Privacy Policy

1. What We Collect

Photos you select

When you create a video project, the photos you choose are uploaded from your iPhone to our cloud servers. This upload is required so our AI can generate the video transition clips between your photos. Photos are automatically deleted from our servers within 24 hours of processing. They are never stored long-term.

Anonymous device identifier

We generate a random UUID (a unique identifier like 550e8400-e29b-41d4-a716-446655440000) and store it in your iPhone's Keychain. This identifier is completely anonymous — it is not linked to your name, Apple ID, email address, or any other personally identifying information. We use it to:

• Track your token balance and purchase history on our servers
• Associate your subscription status with your device
• Prevent duplicate reward claims

Purchase and subscription status

All payments go through Apple's App Store. We use RevenueCat as our subscription management platform. RevenueCat receives purchase receipts from Apple and sends us your subscription status (active, expired, plan type). We never see your payment method, credit card number, or Apple ID.

Crash and error reports

We use Sentry for crash reporting and error monitoring. When the app crashes or encounters an error, Sentry may collect:

• Device type and iOS version
• App version number
• Crash logs and error stack traces

Sentry does not receive your photos, generated videos, or any personal information.

What we do NOT collect

We do not ask for, collect, or store your name, email address, phone number, location, contacts, or any other personally identifying information.

2. How We Use Your Data

3. Third-Party Services

FluidFlow relies on the following external services to operate:

Each of these services has its own privacy policy. We chose providers that we believe handle data responsibly and do not use your content for training AI models.

4. AI Processing Disclosure

What happens to your photos

When you start generating a video in FluidFlow, your selected photos go through the following process:

1. Upload: Your photos are uploaded over an encrypted HTTPS connection to Cloudflare R2 (temporary cloud storage).
2. Prompt generation: Anthropic's Claude AI analyzes pairs of your photos to understand their visual content. It uses this analysis to write a detailed, content-aware description that guides the video generation — for example, describing camera movements that fit the specific scenes in your photos. This is why videos have genuine cinematic motion rather than generic crossfades.
3. Video generation: The photo pairs and the generated descriptions are sent to an AI video generation provider (fal.ai or Google Cloud Vertex AI). The AI generates a short animated video clip (approximately 5 seconds) that transitions between each consecutive photo pair.
4. Stitching: All generated clips are downloaded to your iPhone. The final video — including music — is assembled entirely on your device using Apple's AVFoundation framework. No video stitching happens in the cloud.
5. Deletion: Your uploaded photos and the generated intermediate clips are automatically deleted from cloud storage within 24 hours.

Your photos are never used for AI training

Types of AI processing performed

• Visual content analysis — Claude AI reads your photo pairs to understand scenes, subjects, lighting, and composition, in order to generate a quality video transition prompt.
• Video generation — AI video models generate realistic motion between your photo pairs based on the content-aware prompt.
• No facial recognition, biometric processing, or personal identification is performed.

Data deletion timeline

5. Data Retention

Photos and video clips in the cloud are automatically deleted within 24 hours. This is enforced by a lifecycle policy on our Cloudflare R2 storage bucket — not a manual process.

Billing records in our D1 database (token balances, purchase history, reward claims) are retained as long as your device UUID is active. These records are necessary for accurate billing, dispute resolution, and subscription management. They do not contain photos or videos.

Your generated videos are saved directly to your iPhone camera roll and stored on your device. You control them entirely. We have no copy of the final stitched video.

Device UUID is stored in your iPhone's Keychain. It persists through app uninstalls and reinstalls (this is by design — it preserves your token balance). You can request deletion of all data associated with your UUID by emailing us at [email protected].

6. What We Don't Do

• We do not sell your personal data to any third party
• We do not track you across other apps or websites
• We do not use your photos for AI model training
• We do not collect your name, email address, or any personally identifying information
• We do not use advertising SDKs or ad tracking frameworks
• We do not share data with data brokers
• We do not use cookies on our website
• We do not perform facial recognition or biometric processing
• We do not access your contacts, calendar, location, or microphone

7. Your Rights

Regardless of where you live, you can:

• Access your data: Request a summary of the data we hold associated with your device UUID.
• Delete your data: Request deletion of all data associated with your device UUID from our servers. This includes your token balance, billing records, and reward history. This cannot be undone.
• Your videos: Your generated videos are already saved to your device camera roll — you already have them.

For users in the EU (GDPR) and California (CCPA), these rights are guaranteed by law. We honor them for all users regardless of location.

To exercise any of these rights, email [email protected]. We aim to respond within 7 business days.

Subscription cancellations and refunds

Subscriptions are managed through Apple's App Store. To cancel, go to iPhone Settings → your name → Subscriptions → FluidFlow. Refunds are handled by Apple per their refund policy. We do not process refunds directly.

Failed AI generations automatically refund the token to your balance — you are never charged for a generation that did not complete successfully.

8. Children's Privacy

FluidFlow is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used FluidFlow and data has been collected, please contact us at [email protected] and we will delete the associated data promptly.

9. Security

Photos and data are transmitted over encrypted connections (HTTPS/TLS 1.3). Cloud storage uses Cloudflare R2 with encryption at rest. API access is authenticated using a per-device secret. We follow security practices appropriate for a product of our size and will notify users of any significant data breach that affects them.

10. Changes to This Policy

We may update this policy when we add new features, change how we handle data, or in response to legal requirements. When we make changes, we will update the effective date at the top of this page. For significant changes that materially affect how we handle your data, we will notify you through an in-app notice.

Continued use of FluidFlow after changes take effect constitutes your acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of Malaysia. Any disputes will be resolved in the courts of Malaysia, without regard to conflict of law provisions.

12. Contact Us

Questions, concerns, or data requests? Please reach out:

Email: [email protected]
Website: fluidflow.app
Company: SWH Alpha

We aim to respond to all privacy-related inquiries within 7 business days.