Warmth AI ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, share, and safeguard your information when you use the Warmth AI mobile application (distributed through Google Play), our official website, and any related services (collectively, the "Services").
By downloading, accessing, or using the Services, you confirm that you have read, understood, and agreed to both this Privacy Policy and our Terms of Service. If you do not agree with any part of this Policy, please do not use the Services and delete any local copies you may have installed.
In this document, "Personal Data" means any information that identifies or can reasonably be linked to a specific individual. Aggregated or anonymized information that cannot identify you is not Personal Data and may be used without restriction.
Everything we do with your data is guided by a short set of commitments. We believe these principles should be easy to understand before you read the details that follow.
We only gather information that is necessary to deliver the features you choose to use.
Your photos, videos, and generated content are never sold, rented, or traded to advertisers or data brokers.
Media you upload is removed from our systems as soon as the requested output is produced.
You can review, export, delete, and withdraw consent for your data at any time.
We group the information we handle into three categories. The sections that follow describe each in detail.
We do not collect information simply because the technology makes it possible. Every category of data we collect serves a stated purpose described later in this Policy.
3.1 Some features — for example, saving or sharing content — require you to complete a sign-in step. You may register with an email address or through a supported third-party service.
3.2 If you sign in using a third-party account (such as Google, Facebook, or Sign in with Apple), we receive the information that service chooses to share with us. This typically includes your name, email address, and a user identifier, together with anything else you agree to submit during registration.
3.3 All information tied to your login is deleted at the same time as your account. There is no separate retention period for account credentials after closure.
3.4 You may close your account and remove its associated data at any time, either through the self-service option inside the app or by reaching out to our support team. See Section 14 for the available methods.
To use the AI image or video generation features, you choose to upload photos or videos. The application asks for explicit permission to access your local media or files. You may grant or revoke this permission at any time in your device settings, and withdrawing it will not affect features that do not require media access.
Every upload travels over an encrypted connection (SSL/TLS). We apply reasonable technical and organizational measures to protect your data while it is in transit and while it is being processed.
Because outputs are removed on a schedule, it is your responsibility to save any results you wish to keep before they are deleted.
5.1 Depending on the model in use, the Services may carry out body-outline detection, facial-region detection, facial-feature analysis, skeletal-key-point detection (such as the head, neck, shoulders, torso, and wrists), and clothing detection on images or videos you upload. This information exists exclusively to generate the output you requested. It is temporarily held in server memory during processing and is erased immediately once generation is complete.
5.2 We do not use any photo, video, or generated output you provide to train, fine-tune, or improve our AI models.
5.3 Facial key points and similar sensitive signals are not collected without the prior consent of the person depicted — consent that you give by granting the app access to the relevant media.
5.4 Until deletion, this data receives storage, transmission, and protection measures that are at least as strict as those applied to other confidential information used to identify individuals, including login details such as email addresses.
5.5 We do not use facial, key-point, or body-detection data to identify or verify any individual, and we do not create biometric identifiers or user profiles from it.
5.6 All of this data is used solely to produce the AI output you requested and is removed immediately after processing; no copies are kept afterwards.
When you use the Services, certain information about your device and network activity is produced automatically. We collect the following categories:
The only purpose of collecting this information is to keep the Services running safely and reliably, to measure and improve performance, and to diagnose faults.
We use the Personal Data and Service Data we collect for the following purposes:
8.1 The photos and videos you upload for AI processing are never passed to third parties, except when you yourself choose to share the generated results.
8.2 We may share Personal Data (and non-personal information) with service providers who act on our behalf — such as providers of hosting, data management, and infrastructure services. We may also share aggregated, non-personally-identifying log data for analytical and promotional purposes. The third parties involved are listed in Section 9.
8.3 Personal Data may be disclosed only in the following situations:
We will not expose your uploaded images or videos to any service unless you voluntarily share them (together with the results) through the Services or a third-party service.
To support analytics, advertising, and infrastructure stability, we may integrate third-party services. These services may collect a limited set of technical data under their own privacy policies, and we select providers that offer adequate safeguards for the data they handle.
Providers are bound by contractual obligations to comply with applicable data-protection law. Advertising partners may collect advertising identifiers solely for attribution and fraud prevention. You can review their data-processing practices in their official policies or, where available, restrict collection through their opt-out mechanisms.
10.1 We and our advertising partners may use advertising identifiers to measure the effectiveness of campaigns and to prevent advertising fraud. These identifiers are not linked to your name, email address, or uploaded media.
10.2 Cookies are used only in connection with third-party login flows. The Services do not use tracking cookies for unrelated advertising purposes.
10.3 You can limit advertising tracking at the device level through your operating-system settings. Choosing to do so will not affect your ability to use the core features of the app.
The Services request only the permissions needed for the features you choose to use. Each permission and its purpose are shown below.
Allows you to pick photos and videos for AI processing. Cannot be used without your action.
Required to transmit your requests to our processing servers and return results.
Helps us pause and resume operations when connectivity changes.
Optional. Used only to deliver service-related messages you have opted into.
You may revoke any permission at any time through your device settings. Features that depend on a revoked permission may become unavailable, but the rest of the app continues to function.
How long information is kept depends on the category. The table below summarizes our standard retention practices.
Backups are kept only as long as technically necessary for disaster recovery. When a backup containing your data is retired, that data is removed with it.
Depending on where you live, you may have some or all of the following rights. We will respond to verified requests within the timeframes required by applicable law.
To exercise any of these rights, contact us using the details in Section 21. We will not discriminate against you for making a privacy request.
You may delete your account and its associated data through any of the following channels:
Once your account is closed, all relevant Personal Data is deleted, subject to limited legal and technical obligations such as backup archiving and record-keeping required by law.
We maintain technical and organizational measures designed to protect your privacy and guard against unauthorized access, alteration, disclosure, or destruction. These measures are reviewed and updated as technology and threats evolve. No method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee that unauthorized parties will never defeat our safeguards. If you use a password to access the Services, you are responsible for keeping it confidential.
All data, including uploaded media and Personal Data, travels over TLS 1.2 or later.
Sensitive data is stored on encrypted servers using AES-256, with strictly limited access.
A permission-classification system restricts internal access to a need-to-know basis, with multi-factor authentication and audit logs.
If a breach occurs, we notify affected users within 72 hours of discovery where the law requires it, and we report to the relevant authorities.
Minors should obtain the prior consent of a parent or legal guardian before using the Services. We encourage guardians to read this Policy carefully and to guide minors before any Personal Data is submitted.
If you are a guardian and discover that a minor under the age of 13 has used the Services and submitted Personal Data without permission, you may submit a deletion request using the contact details in Section 21. Please include a copy of the guardian's identity document, proof of the guardianship relationship (such as a household register or birth certificate), and the minor's account information, if any. We will delete the relevant data within 15 working days of verifying the materials.
COPPA: We respect children's privacy in accordance with the Children's Online Privacy Protection Act. We do not knowingly collect or solicit information from anyone under 13 or allow such individuals to register. If we learn that we have collected Personal Data from a child under 13 without parental consent, we will delete it as soon as practicable. If you believe we may hold such information, please contact us at [email protected].
Your data may be processed on servers located outside the country where you reside. When we transfer Personal Data across borders, we implement appropriate safeguards — such as standard contractual clauses where required — to ensure that the protection applied meets the standards of the laws that apply to you.
For users located in the European Economic Area or the United Kingdom, we process Personal Data on the following legal bases:
Where we rely on consent, you may withdraw it at any time. This will not affect processing that took place before withdrawal.
This Privacy Policy is consistent with the disclosures we have made in the Google Play Data Safety section. Our collection, use, sharing, and retention practices match those disclosures, including the data types and purposes declared below:
We do not share user-provided photos, videos, or generated content with third parties except as described in Section 8 and Section 9.
We may revise this Privacy Policy from time to time. When a change is material — such as expanding the scope of data we collect, changing how data is used, or changing who we share it with — we will notify you of the change and its effective date at least 30 days in advance through an in-app notice or an email to your registered address. Non-material changes will be announced through in-app notifications. Continuing to use the Services after an update takes effect means you accept the revised Policy. If you do not agree, you should stop using the Services and delete your account.
If you have any questions or requests regarding this Privacy Policy, or if you wish to exercise any of the rights described above, please contact us at:
Email: [email protected]
We aim to respond to all privacy-related inquiries within 15 working days.