By Elden Studios
Privacy Policy
This policy explains what Avatalk collects, why, who helps us process it, how long we keep it, and the choices and rights you have. We have tried to describe exactly what the App does, in plain words. If anything here is unclear, write to us.
1. The short version
- You don’t need a name, email or phone number to use Avatalk. The App creates an anonymous account on your phone.
- To make a video, your photo and your words (or your recording) are sent to the AI services that generate it. We don’t sell your data and don’t use it for advertising.
- Photos and recordings you upload to make a video are deleted from our servers automatically after 72 hours.
- If you create a voice of your own, we do it only with the permission you read aloud, and the recording of that permission is deleted when you delete the voice.
- You can delete your data from the App at any time (Settings → Danger zone), or ask us to delete everything by email.
2. What we collect, and why
Your anonymous account. When you first open the App, it creates an account with a random identifier, kept in your phone’s Keychain. It connects your credits, purchases and videos. Our backend records the time, your network address (IP) and device type for each sign-in session, as part of keeping the service secure. Settings shows a short support code (the first 8 characters of this identifier) that you can send us so we can find your account. If you delete the App or reset your phone, a new account is created and we cannot always reconnect you to the old one.
Photos of a face. When you make a video or a restyled “look”, the photo you choose (or take with the camera) is uploaded to our servers and passed to the AI service that animates it or restyles it. Faces are found on your phone, not on our servers. We delete uploaded photos automatically 72 hours after they are last used. We do not use your photos for facial recognition, to identify you, or to build a profile of your face. Saved faces stay on your phone.
Your words (scripts). The text you write is sent to the text-to-speech service that voices it. To add captions, we keep the timing of each spoken character with the record of your video, which means the words are stored with that record until you use Delete my data. When you use “Hear it first”, the preview and its timing are kept for one day so the video can reuse it.
Recordings of your own voice for a video. If you record what your video should say, the recording is uploaded to make that video and deleted from our servers automatically after 72 hours.
A voice of your own (voice cloning), if you choose to create one. You read a short permission phrase aloud. That recording is both your consent and the sample your synthetic voice is built from. We send it to our voice provider to create the voice, and keep it only while your voice exists: when you delete your voice, the recording is deleted too. A synthetic voice may be treated as biometric information under laws such as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act and Article 9 of the UK/EU GDPR. We create one only when you ask, only from a recording you make in the App for that purpose, and only after you have said aloud that you agree. We use it only to speak the words you write in this App. When you delete your voice, the App stops using it at once. The voice model itself is held by our provider, whose copy is kept under its own terms; we are working with the provider to remove it.
Videos and images we make for you. Finished videos, HD versions and restyled images are made by our AI provider and downloaded to your phone. We keep our own private copy of each finished video on our servers, so it can be downloaded again; the App reaches it only through links that stop working within the hour. Our copies and our records of your videos are deleted when you use Delete my data.
Our AI provider keeps what it makes for us only for a limited time. Its copy of a finished video is deleted as soon as ours is saved (and within 7 days in any case); HD versions are deleted within 21 days, restyled images within 7 days, and speech within 2 days. Videos made before 5 October 2026 were made without these limits: Delete my data asks the provider to delete those copies too, and if you write to us we will ask again.
Links you share (“reply links”), if you make one. When you share a video as a link, a copy of that video is uploaded and can be watched by anyone who has the link, together with the “From” name on your card if you added one. A link works for 30 days, or until you tap Stop sharing or delete the video; the copy is then deleted. Before a link is made, your words are checked automatically for harmful content (by an AI model or a word list); the words are not kept. For people who open your link we count opens and store-button taps, and use a one-way scrambled form of their network address (never the address itself) to limit abuse; those counters are deleted after 2 days. A link’s record, without the name or the video, is kept for up to 180 days after the copy is deleted so we can see whether links work. Anyone can report a link. A reported video is hidden at once and reviewed by us within 48 hours; reports and any note written with them are sent to our team’s internal alerting channel. People who break our rules can be stopped from making links.
Purchases and credits. Payments are handled by Apple; we never see your card details. We store your credit balance and, for each purchase, Apple’s transaction identifiers and the credits it added. Your anonymous account identifier is sent to Apple with each purchase so it can be matched to your account.
How you use the App. We record usage events, such as the App being opened, a video being requested, finished or watched, a share, a purchase screen being shown, or a button such as “Say it again” being tapped. Each event carries your anonymous account identifier, the time, the App version, and simple details such as which button or which kind of share. It never contains your words, photos or recordings. We use these to see what works and what doesn’t. They are not used for advertising and are deleted automatically after 180 days.
Crash reports. If you have chosen to share analytics with app developers in your iPhone’s settings, Apple gives the App crash and hang reports, which we store with your anonymous account identifier and App and iOS versions to fix problems.
Notifications. The App registers your device with Apple’s notification service so it can tell you when a video is ready, when someone replies to your link, or show progress on your Lock Screen. We store the device token with your account to send these. You choose whether notifications are shown.
Special days and drafts. Birthdays and other days you add, your reminders, drafts, editor projects and the names you type on a card stay on your phone. We don’t receive them (except the “From” name sent with a link, described above).
Messages to support. If you email us, we receive what you write and the details the App adds (your support code, App version and iOS version), and use them to help you.
3. Why we may use your data (legal bases)
- To provide what you ask for (contract): making and delivering videos, voices, links, purchases and credits, and support.
- Your explicit consent: creating a voice of your own. You can withdraw it by deleting your voice.
- Our legitimate interests: keeping the service secure, preventing abuse, handling reports, understanding how the App is used, and fixing crashes.
- Legal obligations: keeping purchase records.
4. Who processes data for us
We use these service providers, only to provide the App:
- Supabase — our backend: accounts, database and file storage, including our private copies of your finished videos. Our project is hosted in the European Union (Frankfurt, Germany).
- fal.ai (United States) — runs the AI models that make your content: ByteDance OmniHuman (animates the photo), ElevenLabs (turns your words into speech), MiniMax (creates and speaks your own voice, if you make one), an image model for restyled looks, and ByteDance’s upscaler (HD versions). These receive the photo, words or audio needed for the item you asked for, and host the results.
- Anthropic (United States) — checks the words of a video for harmful content before a link is made.
- Cloudflare — serves the web page your link opens.
- Apple — payments, notifications and crash reports.
- Our team’s internal alerting tool — receives link reports and operational alerts.
We do not sell your personal information, and we do not share it for advertising.
5. How long we keep it
| What | Kept |
|---|---|
| Photos and voice recordings uploaded to make a video or a look | 72 hours after last use, then deleted automatically |
| Your voice-permission recording | While your voice exists; deleted when you delete the voice |
| “Hear it first” previews | 1 day |
| Records of your videos (including caption timing) and crash reports | Until you use Delete my data |
| Link copies | 30 days at most, or until you stop sharing or delete the video |
| Link records (without the name or video) | Up to 180 days after the copy is deleted |
| Abuse-limit counters about link viewers | 2 days |
| Usage events | 180 days |
| Credit balance and purchase records | For as long as your account exists, and as required for accounting |
| Our private copy of each finished video | Until you use Delete my data |
| Copies held by our AI provider | A finished video’s: deleted once our copy is saved, 7 days at most. HD versions: 21 days at most. Restyled images: 7 days at most. Speech: 2 days at most |
6. Deleting your data
- Delete my data (Settings → Danger zone) deletes, on your phone and on our servers, your uploaded photos, your finished videos and their records, drafts, projects, previews, restyles, crash reports and links, and clears the special days on your phone. It also asks our AI provider to delete its copies of your videos and HD versions. It keeps your credits and purchase records (so you don’t lose what you paid for), your usage events until they expire, and your voice if you have one.
- Delete my voice (Settings) stops your voice being used at once and deletes your voice-permission recording.
- Deleting a video removes it from your phone and stops its link.
- Everything else: email us with your support code and we will delete your account and the rest of your data, and ask our providers to delete their copies, within 30 days, except purchase records we must keep by law.
7. Your rights
Depending on where you live, you may have the right to access, copy, correct or delete your data, to object to or restrict how it is used, to withdraw consent, and to complain to a data-protection authority. Email us with your support code and we will respond within 30 days.
- European Union, United Kingdom and similar laws: the rights above, under the GDPR and UK GDPR.
- California and other US states: the right to know, delete and correct, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it.
- Saudi Arabia: your rights under the Personal Data Protection Law, including to be informed, to access, to correct and to request deletion. Your data is processed outside the Kingdom (see section 8); you may complain to the Saudi Data & AI Authority (SDAIA).
8. Where your data is processed
Our backend is in the European Union (Germany), and our AI and other providers process data in the United States and other countries. Where the law requires it, these transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
9. Children
Avatalk is for people aged 13 and over (or the minimum age for digital consent where you live). If you are under 18, you need a parent’s or guardian’s permission. Only upload a photo of a child if you are their parent or guardian. If you believe a child under 13 has given us data, contact us and we will delete it.
10. Security
Data is encrypted in transit, uploads are stored in private storage that only our servers can read, and access to our systems is restricted. No system is perfectly secure, but we work to keep yours safe.
11. Changes to this policy
When we change this policy we update the date at the top, and we tell you in the App when a change is significant.
12. Contact
Questions or requests about your data: bazerbashi@elden-studios.com. Please include the support code from Settings.