Privacy Policy

Last updated: April 4, 2026

Welcome to Vivo ai's Privacy Policy

Vivo ai ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information that is collected through our mobile application (the "App"), as well as your choices regarding the collection and use of information.

If you decide not to read this entire Privacy Policy, here are the key points about our privacy practices:

• Vivo ai is a home design app that allows users to redesign interiors, exteriors, gardens, and rooms using AI technology.
• We process only the photos you specifically select for editing within the App.
• We use third-party cloud AI services to process your selected images temporarily.
• Your selected photos are temporarily cached and are automatically deleted within 24 to 48 hours after processing.
• We do not use your photos for any purpose other than providing the App's AI generation features.
• We do not use personal data for third-party advertising personalization.

For more details, please read the full policy below.

Please read the following privacy policy carefully. When you use the App you acknowledge that you have read, understood, and agree to be bound by these terms. Our Privacy Policy applies to all users and others who access the App ("Users").

1. Controller Information

• Controller: Jaber, independent app developer ("Vivo ai")
• Location: Belgium
• Privacy contact: contact@vivoai.app or via the in-app feedback form (Settings → Feedback)

For the purposes of the GDPR, we are the data controller. This means we determine the amount, purpose, and means of personal data processing when you use the App.

2. Legal Basis for Processing (GDPR)

We process personal data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a) GDPR): When you explicitly agree to processing.
• Contract Performance (Art. 6(1)(b) GDPR): To provide the App's core features you request.
• Legal Obligations (Art. 6(1)(c) GDPR): To comply with applicable laws.
• Legitimate Interests (Art. 6(1)(f) GDPR): For service security, abuse prevention, analytics for reliability and quality improvement.

3. Information We Collect

3.1 Photos & Images You Select for Editing

When you use the App and choose images for editing, we temporarily process them on our cloud servers to provide the AI generation functionality.

• We process only the specific photos you choose to edit.
• We do not access your entire photo library even if you grant permission.
• Metadata (such as location tags) attached to your photos is not intentionally collected or stored.
• Photos are retained on processing servers for a maximum of 24 to 48 hours before automatic deletion.

3.2 Content Information

• Source images: Photos uploaded by you for AI processing.
• Mask images: Optional mask images for cleanup or editing workflows.
• Reference images: Optional reference images for style transfer workflows.
• Product interaction information and any user-generated content within the App.

3.3 Technical and Operational Data

Some information is collected automatically when you use the App. This information does not reveal your specific identity but may include:

• Device information (device model, operating system version, language preferences).
• IP address (used for abuse prevention and service protection).
• Anonymous device-scoped user identifier used by the App.
• Request identifiers, provider/job identifiers, timestamps, processing status, and error logs.
• App usage data (features used, session duration, generation flow events, performance and error telemetry).

3.4 Subscription Data

• Subscription status and entitlement information from in-app purchase infrastructure (Apple App Store / Google Play).
• Purchase history confirmation from app stores — we do not store payment details (credit card numbers, etc.).

3.5 Contact / Support Information

If you contact our support team, we may collect:

• Your name and email address (if you provide them).
• Feedback message content and details of your inquiry.

3.6 Permissions

• Camera access: For taking photos directly within the App for AI processing. Your permission is required before access.
• Photo library access: To select images for AI processing. Your permission is required before access.
• Notifications: To receive push notifications about generation results and updates. Your permission is required.

You can control whether permissions are turned on or off in your device system settings at any time.

4. How We Use Your Information

4.1 To Provide the App's Features

• Process and generate AI-based design transformations of your selected photos (interior, exterior, garden, empty room, cleanup, style transfer).
• Enable cloud-based AI image enhancements and generation.
• Respond to your support requests.

4.2 To Improve the App

• Analyze usage trends to enhance performance and features.
• Troubleshoot technical issues and fix bugs.
• Develop new features and improve product quality and reliability.

4.3 For Security & Compliance

• Prevent fraud, abuse, and unauthorized access.
• Enforce fair-usage limits and anti-abuse controls.
• Comply with legal obligations.

4.4 To Manage Subscriptions

• Manage subscriptions and paid features through in-app purchase infrastructure.

4.5 AI Image Processing

• Images are temporarily uploaded to our servers and forwarded to third-party AI processing providers for generation.
• We do not use your images for AI/ML model training.
• We do not store or share your processed images with any third party beyond what is necessary for the generation service.
• All uploaded images and processing artifacts are automatically deleted within 24 to 48 hours after processing completion.
• Processed/enhanced images saved locally on your device remain under your control.

We do not use personal data for third-party advertising personalization.

5. How We Share Your Information

We will not rent or sell your personal data to third parties. We only share personally identifiable information with third parties when:

• It is necessary to provide the requested AI generation service.
• You allow it to be shared.
• It is required by law.

5.1 Service Providers

To deliver App functionality, data may be processed by the following categories of third-party service providers:

• AI processing providers: Replicate, Fal.ai, ModelsLab — used to process and generate AI design transformations from your uploaded images. Images are processed temporarily and deleted according to each provider's data retention policies.
• Analytics infrastructure: Firebase Analytics — used for anonymous product usage analytics and performance monitoring.
• Subscription infrastructure: RevenueCat and mobile platform purchase systems (Apple App Store / Google Play) — used to manage subscriptions and entitlements.
• Hosting and infrastructure: Cloud hosting services for our backend servers.

We may update providers over time for reliability, quality, or cost reasons. The functional categories above remain the same. We share only the data reasonably required to provide requested features and operate the service.

5.2 Legal Compliance

We may disclose your personal information:

• As required by law, court order, or government regulation.
• When we believe, in good faith, that disclosure is necessary to protect our rights, your safety, or the safety of others.
• To investigate fraud or respond to a government request.
• If we are involved in a merger, acquisition, or sale of all or a portion of our assets.

6. AI Processing & Data Training Disclosure

Integrated AI Providers

To provide AI generation features, we share your uploaded images with the following third-party AI processing providers:

Provider	Purpose	Privacy Policy
Replicate, Inc.	AI image generation & processing	replicate.com/privacy
Fal.ai (fal.ai)	AI image generation & processing	fal.ai/privacy
ModelsLab	AI image generation & processing	modelslab.com/privacy-policy
Google (Firebase Analytics)	Anonymous analytics & performance monitoring	policies.google.com/privacy
RevenueCat	Subscription & entitlement management	revenuecat.com/privacy

Data retention practices for AI providers are managed by each provider and are subject to their individual privacy policies.

7. International Data Transfers

Because our service providers may process data in multiple regions, data may be transferred outside your country of residence, including outside the European Economic Area (EEA), the UK, or Belgium where applicable.

When required, transfers are made under recognized legal safeguards, including:

• EU Standard Contractual Clauses.
• Adequacy decisions by the European Commission.
• Other contractual transfer mechanisms provided by us and/or processors.

8. Data Retention

Retention is limited to operational necessity and legal requirements.

• Uploaded images and processing artifacts: Automatically deleted within 24 to 48 hours after processing.
• Generation-related operational data (job IDs, status, logs): Up to 30 days.
• Analytics data: Maximum 24 months.
• Support records: Retained as needed to handle requests and legal obligations.
• Subscription records: Duration of account existence plus statutory retention periods.

Once the retention period has expired, the personal data will be deleted or anonymized. We may retain limited records where required for security, anti-fraud, accounting, or legal compliance.

9. Your Rights

You, as a subject of personal data, have the following rights under GDPR and applicable Belgian/EU law:

• Right to access (Art. 15 GDPR): Request information about what personal data we process about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate personal data.
• Right to erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your personal data under certain circumstances.
• Right to restriction (Art. 18 GDPR): Request restriction of processing under certain circumstances.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing lawfulness.
• Right to lodge a complaint: Lodge a complaint with a supervisory authority.

Competent Supervisory Authority (Belgium):

Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35 / Drukpersstraat 35, 1000 Bruxelles / Brussel
www.autoriteprotectiondonnees.be

To exercise your rights, contact us at: contact@vivoai.app

10. Information for Residents of California (CCPA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") may provide you with additional rights regarding our use of your personal information.

Access and Data Portability Rights

You have the right to send us a request, no more than twice in a twelve-month period, for:

• The categories of personal information we have collected about you.
• The categories of sources from which we collected your personal information.
• The business or commercial purposes for collecting your personal information.
• The categories of third parties with whom we have shared your personal information.
• The specific pieces of personal information we have collected about you.

Data Deletion Rights

You may request that we delete your personal information that we have collected directly from you.

Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

To exercise your rights under CCPA, contact us at: contact@vivoai.app

11. Deletion Requests

To request deletion of personal data, contact us via the in-app feedback form (Settings → Feedback) or email us at contact@vivoai.app.

We will review and process requests according to applicable legal requirements.

12. Children's Privacy

The App is intended for users aged 16 or older. We do not knowingly collect personal data from children under 16. If we discover such collection, we will immediately delete the data. Parents or guardians who believe their child has provided us with personal data should contact us immediately.

13. Data Security

We implement appropriate technical and organizational measures designed to protect personal data in transit and at rest, including encryption, access controls, and regular security assessments.

Unfortunately, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We do our best to protect your personal data; nevertheless, we cannot guarantee its absolute security. In the event that your personal information is compromised as a breach of security, we will promptly notify you in compliance with applicable law.

14. Cookies and Tracking Technologies

The App does not use browser cookies. We may use standard mobile analytics technologies (such as Firebase Analytics) to collect anonymous usage data to improve App functionality and user experience. You can manage analytics preferences through your device privacy settings.

15. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we revise the "Last updated" date and publish the updated version at this URL. We will notify you of material changes via in-app notifications or prominent notice in the App. Continued use after changes constitutes acceptance.

17. Contact Us

For privacy-related questions, requests, or complaints:

• Developer: Jaber (Vivo ai)
• Email: contact@vivoai.app
• In-app: Feedback form (Settings → Feedback)