissions and service checks. Where enabled and eligible, these may use an explicitly received app link or Apple’s AdServices attribution token. First-party service records and an ATT permission are distinct; an app event alone does not establish an attributed ad click.

These app legal pages do not load advertising or analytics scripts. Ordinary hosting and security requests still occur when you open a page.

8. Retention and account deletion

Local native projects stay on the device until removed through account deletion or removal of the app’s local data. Copies you export to Photos, files or other services must be removed separately.

Server content and records are retained as needed to deliver and recover creations, maintain account and purchase benefits, respond to support, protect the service, resolve disputes and meet legal or transaction-record obligations. Different records, media, operational logs, backups and provider copies can have different lifetimes. A job-history cleanup rule does not mean its media or provider copies have been deleted.

Use Account → Delete Account in the app to close the account. The current process disables the account, clears its active Apple/email fields while retaining archived identity and transaction/audit records for limited account, security, purchase and compliance needs, and removes associated device and journey-diagnostic records. It also requests cleanup of app attribution data and Apple credentials. The app removes that account’s local project files and snapshots; it can report if local or service cleanup remains pending.

Account closure is not a promise that every media object, log, backup or provider copy disappears immediately. Contact support@vivarium-legal.com for a content-deletion or privacy request and we will assess the scope and any lawful retention requirements. Deleting an account does not cancel an Apple subscription.

9. Your choices and rights

You decide whether to import a portrait, request AI processing or export a result. You can manage available system permissions in iOS Settings. To request access, correction, a copy, deletion, restriction, objection or withdrawal of consent where available, email support@vivarium-legal.com with “Character Studio” in the subject. We may ask for information necessary to identify the correct account and protect it; do not send passwords or sign-in tokens.

Rights depend on your location and may have legal exceptions. We respond within the periods required by applicable law. If you disagree with our response, contact the same address to request review. You may complain to your local data protection authority where available.

10. Age and portrait permissions

Character Studio is intended for people aged 13 or older. Users below the age of legal majority need a parent or guardian’s permission. Only submit portraits of adults and only where you have the necessary rights and permission. Do not submit a child’s portrait for AI processing. If you believe a child’s information has been provided contrary to these rules, contact support@vivarium-legal.com.

11. Changes and contact

We will post updates here and change the date above. Material changes will be communicated where required by law. For questions or requests, contact support@vivarium-legal.com or write to Jolly Bhagat, New Grain Market, Kothi No. 6, Khasra No. 9, Opposite Market Committee, Patiala 147004, Punjab, India.