Privacy Policy

1. Who we are and what this covers

Character Studio is operated by Jolly Bhagat, an individual based in India. Contact: support@vivarium-legal.com. Postal address: Jolly Bhagat, New Grain Market, Kothi No. 6, Khasra No. 9, Opposite Market Committee, Patiala 147004, Punjab, India.

This policy covers only the Character Studio iOS app and its related services, including role-based stories, AI character portraits, chapter illustrations, ending scenes and optional five-second films. The browser experience has a separate website privacy policy.

2. Information we process

• Account information: guest and account identifiers, installation identifiers, authentication credentials and account-linking state. Sign in with Apple can provide an Apple account identifier and email address, including a private relay address. Apple may offer your name during authorization.
• Creative content: one to three reference photos you select for generation, uploaded or generated image references, selected role/template, creation requests, generated images and videos, job identifiers and processing status. The app separately stores project names, story choices and approved image copies on your device.
• Purchases: Apple product, transaction and subscription identifiers, verification and entitlement records, credit grants, balances and spending history. Apple processes your payment details; the app uses verified purchase information to deliver benefits.
• Service and diagnostic data: IP address, device/app/operating-system information, request identifiers, error categories, operation and security records, and the service signals described below.
• Support: the messages and details you choose to send us.

3. What stays on your device

Native projects retain separate, resized JPEG copies of your one to three reference photos, project names, story decisions, creation references and approved portrait, chapter and ending images under the current account on that device. These project files use system file protection and are excluded from device backup. Your originals in the Photos library are not overwritten. This local project storage does not promise cloud project synchronization or recovery on another device.

4. AI images and videos

Choosing one to three reference photos for a local project does not itself start generation. When you confirm a creation, the app uploads the required input and sends a server-owned template identifier and an input reference. A character portrait uses your selected reference photos. Chapter illustrations and ending scenes use your approved character portrait. An optional five-second film uses an approved ending scene. Each creation is requested separately after the app shows its estimate.

We use BytePlus AI services for this processing, including Seedream for images and Seedance for video. BytePlus receives the input media and generation instructions needed to produce the requested result. Our service stores generated results and processing records so you can retrieve and review them. Story choices guide the available templates; local project records and media submitted for AI processing are distinct data.

AI processing delivers the creation you request. This policy does not promise a particular likeness or that all processing takes place in one country. Provider handling depends on applicable service arrangements and BytePlus AI service terms. We have not established a provider-specific retention deadline or a provider-wide no-training commitment.

5. Why we use information

We process information to prepare and secure accounts; provide stories and requested creations; retrieve, display and export results; reconcile pending jobs; verify purchases and deliver credits; prevent abuse; diagnose failures; answer support and privacy requests; and satisfy legal obligations. We also use the limited measurement described below.

Where the applicable law requires a legal basis, we rely on performance of the requested service, our legitimate interests in operating and securing it, legal obligations, and consent where required. You may withdraw optional consent without undoing processing already lawfully performed.

6. Service providers and international processing

Providers supporting the service include BytePlus for AI media processing, AWS for backend hosting, Supabase for database services, Cloudflare for API delivery and object storage, Sentry for crash/error monitoring, and Apple for sign-in and App Store purchases. The current native release does not send app measurement events to Meta; optional Meta website measurement is described in the separate website privacy policy. Each receives information appropriate to its role.

The native Sentry integration is configured to disable default personal information, screenshots, view hierarchies, replay, automatic network capture and automatic breadcrumbs. Crash information and deliberately sanitized error categories and request/job identifiers may still be sent. Server operational and security records are separate.

Information may be processed outside your country by us and our providers. We use safeguards required by applicable law for such processing. We may also disclose information where legally required, to protect users and the service, or in a business transfer subject to applicable protections.

7. App signals and attribution

iOS: the service records first-party installation and account/service signals, such as a first app opening, viewing Account, verified purchase/subscription events and creation outcomes. The app synchronizes the system App Tracking Transparency (ATT) choice. Advertising attribution paths are subject to the applicable permissions and service checks. Where enabled and eligible, these may use an explicitly received app link or Apple’s AdServices attribution token. First-party service records and an ATT permission are distinct; an app event alone does not establish an attributed ad click.

These app legal pages do not load advertising or analytics scripts. Ordinary hosting and security requests still occur when you open a page.

8. Retention and account deletion

Local native projects remain on your device until you remove them or the app clears that account's local data. Copies you export to Photos, files or other services remain under your control and must be removed separately.

Start deletion using Account → Delete Account in the app. You do not need to email support to initiate deletion or keep the cleanup moving. Once the service accepts the request, access to the account is revoked and a persistent cleanup request continues in the background. After the app confirms local account data has been removed, you may explicitly choose to start a new account or sign in while server cleanup continues; no new account is created automatically. To check an earlier request after changing accounts, open Account → Privacy and support → Previous account cleanup → Check status. An unavailable progress check does not mean cleanup is complete or affect your current account.

The process removes direct account identity fields and device and app-attribution links, and cleans up the account's owned uploads, generated character portraits, chapter illustrations, ending scenes and films in storage we control. Ordinary creative media is included in this cleanup; it is not kept merely because purchase records must remain.

Use Check status in Account to check an accepted request and cleanup progress. The service automatically retries work that remains pending after a temporary storage, delivery-cache or database failure. First-party cleanup is marked completed only after the covered first-party objects and content references have been cleaned up. This does not confirm Apple authorization revocation or deletion of external provider copies.

Limited transaction and audit evidence may remain for purchase verification, accounting, refunds, fraud prevention or legal obligations: an opaque account reference, transaction references, product, amount, credit movements and relevant times. This is not a full archive of your original account identity or creative media. An Apple credential needed to finish a pending revocation can remain until that operation is resolved.

We do not promise a fixed completion deadline or certify deletion of BytePlus copies from our first-party completion status. BytePlus copies, backups and operational/security logs can follow separate retention arrangements; we have not established a provider-copy or backup retention deadline. Contact support@vivarium-legal.com for help with an unresolved status or privacy question. Deleting the account does not cancel an Apple subscription; manage cancellation with Apple separately.

9. Your choices and rights

You decide whether to select reference photos, request AI processing or export a result. You can manage available system permissions in iOS Settings. Account deletion starts in the app as described above. For other access, correction, copy, deletion, restriction, objection or consent-withdrawal requests where available, or help with an unresolved deletion, email support@vivarium-legal.com with “Character Studio” in the subject. We may ask for the information necessary to identify and protect the correct account; do not send passwords, sign-in tokens or private deletion-recovery credentials.

Rights depend on your location and may have legal exceptions. We respond within the periods required by applicable law. If you disagree with our response, contact the same address to request review. You may complain to your local data protection authority where available.

10. Age and portrait permissions

Character Studio is intended for people aged 13 or older. Users below the age of legal majority need a parent or guardian’s permission. Only submit portraits of adults and only where you have the necessary rights and permission. Do not submit a child’s portrait for AI processing. If you believe a child’s information has been provided contrary to these rules, contact support@vivarium-legal.com.

11. Changes and contact

We will post updates here and change the date above. Material changes will be communicated where required by law. For questions or requests, contact support@vivarium-legal.com or write to Jolly Bhagat, New Grain Market, Kothi No. 6, Khasra No. 9, Opposite Market Committee, Patiala 147004, Punjab, India.