Flitface ("we", "us", or "the Service") respects your privacy. This policy explains how we collect, use, store and protect information across Flitface web, mobile and desktop products.

By using the Service you acknowledge that you have read and agree to this policy. If you disagree with any part of it, please discontinue use.

Account Data: Phone number, email, username, avatar, and an app-install identifier used to prevent duplicate guest-credit grants.

Generated Content: Prompts, images, videos and audio you create or upload are stored so you can access your history.

Camera & Microphone: Enabled only with your explicit permission and when you use the related feature. Camera frames used for gesture recognition stay on your device. When you use Brain realtime voice, microphone audio is transmitted over an encrypted connection to our backend and AI service provider to recognize speech and generate a response. We do not use this audio to train models.

Biometric Inferences: Face and gesture inference results live only in your current session's memory and are discarded when the session ends.

Hand-keypoint Traces (opt-in): Only when you enable "Help improve recognition" in Settings → Data Privacy do we upload 21 hand-keypoint coordinate sequences (no images, no audio) to train your personal gesture model. The toggle is OFF by default; you can revoke consent and delete uploaded data at any time.

Usage Data: Page views, feature usage, credit and generation usage, crash data, and performance metrics. Account-linked feature usage data is used to operate the service, prevent abuse, and improve the product.

Payment Data: Handled by independent third-party payment providers. We do not directly store full card numbers or payment credentials.

• To provide, maintain and improve Flitface's core features.

• To manage your account, subscription and credits.

• To deliver customer support and troubleshoot issues.

• To detect and prevent fraud, abuse and misuse.

• To comply with applicable laws, regulations and lawful requests.

We do not sell your personal data to any third party.

We do not use your generated content to train AI models.

We use vetted third-party providers to deliver AI generation, authentication, cloud storage, analytics and payment processing.

All providers are contractually required to apply privacy standards at least equivalent to this policy and may process data only on our instructions.

Specific vendor names are not listed here, but we will disclose them on reasonable request, to the extent permitted by law.

Under applicable laws (including but not limited to GDPR in the EU, CCPA in California and PIPL in China), you have the right to:

• Access and correct your personal data.

• Request deletion of your account and associated data.

• Receive a portable copy of your data.

• Withdraw previously granted consent at any time.

• Object to or restrict certain automated processing.

To exercise these rights contact: support@flitface.cn

• Encryption in transit: All network traffic uses HTTPS/TLS.

• Encryption at rest: Server-side data is encrypted with industry-standard algorithms.

• Access control: Staff may access data only to the minimum extent necessary for their duties, subject to access logging.

• Security audits: We regularly assess and remediate risks.

Please note that no method of internet transmission or electronic storage is 100% secure; we use reasonable means to protect your data but cannot guarantee absolute security.

• Account data: Retained while your account exists and deleted within 30 days of account closure, except where law requires longer retention.

• Generated content: Permanently removed from production systems within 24 hours of user-initiated deletion.

• Usage logs: Retained for 90 days by default for security analysis and product improvement.

• Backups may persist for a reasonable period beyond the above windows, strictly for disaster-recovery purposes.

We use only functional cookies required to keep you logged in, remember preferences, and provide basic security.

We do not use third-party advertising or cross-site tracking cookies and do not sell your browsing behaviour to advertisers.

The Service is not directed to children under 13 (or under 14 in China). We do not knowingly collect personal information from such users.

If we become aware of an underage account created without guardian consent, we will promptly delete the associated data.

We may update this policy from time to time. We will give at least 30 days' prior notice of material changes via in-app notification or email.

Continued use of the Service after the effective date constitutes acceptance of the updated policy.

For questions about this policy or our data practices, contact us at:

• Operator: Flitface Vision (Beijing) Technology Co., Ltd.

• Privacy and customer support: support@flitface.cn

• Website: https://www.flitface.cn