Privacy Policy

1. Scope

This Privacy Policy explains how Joseph Works Limited (“we,” “us,” or “our”) handles information when you use Photo to Video. It covers every way you can reach the product: the website at photo2video.ai and its browser-based application (the “Web Service”), and the Photo to Video applications for iPhone, iPad, Mac, and Android (the “Apps”). Together we call them the “Service.”

The Web Service and the Apps share one account system, one credit balance, and one set of AI providers, so most of this policy applies to both. Where they genuinely differ — how you get an account, who handles your payment, and where data is stored on your device — the section says so.

2. Information we collect

Account information

Creating a video requires an account, and how you get one depends on where you are. On the Web Service you sign in with Google or Apple. In the Apps an account is created for you on first use and carries no identity beyond an identifier held on your device, though you may choose to attach an Apple account to it.

From a provider you sign in with we receive an account identifier and an email address, and we may receive a display name and profile image; if you use Apple’s “Hide My Email,” we receive a relay address rather than your own. Either way, the account holds your credits, purchases, and generation history.

Content you provide

We process the photos, videos, audio, reference media, text prompts, and generation settings you submit. This content may include images of people and human faces.

Usage and technical information

We may receive information such as your IP address, browser or device type, device model, operating system and app version, timestamps, requested features, model and generation settings, task status, diagnostic information, and error logs. The Service does not collect your device’s location.

On the Web Service we also record how you first reached the site — the site that referred you, the page you arrived on, and any campaign tags in the link — and keep it with your account so we can tell which channels bring people who go on to use the Service. Browsers disclose only the referring site, never the page or search terms that led there.

Purchase information

We receive purchase status, product, price, currency, credit balance, and related transaction identifiers. RevenueCat manages checkout and purchase records across both the Web Service and the Apps. On the Web Service, Stripe processes your payment information. In the Apps, payment is handled by the Apple App Store or Google Play under their own terms. We do not receive or store your full payment card number.

Communications

If you contact us, we receive the information contained in your message and any contact details you choose to provide.

3. How we use information

We use information to:

• Provide image, video, and audio generation features;
• Authenticate sessions and maintain accounts and credit balances;
• Process purchases, refunds, and transaction support;
• Restore task history and deliver generated results;
• Operate, secure, troubleshoot, and improve the Service;
• Screen submissions for prohibited content and enforce our Terms;
• Prevent fraud, abuse, and violations of our Terms; and
• Comply with legal obligations and enforce our rights.

4. AI processing and face data

Content you submit is transmitted to the AI infrastructure or model provider selected for your request. Providers may include FAL.ai, WaveSpeed AI, and Agnes AI, as well as other providers identified in the Service.

Photos may contain faces, but Photo to Video does not use them to identify a person, authenticate a user, or create a biometric identifier. Neither the Web Service nor the Apps perform facial recognition on your device, extract facial geometry, or build faceprints or facial-recognition templates at any point. Images containing faces are processed to produce the generation you request. You are responsible for having the rights and permissions needed to submit images of other people.

5. Content moderation

To keep the Service safe and to enforce the prohibited-use rules in our Terms of Service, content you submit for generation is screened by automated content-safety systems as part of processing. Content reported as violating those rules may additionally be reviewed by a person, and may be retained for as long as necessary to act on the report — including blocking an account and cooperating with law enforcement where the law requires it.

6. How we share information

We share information only as needed with:

• AI service providers that process your content and generation settings to create requested results;
• Supabase for authentication, database, storage, task, and account infrastructure;
• Google and Apple when you choose one of them to sign in, which tells that provider you use the Service;
• RevenueCat, Stripe, the Apple App Store, and Google Play for checkout, purchase management, transaction processing, fraud prevention, and payment support;
• Google (Analytics and Ads) for site usage analytics, advertising measurement, and purchase conversion reporting on the Web Service;
• Infrastructure and support providers that help us operate, secure, and troubleshoot the Service; and
• Authorities or other parties when required by law, necessary to protect rights or safety, or involved in a corporate transaction.

Stripe may process transaction, device, and browser information to operate payments, authenticate transactions, prevent fraud, and analyze the performance of its services. See the Stripe Privacy Policy and the RevenueCat Privacy Policy.

We do not use your submitted content for advertising.

7. Storage and retention

We do not keep your uploaded media on our own servers. It goes directly to the AI provider handling your request, which stores it temporarily so it can process and return a result. Provider retention periods differ and are governed by their respective policies: FAL.ai retains uploaded files and generated content for at least 7 days before deletion, WaveSpeed AI deletes user-generated content after 7 days, and Agnes AI may retain files temporarily during processing.

We retain account information, credit and transaction records, task metadata, prompts, settings, and result URLs for as long as reasonably needed to provide the Service, maintain your history, prevent abuse, resolve disputes, and meet legal obligations. Some records may remain in backups or transaction systems for a limited period after a deletion request.

8. On-device storage and cookies

The Service stores data on the device you are using: the Web Service uses local browser storage and the Apps use the operating system’s app storage, in both cases to hold your authentication tokens, remember preferences, and cache selected input images and generated-result URLs. This information may remain until the Service removes it, or until you clear your browser data or uninstall the app.

Clearing that data or changing devices signs you out. An account opened with Google or Apple, along with its history and unused credits, is available again when you sign back in; an account that was never signed in has no identity outside the device holding it, so clearing that device’s data may make it unrecoverable. RevenueCat, Stripe, Supabase, and other service providers may also use cookies, browser storage, or similar technologies under their privacy policies to operate, secure, and support checkout. We also use Google Analytics and Google Ads tags, which set cookies or similar identifiers to measure site usage, advertising performance, and purchases. See the Google Privacy Policy.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent or appeal a privacy decision. To make a request, email support@josephworks.app. We may need to verify your request before acting on it.

You can also act directly: delete individual generations from your history at any time, delete your whole account from within the Apps, and stop all further collection by uninstalling the app or by no longer using the website.

10. International processing

We and our service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

The Service is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us so we can review and delete it.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, our providers, or applicable law. We will post the updated version on this page and revise the “Effective” date.

14. Contact us

For privacy questions or requests, contact Joseph Works Limited at support@josephworks.app.