Privacy Policy
Last updated: February 3, 2026
1. Introduction
TFP Labs ("we," "our," or "us") operates PixReel (the "App"), an AI-powered video and image generation application available on iOS and Android. This Privacy Policy explains how we collect, use, store, and protect your information when you use the App and our related services (collectively, the "Services"). This Privacy Policy describes our data practices and the legal bases on which we process your information (see Section 13). We are committed to collecting only the information that is strictly necessary to provide and improve the Services (data minimization). If you do not agree with any part of this Privacy Policy, please discontinue use of the App immediately.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, display name, and authentication credentials when you create an account. You may also sign in via third-party services (Apple, Google), in which case we receive basic profile information from those providers.
- User Content: Photos, images, text prompts, and other materials you upload or input for AI video and image generation.
- Communications: Messages, feedback, and support requests you send to us.
2.2 Automatically Collected Information
- Device type, operating system, and version
- Unique device identifiers
- App usage statistics, feature interactions, and session duration
- Crash logs and performance data
- IP address and general location (country/region level only)
- App Store or Google Play purchase receipts (processed by RevenueCat)
2.3 Information from Third Parties
If you sign in using a third-party account (Apple ID, Google Account), we may receive your name and email address from that provider. We do not receive or store your third-party account passwords.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain the AI video and image generation Services
- To process your content (photos, prompts) through third-party AI models to generate videos and images
- To manage your account, credits balance, and subscription
- To send transactional notifications (generation complete, credit usage, etc.)
- To improve, optimize, and develop new features for the App
- To analyze anonymized usage patterns and app performance
- To detect, prevent, and address fraud, abuse, or technical issues
- To comply with applicable legal obligations
- To respond to your support requests and communications
4. Content Processing & AI Models
How Your Content Is Processed: When you use the App to generate videos or images, your uploaded photos and text prompts are sent to third-party AI model providers for processing. These providers include but are not limited to OpenAI (Sora), Google (Veo), Kuaishou (Kling), ByteDance (Seedance), MiniMax (Hailuo), and others.
Data Storage: Your uploaded content and generated outputs are stored securely in our cloud infrastructure. We retain this data to provide you with access to your generation history and to enable re-downloads.
No AI Training: We do not use your photos, prompts, or generated content to train any AI models. Your content is used solely for the purpose of fulfilling your generation requests.
Facial & Biometric Data: When you upload photos containing faces, these images are transmitted to third-party AI models for processing. This processing may involve the analysis of facial features and geometry to generate AI content. We do not extract, store, or create biometric identifiers or templates from your photos. Facial data is processed solely within the AI generation pipeline to produce your requested output and is not used for identification, authentication, or surveillance purposes. If you are a resident of a jurisdiction with biometric data protection laws (such as Illinois, Texas, or Washington), please be aware of your rights under those laws before uploading photos containing faces.
Third-Party AI Provider Terms: Content sent to third-party AI providers is subject to their respective data processing policies. We select providers that commit to not training on user-submitted content, but we encourage you to review their individual privacy policies.
5. Data Storage & Security
We implement industry-standard security measures to protect your data, including:
- Encryption of all data in transit using TLS/SSL
- Encryption of data at rest in our cloud storage
- Row-level security policies on all database records
- Strict access controls and authentication for internal systems
- Regular security reviews of our infrastructure
Your data is stored securely and is never shared with any third party for marketing, advertising, or any purpose unrelated to providing the Services. However, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
6. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal information to third parties. We share data only with the following categories of service providers, solely to operate the Services:
- Supabase: Database hosting and user authentication
- AI Model Providers (Runware, OpenAI, Google, Kuaishou, ByteDance, MiniMax, etc.): Processing your content for video and image generation
- RevenueCat: Subscription management and purchase validation (we do not directly handle payment card details)
- PostHog: Anonymized product analytics
- Sentry: Error tracking and crash reporting
- Expo: Push notification delivery
We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of TFP Labs, our users, or the public.
7. Data Retention
We retain your personal information and content for as long as your account is active or as needed to provide the Services. Specifically:
- Account data: Retained until you delete your account or request deletion.
- Generated content: Stored until you delete it or your account is terminated.
- Usage analytics: Aggregated and anonymized data may be retained indefinitely for product improvement purposes.
- Transaction records: Retained as required by applicable tax and accounting laws.
Upon account deletion, we will remove your personal information and content within 30 days, except where retention is required by law.
8. Cookies & Tracking Technologies
Our website (pixreel.app) may use cookies and similar technologies to enhance your browsing experience. These include:
- Essential cookies: Required for website functionality (e.g., session management).
- Analytics cookies: Used to understand how visitors interact with our website (via PostHog). This data is anonymized and not linked to your App account.
We do not use marketing or advertising cookies. You can control cookie preferences through your browser settings.
Do Not Track Signals: Some browsers offer a "Do Not Track" ("DNT") setting. There is currently no universally accepted standard for how companies should respond to DNT signals. At this time, we do not respond to DNT signals. However, we do not engage in cross-site tracking or targeted advertising, so our data practices are consistent with the intent of DNT regardless of signal status.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data and account.
- Restriction: Request that we restrict processing of your data.
- Portability: Request a machine-readable copy of your data.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw previously given consent at any time.
To exercise any of these rights, contact us at support@tfplabs.com. We will respond to your request within 30 days.
10. Children's Privacy
The App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 years of age in the United States. Users between 16 and 18 years of age (or the age of majority in their jurisdiction) must have parental or guardian consent to use the App. Parents and guardians are responsible for monitoring their minor's use of the Services.
If we discover that we have inadvertently collected personal information from a child under 13 (or under 16 in the EEA), we will take prompt steps to delete such information from our systems.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at support@tfplabs.com so we can take appropriate action to delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and the European Union, where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the App, you consent to the transfer of your information to these countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect your data during international transfers.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to know what personal information is collected, used, and shared
- Right to request deletion of your personal information
- Right to opt out of the sale of personal information
- Right to non-discrimination for exercising your privacy rights
We do not sell your personal information to third parties. To exercise your CCPA rights, contact us at support@tfplabs.com.
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your information include:
- Contract performance: Processing necessary to provide the Services you requested.
- Legitimate interests: Improving our Services, preventing fraud, and ensuring security.
- Consent: Where you have given explicit consent for specific processing activities.
- Legal obligation: Where processing is required to comply with applicable law.
You may file a complaint with your local data protection authority if you believe we have violated your privacy rights under the GDPR.
14. Push Notifications
We may send you push notifications through the App to inform you about generation completions, account activity, new features, or promotional offers. You can opt out of receiving push notifications at any time by adjusting the notification settings on your device or within the App settings. Opting out of push notifications will not affect the functionality of the core Services.
15. Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of TFP Labs' assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice within the App before your personal information becomes subject to a different privacy policy. The acquiring entity will be required to honor the commitments made in this Privacy Policy with respect to your personal information, or will provide you with notice and an opportunity to opt out.
16. Data Breach Notification
In the unlikely event of a data breach that compromises your personal information, we will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach, as required by applicable law (including GDPR). Notification may be provided via email, in-app notification, or a prominent notice on our website. We will also notify the relevant data protection authorities where legally required. The notification will include the nature of the breach, the types of data affected, the likely consequences, and the measures we are taking to address it.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also provide notice through the App or via email. Your continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Email: support@tfplabs.com
TFP Labs
PixReel