Ethereal Frame Privacy Policy
This Privacy Policy applies to Ethereal Frame (hereinafter referred to as “the App” or “we”, “us”, or “our”) and its related services. The App is an AI generation application that may involve users entering prompts, uploading images/materials, generating images, or other content.
We are committed to complying with the privacy regulations of the following major regions, including but not limited to:
- European Union: General Data Protection Regulation (GDPR)
- North America: California Consumer Privacy Act (CCPA/CPRA) of the United States, Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, and others
- East Asia: Act on the Protection of Personal Information (APPI) of Japan, Personal Information Protection Act (PIPA) of South Korea, Personal Data Protection Act (PDPA) of Singapore, and others
- Australia: Privacy Act 1988 and the Australian Privacy Principles (APPs)
This Policy explains how we collect, use, store, share, and protect your personal information, as well as the rights you have. By using the App, you agree to this Policy. If you do not agree, please stop using the App.
1. Data Controller and Contact Information
If you have any questions about this Policy or wish to exercise your rights, please contact us via the email addresses above. We will normally respond within 30 days (or within a shorter period required by applicable law).
2. Personal Information We Collect
We may collect the following categories of information (depending on the features you use and your location):
(1) Information You Provide Directly
- Account information: email address, username, password (stored in encrypted form), personal profile (optional)
- User content: prompts, uploaded images/photos/materials, generation request descriptions
- Contact information: name, email address, and description of the issue when you contact customer support
- Payment information (if applicable): processed by third-party payment processors; we generally do not store full payment card details
(2) Information Collected Automatically
- Device and technical information: device model, operating system, unique device identifiers, IP address, browser type, App version
- Usage data: feature usage, number of generations, time spent, crash logs, performance data
- Cookies and similar technologies: used for login status, preference settings, and analytics (see Section 9)
(3) AI-Related Data
- Prompts you enter, materials you upload, and generated content (such as images)
- Anonymized or de-identified data that may be used to improve AI models (see Section 4)
We do not actively collect sensitive personal information (such as race, religion, health, or biometric data) unless you voluntarily provide it and there is a clear legal basis. Please do not upload content containing sensitive information about others.
3. How We Collect Information
- Information you provide directly (when registering, using features, or contacting us)
- Information collected automatically (through your device or network while using the App)
- Information from third-party sources (such as login service providers or analytics tools, only with your authorization or as permitted by law)
4. How We Use Personal Information (Purposes and Legal Bases)
We process your information only when we have a lawful basis for doing so.
Special Notes on AI:
- Ownership and copyright of generated content are governed by our User Agreement / Terms of Service.
- We will not intentionally use your personally identifiable information to train publicly available models unless we obtain your explicit consent or the data has been sufficiently de-identified.
- Certain regions (such as the EU and California) require explanations regarding automated decision-making. The App currently does not engage in automated decision-making that produces legal or similarly significant effects on you.
5. Sharing and Disclosure of Information
We do not sell your personal information (as defined under the CCPA). We share information only in the following circumstances:
- Service providers: cloud services, AI computing, analytics, payment, customer support, etc. (bound by contract and limited to necessary purposes)
- Affiliates: entities under common control, for the purpose of providing services
- Legal requirements: in response to court orders, government requests, or to protect rights or safety
- Business transfers: in the event of a merger, acquisition, or similar transaction, subject to this Policy
- With your consent: in other cases
For cross-border transfers, we implement appropriate safeguards (such as Standard Contractual Clauses, adequacy decisions, encryption, etc.) to comply with GDPR and other applicable requirements.
6. Data Storage and Retention
- Storage locations: Data may be stored in [please fill in primary server regions, e.g., European Union, United States, Singapore, Australia, etc.], with appropriate cross-border protection measures in place.
- Retention periods: We retain personal information for the shortest time necessary to fulfill the purposes for which it was collected. Account information is generally retained for the duration of the account; usage logs are typically retained for [please fill in, e.g., 12–24 months], unless a longer period is required by law. After account deletion, we will delete or anonymize the relevant data within a reasonable period (except for backups).
7. Your Rights
Depending on your location, you may have the following rights (which we will respond to within the scope permitted by applicable law):
General Rights (GDPR, APPs, and similar laws):
- Access, correct, or delete your personal information
- Restrict or object to processing
- Data portability
- Withdraw consent (without affecting the lawfulness of processing based on consent before its withdrawal)
- Right to lodge a complaint with a supervisory authority
Additional Rights for California Residents (CCPA/CPRA):
- Know the categories of personal information we collect, the sources, purposes, and sharing practices
- Delete or correct personal information
- Opt out of the “sale” or “sharing” of personal information (we do not sell personal information)
- Limit the use of sensitive personal information
- Non-discrimination for exercising your rights
Other Regions: Users in Japan, South Korea, Singapore, Australia, and elsewhere also have similar rights of access, correction, deletion, and objection.
How to Exercise Your Rights: Send an email to [email protected], stating your request, your location, and any information needed to verify your identity. We will respond within the statutory timeframe. You may also manage certain preferences (such as notifications or data-use opt-outs) in the App settings.
AI Data Opt-Out: You may request that we stop using your prompts or generated data for model improvement (excluding de-identified data).
8. Children’s Privacy
The App is not directed at children under the age of 14 (or a higher age required by local law, such as 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected such information in error, please contact us so that we can delete it.
9. Cookies and Similar Technologies
We use cookies, local storage, pixel tags, and similar technologies for:
- Essential functions (login, security)
- Analytics and performance
- Preference settings
10. Data Security
We implement reasonable technical and organizational measures to protect data, including encryption in transit (TLS), access controls, regular security assessments, and employee training. However, no system is 100% secure. Please also take appropriate steps to safeguard your account information.
11. Third-Party Links and Services
The App may contain links to or integrations with third parties (login, payment, analytics). Their privacy practices are governed by their own policies; please review them.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified through in-App notices, email, or website announcements, and the “Last Updated” date will be revised. Continued use of the App after the changes take effect constitutes acceptance of the updated Policy.
13. Region-Specific Notes
- Japan / South Korea / Singapore users: We comply with local personal data protection requirements and provide channels for access and correction.
- Australian users: We comply with the Australian Privacy Principles. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- Canadian users: We comply with the principles of PIPEDA.
14. Contact Us
If you have any privacy-related questions, complaints, or rights requests, please contact:
Email: [email protected]