Privacy Policy

Last updated: October 27, 2026

This Privacy Policy describes how PromptFlix (“PromptFlix”, “we”, “us”, “our”) collects, uses, stores, and shares personal information when you use our websites, applications, and related services (the “Services”).

PromptFlix lets you add your likeness (face photos and a voice sample), connect with friends, cast yourselves into movie template roles, generate personalized films, stream them privately, and optionally publish to YouTube.

By using the Services, you acknowledge this policy. If you do not agree, do not use the Services.

1. Scope

This policy applies to:

• The PromptFlix website and localized routes
• Accounts, authentication, sessions, and settings
• Likeness uploads, casting, generation jobs, and resulting videos
• Streaming, downloads, and optional YouTube publishing
• Billing, credits, and subscription checkouts
• Emails and notifications we send (account, billing, activity, and, if you opt in, news and offers)
• Analytics and operational logging we enable

It does not govern third-party sites or apps we only link to (for example Google or Apple sign-in, YouTube, payment processors, or cloud vendors) when you interact with them under their own policies.

2. Categories of information we collect

2.1 Information you provide

2.2 Information collected automatically

2.3 Information from third parties

• Google (if you use Google sign-in): basic profile fields such as name, email, and provider account identifiers
• Apple (if you use Sign in with Apple): a stable account identifier, your name (if you share it), and your email or an Apple private relay address
• Stripe (payments): payment status, customer IDs, product / subscription state, and invoice metadata needed to grant credits and manage billing
• YouTube (if you connect publishing): OAuth tokens and channel-related identifiers needed to upload on your behalf

2.4 Sensitive or high-impact data

Likeness media and generated videos that depict people can be sensitive. We process them only to provide the Services you request (cast, generate, store, stream, and optionally publish). You may only upload photos and voice of yourself—not celebrities or anyone else (see our Terms of Service). Your male / female choice and optional body build are shown to friends who can cast you, are sent to our AI providers only as part of the prompts for your films, and are deleted with your likeness.

2.5 Face signatures (biometric information)

To protect your likeness, we compute a face signature from the photos you upload: a list of numbers describing your face. We use it only to:

• check that the photos in your likeness show the same person, and quietly leave out photos that don't (for example group shots or someone else);
• check that your likeness isn't being used on another account.

We do not use face signatures to identify you to anyone, for advertising, or to train models, and we never sell, lease, or trade them. We keep one signature per version of your likeness and delete it when you delete that likeness or your account, and in any case within one year of your last use of the Services. The signature is computed by a stateless service that keeps no copy. By adding a likeness you consent to this processing; you can withdraw consent at any time by deleting your likeness.

3. How we use information

We use personal information to:

• Create and secure accounts, authenticate you, and maintain sessions
• Process likeness uploads, casting choices, and run generation jobs (including via compute providers)
• Check that likeness photos show the account holder (see §2.5)
• Store, stream, and deliver videos (including CDN / video hosts)
• Optional YouTube publish flows you initiate
• Bill for credits or subscriptions and prevent fraud
• Send account and billing email, and activity notifications (email, iPhone push, or browser notifications) according to your settings
• Improve reliability, debug failures, and monitor abuse
• Comply with law and enforce our Terms
• Send news and offers only if you opt in; every such email has a one-click unsubscribe link, and you can change this any time in Settings → Notifications

We do not sell your personal information.

4. AI generation and automated processing

Generation uses automated systems (including third-party AI / compute providers) to cast your likeness into template roles and produce videos. Outputs can be imperfect, unexpected, or fail. We process your media for this purpose only as needed to deliver the feature and related support, storage, and moderation.

We do not use your likeness uploads to train public foundation models for unrelated third parties, except where a subprocessors’ standard infrastructure may process data under their terms solely to run the job you requested. If our training practices change, we will update this policy.

5. Sharing and processors

We share information with service providers who process it on our behalf, for example:

Every service provider that receives personal data from us, including the AI model providers above, is bound by contract to protect it at least as well as this policy does, and to use it only to provide its service to us.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (with notice where appropriate).

6. International transfers

We may process and store information in the European Union, the United States, and other countries where we or our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses or provider certifications) for cross-border transfers.

7. Retention

We retain information only as long as needed for the purposes above, including:

• Account data — while your account is active and for a reasonable period afterward for security, backups, and legal claims
• Likeness media — while needed for generations you request and until you delete them or close your account, subject to backup cycles
• Face signatures — until you delete that likeness or your account, and no longer than one year after your last use (see §2.5)
• Film production files — intermediate render files are deleted automatically within a few days; finished films stay until you delete them
• Generated videos — while associated with your account or as required for delivery history, then deleted or anonymized according to product tools and retention schedules
• Billing records — as required for tax, accounting, and dispute resolution
• Logs — for shorter operational windows unless needed for security investigations

You can request deletion (see §9). Some records may be retained where law requires.

8. Security

We use reasonable technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and encrypted secrets. We do not store passwords: you sign in with Google or Apple. No method of transmission or storage is 100% secure. You are responsible for protecting your credentials and devices.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is consent-based.

You can often:

• Update profile fields in Settings → Account
• Choose email, iPhone push, browser notifications, and news and offers in Settings → Notifications
• Delete your likeness (which also deletes its face signature) or your films
• Disconnect YouTube, or revoke Google or Apple access in those accounts' settings
• Delete your account in Settings → Account, or email [email protected] for other requests

We may need to verify your identity before fulfilling requests. We will not discriminate against you for exercising privacy rights.

Cookies

You can control cookies through browser settings. Disabling necessary cookies may break sign-in or core features.

10. Children

The Services are only for people 18 or older. We do not knowingly collect personal information, likeness media, or face signatures from anyone under 18, and our photo checks reject photos of anyone who appears to be a minor. If you believe a minor has provided data, email [email protected] and we will delete it and close the account.

11. Third-party links and publishing

If you publish a video to YouTube or share content elsewhere, that platform’s terms and privacy policy apply to the published copy and audience interactions. PromptFlix is not responsible for third-party processing after you publish or export content.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated in-product or by email where appropriate. Continued use after an update means you acknowledge the revised policy, except where mandatory law requires a different standard.

13. Contact

For privacy questions or requests, email [email protected]. Please include enough detail for us to locate your account (for example the email you registered with).

This policy is provided in English. Localized site UI does not change the governing language of this document unless we publish a separate localized legal version.