← Back to home

This Privacy Policy explains how ReCrea.AI ("ReCrea," "we," "us," or "our") collects, obtains, uses, stores, and shares personal data when you use the ReCrea mobile application, websites, and related services (the "Services").

1. Data we collect and how we obtain it

Account and profile data

We receive information you provide during registration or in your profile, such as your email address, display name, age range, gender selection, hair description, account identifiers, language, and authentication provider. If you sign in through Apple, Google, or another authentication provider, we receive the account information that provider makes available to us.

User content and AI inputs

We collect content you intentionally select, upload, create, or send through the Services, including photos, faces and likenesses visible in photos, videos, reference images, prompts, chat messages with Emma, avatar names, creative instructions, generation settings, and feedback. We also store generated photos, videos, personalized avatar/model artifacts, and related output metadata so we can return results and maintain your gallery.

Transactions and subscriptions

We receive purchase status, product, price, currency, subscription status, store transaction identifiers, and token or credit balances from Apple, Google, RuStore, payment processors, and subscription infrastructure. ReCrea does not receive your full payment-card number from an app store.

Device, usage, and diagnostics

We collect this data automatically when you use the Services: IP address, approximate location derived from IP, app version, device and operating-system information, language, store source, advertising or installation identifiers where permitted, screens and features used, button interactions, request timing, crash reports, network diagnostics, and security or fraud signals.

Support and communications

When you contact us, we collect your message, contact details, attachments, account identifiers, and information needed to investigate and resolve the request.

2. How we use data

3. Third-party AI providers

Depending on the feature, ReCrea sends only the data needed to perform your request. A pseudonymous account, conversation, project, or request identifier may accompany the content so the result can be returned to the correct account.

xAI (X.AI LLC)

Purpose: Supported video generation and related safety processing.

Data sent: Prompts, reference photos or video frames, input videos, generation settings, and pseudonymous request identifiers.

Fal AI (Features & Labels Inc.)

Purpose: Supported video generation and inference.

Data sent: Prompts, reference photos or frames, input videos, generation settings, and pseudonymous request identifiers.

Phota Labs, Inc.

Purpose: Personalized avatar/model training, photo generation, and photo editing.

Data sent: Selected photos, faces and likenesses in those photos, prompts or editing instructions, avatar attributes, generation settings, and pseudonymous identifiers. Phota Labs states that Google Gemini and OpenAI may act as subprocessors for parts of this processing.

OpenAI, L.L.C.

Purpose: Emma, prompt assistance, creative context, safety, and quality workflows, including as a Phota Labs subprocessor where applicable.

Data sent: Prompts, Emma chat messages, reference images, instructions, related context, and pseudonymous request identifiers.

Google LLC (Gemini)

Purpose: Emma, prompt compression, safety, and quality workflows, including as a Phota Labs subprocessor where applicable.

Data sent: Prompts, Emma chat messages, reference images or videos, instructions, related context, and pseudonymous request identifiers.

RunPod, Inc.

Purpose: Compute infrastructure for supported avatar training or photo generation.

Data sent: Selected photos, prompts, generation settings, temporary model artifacts, and pseudonymous request identifiers.

Content you submit may itself reveal sensitive information, including biometric characteristics, health information, precise location visible in media or metadata, or information about other people. Submit only content you have the right to use. We do not sell your prompts, photos, videos, chat messages, or personalized model artifacts to AI providers for their independent advertising.

4. Your AI consent and choices

By tapping Agree & Continue in the disclosure, you permit ReCrea to send the listed categories of data to the named AI providers for the current request and future use of the described AI features. We will request consent again if the categories of personal data, named providers, or purposes materially change.

You may withdraw consent in Profile → Settings & Actions → AI data sharing. Withdrawal blocks new third-party AI processing until you agree again. It does not reverse processing already completed or prevent retention required for security, legal compliance, or an existing transaction. You can still use parts of the app that do not require an AI request.

5. Other service providers and disclosures

We also share data as needed with cloud hosting and content-delivery providers, authentication providers, app stores and payment processors, customer-support tools, analytics and attribution services, crash and performance monitoring services, and professional advisers. We may disclose data when required by law, to protect rights or safety, or in connection with a merger, financing, acquisition, or sale of assets. We do not sell personal data for money.

6. Protection required from processors

We require third-party processors that receive personal data on our behalf, including the AI providers listed above, to process it only for authorized purposes and to provide the same or an equal level of privacy and security protection as described in this Policy and required by applicable law. They may use subprocessors under their contracts and published terms while remaining responsible for the processing they perform for us.

7. Storage, retention, and international transfers

ReCrea stores account data and requested content for as long as needed to provide your account, gallery, personalized models, transactions, support, safety, and legal compliance. Retention by an AI provider varies by provider, feature, contractual setting, and security requirement; its linked terms describe those periods and controls. We delete or anonymize data when it is no longer needed, subject to backups, fraud prevention, disputes, and legal obligations.

ReCrea and its providers may process data in countries other than your own, including the United States and European jurisdictions. Where required, we use contractual and legal safeguards for these transfers.

8. Security

We use administrative, technical, and organizational measures designed to protect personal data, including encrypted network transport, access controls, logging, and limited access based on operational need. No system is completely secure, so we cannot guarantee absolute security.

9. Deletion and privacy rights

You can delete your ReCrea account from the Profile screen. You may also ask to access, correct, export, restrict, object to, or delete personal data, or withdraw consent, where applicable law provides those rights. Contact us from the email associated with your account and include your ReCrea account ID. We may need to verify your identity.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect personal data from a child under 13. A minor must not submit another person's image without the rights and permissions required by law. Contact us if you believe a child provided data improperly.

11. Changes to this Policy

We may update this Policy as the Services or law changes. We will post the updated date and provide additional notice where required. A material expansion of AI data sharing will require a new in-app consent.

12. Contact

Privacy questions and requests: ceo@3nity.studio.