Privacy Policy

1. Introduction

PopcornAI LLC ("Company," "we," "us," or "our") operates the Somagic mobile application ("App"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights regarding that data.

By using the App you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Definitions

• Personal Data: information relating to an identified or identifiable individual
• Face Data: photos you upload, face embeddings (numeric vectors) computed during AI processing, and AI-generated portraits or videos
• Usage Data: data collected automatically such as device information, IP address, session duration, and in-app events
• AI Content: images or videos generated by the App using artificial intelligence
• Third-Party AI Provider: external AI service used for content generation or processing

3. Data We Collect

We collect the following categories of information:

• Photos & Images: images you upload for AI processing, enhancement, or generation
• Face Data: face embeddings (512-dimensional numeric vectors computed on our servers) used for personalized AI generation. We do not collect depth maps, live camera video, or any biometric template suitable for authentication. Facial landmarks are produced transiently during processing and discarded
• AI-Generated Content: images and videos generated by AI based on your inputs
• Account Data: an anonymous identifier automatically created via Supabase. If you link Apple Sign-In or Google Sign-In, we receive your Apple UID or Google sub ID, email (if provided), and name
• Device Information: device model, OS version, language, timezone, and anonymous device identifier
• Usage Data: features used, session duration, in-app events, screens visited, and crash reports
• Purchase Data: subscription status, credit balance, and transaction identifiers. We do not store full payment details — billing is handled entirely by Apple or Google

4. How We Use Your Data

We use your data to:

• Process and return AI-generated images and videos
• Authenticate your account and manage subscriptions and credits
• Provide, operate, and maintain the App
• Respond to support requests and communicate service-related notices
• Perform analytics, diagnose bugs, and monitor App performance
• Detect and prevent fraud, abuse, and security incidents
• Develop new features and improve existing functionality using aggregated, non-identifiable data

Face Data is used exclusively for AI generation of personalized portraits and videos. Face Data is never used for identification, advertising, marketing, or analytics.

We do not sell your personal data to third parties and do not use your photos for advertising profiling.

5. AI Processing & Third-Party AI Providers

When you request AI generation, the following data may be sent to AI processing systems: input images, text prompts, face embeddings, and generation parameters (resolution, style settings).

By using the generation features, you explicitly consent to your data being processed by third-party AI providers. Our providers include:

Image Generation:

• kie.ai: primary image and video generation — prompts, reference images, face data, parameters
• Flux (Black Forest Labs): image generation — prompts, reference images, parameters
• OpenAI: image generation and editing — prompts, reference images

Video Generation:

• Google Veo: AI video generation — prompts, reference images
• Runway: AI video generation — prompts, reference images
• Kling (Kuaishou): AI video generation — prompts, reference images
• Hailuo (MiniMax): AI video generation — prompts, reference images

Third-party providers process data under their own privacy policies and our data processing agreements, which require: data used only for the requested service; appropriate security measures; no use of data for provider model training (where contractually possible); and data deletion after processing (typically within 24–72 hours).

You may withdraw consent by discontinuing use of generation features. Previously generated content remains unless you request its deletion.

6. Data Sharing & Third-Party Services

We share data with the following categories of service providers:

• Supabase: cloud hosting, database, authentication, and data storage
• AI Providers: image and video generation (see Section 5)
• Apple App Store / Google Play: in-app purchases and subscription management

We may also share Personal Data:

• During corporate transactions (merger, acquisition, asset sale)
• With affiliates who are bound by this Policy
• When required by law, court order, or government request
• With your explicit consent

We do not sell, license, or share Face Data with any parties other than the AI providers listed in Section 5 for the sole purpose of generation.

7. Data Retention

• Uploaded photos: deleted from our servers within 30 days after upload
• AI-generated content: retained while your account is active; deleted upon account deletion
• Account data: retained while your account is active; anonymized or deleted within 30 days of account deletion
• Usage data: retained in aggregated, anonymized form for up to 24 months
• Purchase data: retained as required for tax and legal compliance

You may delete your account and all associated data at any time by contacting us at support@somagic.app.

8. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request erasure of your personal data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Objection: object to certain processing activities
• Opt-out: California residents may opt out of the sale of personal information (we do not sell data, but you may submit a request to confirm)
• Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email us at support@somagic.app. We will respond within 30 days.

9. Security

We implement industry-standard security measures including: encryption in transit (TLS 1.2+); encryption at rest; access controls and authentication; and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including the United States, where data protection laws may differ. By using the App, you consent to the transfer of your data to these jurisdictions. We implement appropriate safeguards to ensure adequate protection.

11. Children's Privacy

The App is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us immediately at support@somagic.app and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "updated" date at the top of this page. For material changes, we may also notify you via email or an in-app notice. Continued use of the App after changes constitutes your acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data requests, or concerns, contact us at: support@somagic.app

PopcornAI LLC
16192 Coastal Hwy, Lewes, DE 19958, USA