Legal
Privacy Policy
1. Who we are
Imaginatron ("we", "us") is operated by Imaginatron, registered address available on request at renandev4@gmail.com. For any privacy question, contact renandev4@gmail.com.
2. What this policy covers
The Imaginatron mobile apps for iOS and Android, the Imaginatron web app, and this website.
3. Information we collect
Information you give us:
- Account details — your email address, your password (stored hashed), a display name, and a profile photo if you add one. If you sign in with Google, Apple or Facebook we receive the basic profile information that provider shares. With Apple's "Hide My Email" we receive a relay address instead of your real one.
- Content you create and upload — prompts, uploaded photos and video, generated images, video, audio and 3D assets, canvas and video projects, presentations, storybooks and 3D scenes.
- Social activity — posts, comments, likes, saves, collections, follows and remixes.
- Support communications — feedback, bug reports and anything you send to support, including screenshots you attach.
Information collected automatically:
- Device and app data — device model, OS version, app version, language, time zone, and a device identifier.
- Usage data — which features and tools you use, session length, and interaction events, used to understand what to improve.
- Diagnostics — crash reports and error traces.
- Transaction records — which plan or token pack you bought, when, and its status. We never see or store your card number. Payment is handled entirely by Apple or Google.
- Token ledger — every token debit and credit on your account.
We do not collect your precise location, your contacts, your health data, or your financial account details.
4. Camera, photos and microphone
- Photo library — read access only when you pick a file, and add access only when you save a creation. We do not scan or upload your library.
- Camera — used for AR Preview and for taking a photo to use as a source. AR camera frames are processed on your device for surface detection and are not uploaded.
- Microphone — used only while you are recording narration or a screen recording with audio.
You can revoke any of these in your device settings. The features that depend on them stop working; the rest of the app carries on normally.
5. Service providers we share data with
We share only what each provider needs to do its job. We do not sell your personal information.
| Provider | Purpose | What it receives |
|---|---|---|
| AI generation providers (Runware and Replicate) | Running your generation requests | Your prompt and any input media, without your identity attached |
| Cloud storage and CDN (Amazon S3 and Cloudinary) | Storing and delivering your creations | Your generated and uploaded files |
| RevenueCat | Subscription and purchase validation | An anonymized user id and purchase receipts |
| Apple App Store / Google Play | Processing payments | Everything needed for the transaction; we receive only the outcome |
| Firebase | Analytics and app infrastructure | Device identifiers and usage events |
| Firebase | Crash and error reporting | Device state and stack traces at the moment of the error |
| Expo Push, APNs, FCM | Delivering notifications | A push token and the notification content |
We also disclose information where the law requires it, to enforce our Terms, or to protect the rights and safety of our users.
6. Your privacy controls in the app
Settings then Privacy gives you direct control over:
- Profile visibility — public, followers only, or private
- New creations start private — publishing stays a deliberate act
- Show prompts publicly — whether viewers see the prompt behind your work
- Allow remixes — whether others may build on your public creations
- Allow downloads — whether others may download your work
- Show in search — whether you are discoverable
- Show liked tab — whether your likes are visible on your profile
- Show online status
- Who can message you — everyone, followers, or nobody
- Share usage analytics — opt out of anonymized product analytics
- Personalized recommendations — opt out of your generations informing recommendations
Notification categories are controlled separately under Profile then Notifications.
7. Your rights
Depending on where you live — GDPR in the EEA and UK, CCPA/CPRA in California, LGPD in Brazil, and similar laws elsewhere — you may have the right to access your data, correct it, delete it, export it, restrict or object to processing, withdraw consent, and not be discriminated against for exercising any of these. Use the controls in the app where they exist, or write to renandev4@gmail.com; we respond within 30 days. We do not sell personal information and we do not share it for cross-context behavioral advertising.
8. Legal bases (EEA and UK)
Contract — running your account and delivering the generations you ask for. Legitimate interests — securing the service, preventing abuse, and improving the product. Consent — camera, photo, microphone and notification access, and optional analytics. Legal obligation — tax, accounting and lawful requests.
9. Retention and deletion
We keep your account data while your account is active. Deleting a creation removes it from the app and from public view, and backup copies clear within 30 days. Deleting your account, under Profile then Settings then Delete Account, removes your profile, creations and personal data within 30 days, except records we are required to keep for legal, tax or fraud-prevention reasons. Unused tokens and any active subscription entitlement are forfeited when an account is deleted.
10. Security
Data is encrypted in transit with TLS and at rest by our storage providers. Passwords are hashed. Access to production systems is restricted. No system is perfectly secure; if a breach affects your data we will notify you and the relevant regulators as the law requires.
11. Children
Imaginatron is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, write to renandev4@gmail.com and we will delete it.
12. International transfers
Your data may be processed in the United States. For transfers out of the EEA and UK we rely on Standard Contractual Clauses or an adequacy decision.
13. Changes to this policy
We post any update here with a new "last updated" date, and give in-app notice for material changes.
14. Contact
renandev4@gmail.com — Imaginatron, registered address available on request at renandev4@gmail.com