FanCam AI Privacy Policy
Effective date: October 27, 2026
Last updated: October 27, 2026
This Privacy Policy explains how FanCam AI ("we", "us" or "our"; see Section 1) collects, uses, stores, shares and deletes personal data when you use:
- the FanCam AI: Fan Cam Video Maker app for iOS, distributed through the Apple App Store;
- the FanCam AI: Fan Cam Video Maker app for Android, distributed through Google Play; and
- our website, https://fancamai.app.
In this policy, "the apps" means the iOS and Android apps, "the website" means fancamai.app, and "the Service" means all of them together.
If you have a question or want to use one of your privacy rights, email us at support@fancamai.app.
Summary
- No sign-up. The apps do not ask for your name, email address, phone number or a password. When you first open an app, it creates an anonymous ID that links your credits, uploads and videos.
- Your photo is used to make your video. Before your first video, the app asks for your explicit consent to upload your photo to our cloud storage (Google Firebase) and to share it with Replicate, our AI processing provider.
- No face recognition. We do not create faceprints or face templates, and we do not use faces to identify anyone.
- No ads, tracking, analytics or crash SDKs in the apps. We do not sell your personal data or share it for advertising.
- Your data stays until you delete it. We do not delete uploads or videos automatically on a schedule. You can delete everything at any time in the app under Settings → Delete Account & Data.
- The website uses Google Analytics only after you accept the cookie banner. Our website host, Cloudflare, counts page views on every visit with Cloudflare Web Analytics (see Section 9).
- Our app servers are in the United States (see Section 14).
1. Who we are
The Service is provided by the developer of the FanCam AI apps, who is named as the seller on the App Store listing and as the developer on the Google Play listing ("FanCam AI", "we", "us" or "our"). That developer decides how and why your personal data is processed through the Service and is the "data controller" under laws such as the EU and UK General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK).
Contact: support@fancamai.app
2. How the apps work
- When you first open an app, it signs you in anonymously with Firebase Authentication. This creates a random anonymous ID. It is not linked to your name, email address or phone number.
- You pick one photo, for example of yourself, of someone who has agreed, or of your pet. You also enter match details: the sport, the home and away team names, the score and the game minute. You then choose a prop and a video resolution.
- The app uploads the photo to our cloud storage. Our server builds the AI instructions from your selections; you do not type free-text prompts.
- Our server sends the photo and the instructions to Replicate, which runs the AI models that first create a still image and then turn it into a short video clip with AI-generated sound.
- The finished video is sent back to the app. The scoreboard with your team names, score and minute is added to the video on your device; that final version is not uploaded to us.
Creating a video uses credits, which you buy in packs through the App Store or Google Play.
3. Information we collect
This section covers the apps and the emails you send us. The website is covered in Section 9.
3.1 Information you provide in the apps
| Data | What it includes | Where it is kept |
|---|---|---|
| Your photo | The single photo you choose for a video. It may show a face or likeness. Before upload, the app converts it to a JPEG image (on Android, resized to at most 2048 pixels on the longest side). | Firebase Storage, in a folder tied to your anonymous ID |
| Match details | Sport, home team name, away team name, score, game minute, prop and resolution | Your generation record in our database, and on your device |
| Content reports (Android only) | The reason you choose, any details you type, the related video ID, the app platform and app version, and the time | Our database; you cannot read reports back from the app |
| Review access code | If you enter a review access code, we record that it was used with your anonymous ID. We do not log the code itself. | Your credit history |
3.2 Information created when you use the apps
| Data | What it includes |
|---|---|
| Anonymous ID | A random ID created by Firebase Authentication. It links your credits, uploads, generation records and purchases. It is also used as your customer ID with RevenueCat (see Section 8). |
| AI-generated still image and video | The AI still image created from your photo and the video created from it, including AI-generated sound. These contain your likeness (or that of the person or pet in the photo). |
| Generation records | For each video: your anonymous ID, the time, status and progress, your match details, the resolution, the credit cost, the AI instructions our server built (which contain the team names), the AI models used, links to your photo, still image and video, error messages if a generation fails, and, on Android, the platform. |
| Credit balance and history | Your current balance and a history of credit changes: purchases (with the store product ID and transaction ID), credits spent on videos, refunds of credits for failed videos, credits removed or restored after a store refund, and review access code use. |
| Usage limit counters | A daily count of the videos you generated, used to apply daily limits. We also keep daily totals across all users that do not identify anyone. |
3.3 Information from your device
| Data | What it includes |
|---|---|
| Push notification token | If you allow notifications, a Firebase Cloud Messaging token that lets us tell you when your video is ready. It is saved with each generation record. On iOS, notifications are delivered through Apple Push Notification service. The notification contains only a generic message and the status of your video. |
| App integrity checks | The apps include Firebase App Check. When it is switched on for our servers, it uses Apple App Attest on iOS and Google Play Integrity on Android to help confirm that requests come from a genuine copy of the app. |
| Technical data processed by SDKs | The Firebase and RevenueCat software libraries in the apps may process technical data needed to connect to their services, such as your IP address, operating system version, app version and an installation identifier. The app code itself does not read your device model, device identifiers, location or contacts. |
3.4 Purchase information
When you buy credits, the purchase is handled by Apple (App Store) or Google (Google Play Billing) and is managed through RevenueCat. We never receive your payment card details.
For each purchase or store refund, RevenueCat sends our server a notification with details such as the product, the transaction ID, the store, whether it was a real or test purchase, and RevenueCat's standard purchase fields (such as price, currency and country). We keep only the product ID and the transaction ID, in your credit history. Our server logs can also include them (see Section 3.5).
3.5 Server logs
Our cloud functions write operational logs that can include your anonymous ID, generation (job) IDs, product and transaction IDs, credit balances, error messages and links to generated videos. Our cloud platform may also log technical request details, such as IP addresses, by default. We use these logs to run, secure and fix the Service.
3.6 Emails you send us
If you email us, for example at support@fancamai.app, we receive your email address, your message and anything you include, such as attachments or purchase details. We use them only to answer you and to handle your request, including privacy, deletion and content requests. Email sent to support@fancamai.app is delivered through Cloudflare's email routing service to the mailbox we use to answer it.
3.7 What we do not collect
- No name, email address, phone number, password or social login in the apps.
- No location, contacts or camera access: the apps do not request these permissions.
- No analytics, crash-reporting, advertising or attribution SDKs in the apps.
- No payment card details.
- No biometric identifiers, faceprints or face templates (see Section 6).
4. Data stored on your device
- iOS: your generated videos, plus a history list with your match details and links to the stored files, are kept in the app's storage on your iPhone. iOS may include this data in your iCloud or device backups. Temporary downloads are kept in the app's temporary folder.
- Android: your generated videos, thumbnails, history (with match details), unfinished jobs, app settings and a temporary copy of your selected photo are kept in the app's private storage. Temporary photo copies are removed after about 24 hours, or sooner when you replace the photo. The Android app does not allow backup or device-to-device transfer, so uninstalling the app or clearing its data removes this local data and the anonymous ID stored on the device.
- Your consent choice for photo processing is stored only on your device.
When you save a video to your gallery, it becomes part of your device's photo library and is controlled by you. On Android, results are marked "Made with AI" in the app, and saved files carry the description "Made with AI (FanCam AI)".
5. Permissions
| Permission | Platform | Why |
|---|---|---|
| Photo library (picker) | iOS | To let you choose a photo. Only the photo you pick is shared with the app. |
| Photo library (add only) | iOS | To save your finished video to your library when you ask. |
| Photo Picker | Android | To let you choose a photo. No media permission is needed. |
| Storage (Android 9 and lower only) | Android | To save your finished video on older Android versions. |
| Notifications | iOS and Android | To tell you when your video is ready. iOS asks when you open the create screen; Android 13 and later asks the first time you generate a video. |
| Internet | Android | To upload your photo and receive your video. |
The apps do not ask for camera, microphone, location or contacts access. You can change permissions at any time in your device settings.
6. AI processing of your photo
Consent first. Before your first video, each app shows a screen that explains that your photo will be uploaded to Firebase Storage and shared with Replicate, our third-party AI processing provider, and asks you to confirm that you have the right to use the photo and that you explicitly consent to this processing. You can choose "Not now" and no photo is uploaded.
What Replicate receives. Our server sends Replicate:
- a private download link to your photo, which Replicate uses to fetch the photo; and
- AI instructions built by our server that include the sport, the prop and the home and away team names.
Your score and game minute are not sent to Replicate. For the video step, Replicate receives a link to the AI still image and a standard instruction that depends only on the prop you chose.
Models used. We currently run these AI models through Replicate:
- ByteDance Seedream 5 Pro to create the still image;
- Google Gemini 2.5 Flash Image, used only as a fallback if the first model fails; and
- ByteDance Seedance 1.5 Pro to create the video clip, including AI-generated sound.
Retention at Replicate. Replicate states that, for predictions created through its API, all inputs, outputs and logs are deleted automatically after one hour by default. See Replicate's data retention documentation.
Model developers. The models above are developed by ByteDance and Google. To run them, Replicate may pass what it receives (the link to your photo or to the AI still image, and the instructions) to the model's developer, which may then process it under its own terms and retention rules.
No face recognition. Faces in your photo are processed only to create the video you asked for. We do not create, collect or use biometric identifiers, faceprints, facial geometry or face recognition templates, and we do not use face recognition to identify, verify, track or profile anyone.
No training. We do not use your photos or videos to train AI models of our own.
No automated decisions. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
AI output. Videos are synthetic and fictional. They do not show real events.
7. How we use information and our legal bases
We use personal data only for the purposes below. Where the GDPR or KVKK applies, we rely on the legal bases shown.
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating your video from your photo | Photo, match details, AI still image, video, generation record | Your explicit consent, given in the app before your first upload; and performance of our contract with you (GDPR Art. 6(1)(a) and (b); KVKK Art. 5(1) and 5(2)(c)) |
| Delivering results and keeping your history | Generation record, video, data on your device | Performance of our contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Selling credits, adding them to your balance, spending them, refunding them for failed videos and removing them after a store refund | Anonymous ID, purchase and credit records | Performance of our contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Notifying you when a video is ready | Push notification token | Your consent, given through the notification permission (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Preventing abuse and fraud, applying daily limits, checking app integrity, handling review access codes, and keeping the Service secure and working | Anonymous ID, usage counters, credit records, integrity checks, server logs | Our legitimate interest in protecting the Service, our users and our revenue from misuse (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Reviewing content reports and enforcing our Terms of Use | Content reports, related generation records | Our legitimate interest in keeping the Service safe and lawful (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Answering your emails and handling privacy, deletion and content requests | Your email address, message and attachments | Our legitimate interest in supporting our users (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)); for privacy requests, legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
| Measuring website visits with Google Analytics | Google Analytics data (see Section 9) | Your consent through the cookie banner (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Counting website page views with Cloudflare Web Analytics | Page address, referring page, browser and device type, page-load timing | Our legitimate interest in understanding how the website is used (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Hosting and securing the website | Technical request data | Our legitimate interest in delivering a secure website (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Complying with the law and responding to lawful requests | Any relevant data | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
Is providing data required? You do not have to give us a photo. Without a photo and match details, we cannot create a video. Without notifications, you can still open the app to check your video.
What we do not do:
- We do not sell your personal data.
- We do not use your content for targeted advertising.
- We do not track you across other companies' apps or websites.
8. Service providers and other recipients
We share personal data only with the providers below, and only as needed for the purposes in Section 7. Each provider processes data under its own terms and privacy policy, and we use only providers that give personal data the same or equal protection as described in this Privacy Policy.
| Provider | What it does for us | Data it receives | Privacy policy |
|---|---|---|---|
| Google Firebase / Google Cloud | Anonymous sign-in, database, file storage, cloud functions, push notifications, app integrity checks and server logs | All app data described in Sections 3.1 to 3.5 | Firebase privacy and Google Privacy Policy |
| Replicate | Runs the AI models that create the still image and the video | Link to your photo, AI instructions including team names, link to the AI still image. Replicate may pass these to the model's developer, ByteDance or Google (see Section 6). | Replicate privacy policy |
| RevenueCat | Manages in-app purchase records for both apps | Your anonymous ID (as the RevenueCat customer ID) and store purchase information. We do not send RevenueCat any other attributes about you. | RevenueCat privacy policy |
| Apple | App Store purchases and refunds; push notification delivery on iOS; the App Store rating prompt | Purchase data (handled by Apple); push token and notification | Apple Privacy Policy and App Store & Privacy |
| Google Play | Google Play purchases and refunds; Play Integrity checks on Android | Purchase data (handled by Google) | Google Privacy Policy |
| Cloudflare | Hosts the website, counts page views (Cloudflare Web Analytics) and routes email sent to support@fancamai.app | Technical request data such as IP address, website page-view data (see Section 9), and the emails you send us | Cloudflare privacy policy |
| Google Analytics | Website analytics, only after you accept | Website usage data (see Section 9) | How Google uses information from sites or apps that use its services |
We may also disclose information:
- when required by law, court order, subpoena or another lawful government request;
- when necessary to protect rights, safety or security, prevent fraud, investigate abuse or enforce our Terms of Use;
- in connection with a merger, acquisition, business transfer or sale of assets; or
- with your consent.
9. The website (fancamai.app)
The website gives information about FanCam AI and links to the app stores. It has no forms, no accounts and no logins, and it does not load Google Fonts.
Hosting. The website is hosted by Cloudflare, which processes technical data such as your IP address, browser information and the pages requested in order to deliver and protect the site.
Cloudflare Web Analytics. Cloudflare also counts page views for us with Cloudflare Web Analytics. Every page loads a small script from static.cloudflareinsights.com that reports information about the visit, such as the page address, the referring page, your browser and device type, and how fast the page loaded. This measurement runs on every visit and is not controlled by the cookie banner. According to Cloudflare, Web Analytics does not use cookies or local storage.
Google Analytics 4, only with your consent. When you first visit, a cookie banner asks whether you accept analytics.
- If you accept, we load Google Analytics 4. It sets cookies in your browser (such as
_gaand_ga_…) and collects information about your visit, such as pages viewed, the referring page, browser and device type, and approximate location derived from your IP address. We also record when you click an App Store button, which button it was and on which page. - Advertising features are off. We set Google's consent signals for ad storage, ad user data and ad personalisation to "denied".
- If you decline, Google Analytics is not loaded.
- Your choice and the time you made it are stored in your browser's local storage (
fancam_consent_v1), so we do not ask again on every visit. After 182 days (about 6 months) we ask again. The stored entry stays in your browser until you choose again or clear your browser data. - Changing your mind. Use the "Cookie settings" link on the website to reopen the banner. If you withdraw consent, we tell Google Analytics to stop collecting data on that page and stop using analytics storage. You can also clear cookies in your browser or use Google's opt-out browser add-on.
Google's description of how it uses data from sites that use its services is at https://policies.google.com/technologies/partner-sites.
10. How long we keep data
We do not delete uploads, generated files or records automatically after a set period. Most app data is kept until you use Delete Account & Data in the app (see Section 11). If you uninstall an app without using Delete Account & Data, your data stays on our servers.
| Data | How long we keep it |
|---|---|
| Your uploaded photo, AI still images, generated videos, generation records (including match details and push tokens), credit balance and history, content reports, and your daily usage counter | Until you use Delete Account & Data in the app |
| Server logs | Up to 30 days |
| Files deleted from our storage | Recoverable by our cloud provider for up to 7 days after deletion, then permanently removed |
| Data processed by Replicate | Deleted by Replicate after one hour by default, according to Replicate's documentation; a model developer that receives it from Replicate may keep it under its own rules (see Section 6) |
| Purchase records at RevenueCat | Not deleted automatically when you use Delete Account & Data (see Section 11.2) |
| Purchase records at Apple and Google | Kept by Apple and Google under their own policies |
| Data on your device | Until you delete it, use Delete Account & Data, or uninstall the app (or clear its data on Android) |
| Emails you send us | As long as needed to answer you and handle your request, and to keep a record of it |
| Website consent choice | In your browser until you choose again or clear your browser data; we ask again after 182 days (about 6 months) |
| Google Analytics data | According to the data retention setting of our Google Analytics property |
| Cloudflare Web Analytics data | Kept by Cloudflare under its own policies |
| Daily totals that do not identify anyone | May be kept indefinitely |
11. Deleting your data
11.1 In the app (recommended)
Open the app and go to Settings → Delete Account & Data. After you confirm:
On our servers, we automatically delete:
- your uploaded photos;
- every generation record linked to your anonymous ID, with its AI still images and videos;
- your credit balance and credit history;
- content reports you sent; and
- your daily usage counter.
On your device, the app deletes your saved history and videos, clears your photo-processing consent, resets purchase information stored in the app, and starts a new, empty anonymous ID. On Android, it also deletes cached photos and videos and finishes the clean-up on the next launch if the app was closed during deletion.
Any unused credits are lost when you use Delete Account & Data.
11.2 What remains after deletion, and why
- Server logs that contain your anonymous ID, for up to 30 days, after which they are deleted automatically.
- Deleted files in our cloud provider's recovery window, for up to 7 days.
- Purchase records at RevenueCat, linked to your former anonymous ID, which record what you bought. If you would like us to ask RevenueCat to delete them, email us with details of your purchase (for example, the order number from your store receipt) so we can try to find the record.
- Purchase records at Apple or Google, which they keep under their own policies.
- Referral records. Our servers support referral codes and reward requests, which the current apps do not offer. If such a record was ever linked to your anonymous ID, it is not removed automatically. Records in another user's credit history that refer to your anonymous ID are also not removed.
- Daily totals that do not identify anyone.
- On iPhone, temporary download files may stay in the app's temporary folder until iOS clears them or you uninstall the app.
- Copies you saved or shared outside the app, such as videos in your photo library or sent to others. We cannot delete these.
11.3 By email
You can also ask us to delete your data by emailing support@fancamai.app. Because the apps do not use names, email addresses or a visible account ID, we can only act on an email request if you give us information that lets us find your data, such as details of a purchase. We may not be able to identify an anonymous ID from an email alone. Delete Account & Data in the app is the fastest and most reliable way to delete your data.
11.4 Other controls
- Turn off notifications or photo access in your device settings.
- Delete videos from your device's photo library.
- Uninstall the app. On Android this removes the anonymous ID from the device, but it does not delete data on our servers. Use Delete Account & Data first if you want that data deleted.
12. Reporting content
- Android: open a result and tap "Report this result". Choose a reason (offensive or harmful, sexual content, uses someone's likeness without consent, or something else) and add details if you want. The report is linked to your anonymous ID and the video ID.
- iOS, the website, or any other concern: email support@fancamai.app with a description of the problem.
We may use reports to review content and enforce our Terms of Use. A report is deleted when the user who sent it uses Delete Account & Data.
13. Children
The Service is intended for adults 18 years of age and older and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us at support@fancamai.app.
Do not upload a photo of a minor unless you are their parent or legal guardian or have their parent's or guardian's permission. Never upload or create content involving a minor in a sexual, exploitative, abusive or unsafe context.
14. International data transfers
Our database, file storage and cloud functions are in the United States:
- database: Google Cloud Firestore, US multi-region (nam5);
- file storage and cloud functions: Google Cloud region us-central1.
Our server logs are kept by Google Cloud Logging in its "global" location, so Google may store them outside the United States.
Replicate (and the model developers it may use), RevenueCat, Apple, Google and Cloudflare may process data in the United States and in other countries where they operate.
If you live outside the United States, including in the European Union, the United Kingdom or Turkey, your personal data is transferred to and processed in countries whose data protection laws may differ from, and may offer less protection than, the laws of your country. We transfer data only to the providers listed in Section 8 and only as needed to provide the Service.
Safeguards. Where the law of your country requires a safeguard for these transfers, we rely on the transfer mechanisms in our service providers' data processing terms, such as the European Commission's Standard Contractual Clauses, or on another transfer basis allowed by applicable law. You can ask us for more information about these safeguards at support@fancamai.app.
15. Security
We use reasonable technical and organisational measures to protect personal data, including:
- encrypted connections (HTTPS/TLS) between the apps, our servers and our providers;
- access-controlled cloud infrastructure;
- storage and database rules that let an app read only its own uploads, generation records and credit records;
- server-only changes to credit balances and generation results; and
- not storing payment card details.
Your photo, AI still images and videos are stored in Firebase Storage. For each of them, our server creates a long, randomly generated download link. The link to your photo is given to Replicate. The links to the AI still image and the video are sent to the app and saved in your generation record and in the history on your device. These links are not listed publicly and do not expire, but anyone who obtains a link can open the file until it is deleted. Do not share these links if you do not want others to see the files.
No internet-connected system, storage provider, AI service or transmission method can be guaranteed to be 100% secure.
16. Your privacy rights
Depending on where you live, you may have the rights below. To use any of them, email support@fancamai.app. We do not charge for requests. Because the apps are anonymous, we may need information that helps us find your data (see Section 11.3), and we may need to verify a request before responding.
16.1 Everyone
- Delete your data in the app at any time under Settings → Delete Account & Data.
- Withdraw consent at any time. Withdrawing consent does not affect processing that already took place. To stop photo processing, do not upload further photos and use Delete Account & Data to remove stored photos and videos. To stop Google Analytics on the website, use "Cookie settings" on the website.
16.2 European Economic Area and United Kingdom (GDPR)
You have the right to:
- access your personal data;
- correct inaccurate data;
- have your data erased;
- restrict processing;
- object to processing based on our legitimate interests;
- receive your data in a portable format; and
- withdraw consent.
You also have the right to lodge a complaint with your local data protection supervisory authority. We will respond within one month, as the GDPR requires; this can be extended where the law allows.
16.3 Turkey (KVKK)
Under Article 11 of KVKK, you have the right to:
- learn whether your personal data is processed;
- request information about the processing;
- learn the purpose of the processing and whether data is used for that purpose;
- know the third parties, in Turkey or abroad, to whom data is transferred;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of data;
- request that third parties to whom data was transferred be notified of a correction or deletion;
- object to a result against you that arises from analysis of your data exclusively by automated systems; and
- claim compensation for damage caused by unlawful processing.
We will respond to your request free of charge within 30 days. If we reject your request or you find our answer insufficient, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
16.4 California and other US states
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you.
Over the past 12 months, we have collected the categories described in Sections 3 and 9:
- identifiers (anonymous ID, push token, and your email address if you email us);
- commercial information (credit purchases);
- user content (photos, match details, generated media and the emails you send us); and
- website usage information and approximate location derived from your IP address (see Section 9).
Depending on your state, you may have the right to know what personal information we collect, to delete it and to correct it. We will not discriminate against you for using these rights.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when we change how the Service works or which providers we use. We will post the updated policy at https://fancamai.app/privacy/ and change the "Last updated" date above. If a change requires your consent under applicable law, we will ask for it before the change applies to you.
18. Contact us
If you have questions, requests or concerns about this Privacy Policy, contact us at:
FanCam AI
Email: support@fancamai.app
Website: https://fancamai.app
App: FanCam AI: Fan Cam Video Maker (iOS and Android)