Privacy Policy

1.Who We Are

Altai AI (“the Service”, altaiapp.com) is operated by Wargora Yazılım Ticaret Limited Şirketi (“we”, “us”), a company registered in Türkiye. This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, who we share it with, and the rights you have over it. You can reach us at any time at info@altaiapp.com.

2.Information We Collect

Account information

When you sign in with Google or Apple, we receive your name, email address, and profile picture from that provider, plus a stable account identifier. We do not collect or store passwords.

Content and inputs

The Service is template-driven: you select one of our curated transformation templates and provide the inputs it asks for — the photos you upload and, where the template includes one, a short text input. We process those inputs and the template you selected. Inputs are screened by automated content moderation before anything is generated (see section 4) and may be logged in short form for safety, abuse prevention, and debugging.

Usage information

We keep records of your credit balance, purchases, generation history metadata (timestamps, templates used, model, status), and approximate usage statistics such as total generations.

Device and technical information

Like most services, we receive log data such as IP address, request timestamps, and user agent, which we use for security, rate limiting, and diagnosing errors.

Payment information

Payments are processed by our merchant of record, Paddle (paddle.com). Card numbers and other payment credentials go directly to Paddle and are never stored on our systems. We receive only the transaction outcome and the plan or credit package purchased, so we can credit your account.

3.How We Use Information

• To provide the Service: generate media, meter credits, and sync your account across devices.
• To keep the Service safe: enforce our Acceptable Use Policy and block prohibited content (section 4).
• To process purchases and prevent fraud, abuse, and chargebacks.
• To respond to your support requests.
• To maintain, debug, and secure our infrastructure.
• To comply with legal obligations.

We do not sell your personal data, and we do not use your photos or other content you provide to train our own models.

4.Content Moderation

Every user input submitted for image or video generation is checked by automated moderation tools before any model runs — the generation is stopped when an input is flagged. Templates themselves are reviewed by our team before they are published. Moderation exists to prevent prohibited content such as NSFW, adult, pornographic, or sexual material; content involving minors; deepfakes, face swaps, and impersonation of real people; and the other categories defined in our Terms of Service. Inputs flagged by moderation are blocked, not generated, and the moderation decision may be logged with your account identifier for safety and audit purposes.

5.Legal Bases (GDPR / KVKK)

Where the EU General Data Protection Regulation or the Turkish Personal Data Protection Law (KVKK) applies, we process your data on these bases: performance of a contract (providing the Service you signed up for), legitimate interests (security, fraud prevention, diagnostics), consent (where you have given it, e.g. for communications), and legal obligation (tax, accounting, and lawful requests).

6.How We Share Information

We share personal data only with processors and partners necessary to run the Service:

• Paddle (paddle.com) — merchant of record for payments, tax invoicing, and refunds.
• AI generation providers — to run the curated template transformations you select with the inputs you provide. Inputs are screened before they reach any provider.
• Identity providers (Google, Apple) — solely to authenticate your sign-in.
• Infrastructure providers — hosting, storage, and delivery of the Service.

We may also disclose data if required by law or to protect our rights, users, or the public, including reporting child-safety violations to authorities. In the event of a merger or asset sale, we may transfer data as part of that transaction with notice to you.

7.Data Retention

We keep account and transaction records for as long as your account is active and for the period required by tax and commercial law afterwards. Generation metadata and moderation logs are retained for a limited period for safety and audit purposes. Uploaded source photos are processed to produce your result and are not retained longer than needed to operate the Service. You may request deletion at any time (section 8).

8.Your Rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, to object to certain processing, and to withdraw consent. To exercise any of these rights, email info@altaiapp.com from the address associated with your account. We respond within the statutory period. You may also complain to your local data protection authority; in Türkiye this is Kişisel Verileri Koruma Kurumu (KVKK).

9.Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Users between 13 and 18 need parental consent as described in our Terms of Service. If you believe a child is using the Service unlawfully, contact us and we will remove the account.

10.Cookies and Local Storage

We use local browser storage to keep you signed in (authentication token), remember your preferences, and store items such as your saved templates on your own device. We do not use advertising cookies. You can clear this data at any time through your browser settings, which will sign you out.

11.International Transfers

Our providers and infrastructure may process data in countries other than your own, including the United States and the European Union. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

12.Security

We use encryption in transit (TLS), access controls, and least-privilege practices to protect your data. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we investigate and notify affected users and regulators if a breach occurs as required by law.

13.Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above always reflects the current version, and material changes will be announced in the Service.