Thrum AI ("we", "us", or "our") is committed to safeguarding your personal information. This Privacy Policy describes how we collect, process, store, disclose and protect your data when you use the Thrum AI mobile application (distributed via Google Play), our official website and any associated services (collectively, the "Services").
By accessing or using the Services, you confirm that you have read, understood and agreed to this Privacy Policy and our Terms of Service. If you do not accept these terms, please do not use the Services.
Personal Data refers to any information that identifies or can reasonably be linked to an identifiable individual. Aggregated or anonymized data that cannot be traced back to you is not considered Personal Data and may be used without restriction.
We collect information in three distinct categories: (a) details you voluntarily provide, (b) media you choose to upload for AI processing, and (c) technical data generated automatically as you interact with the Services. Each category is described in detail below.
| Category | Examples | How It Is Obtained |
|---|---|---|
| Account details | Name, email address, chosen username | Provided directly by you |
| Uploaded media | Photos and videos submitted for AI processing | Selected by you from device storage |
| Derived processing data | Body contours, facial regions, key points and clothing detections | Generated temporarily in transit only |
| Technical information | Log records, device model, operating system, diagnostics | Generated automatically during use |
Voluntary details such as your email address and username are collected when you register, contact us, or otherwise interact with the Services. See Section 3 for media handling and Section 5 for account data.
We process Personal Data and Service Data exclusively for the following legitimate purposes:
We never use uploaded media or generated content for advertising, user profiling or resale.
To enable AI image or video generation, you must upload photos or videos. The application requests explicit permission to access your local media or files. You may revoke this permission at any time through your device settings.
All uploaded content travels over encrypted channels (SSL/TLS), and we apply reasonable technical safeguards to protect data both in transit and during processing.
Please save any generated results you wish to keep before they are automatically deleted.
4.1 Depending on the model in use, our Services may perform body-outline detection, facial-region and facial-feature detection, skeletal key-point detection (such as head, neck, shoulders, torso and wrists), and clothing detection on uploaded images or videos. This information is used exclusively to generate the output you requested; it is cached only in server memory during processing and is deleted immediately once generation is complete.
4.2 We do not use any user photos, videos or generated content to train or improve our AI models.
4.3 Facial key points and comparable data are never collected without the individual's prior consent, which is obtained by granting photo-library access.
4.4 Until deletion, such data is stored, transmitted and protected using safeguards equal to or stricter than those applied to other confidential identifiers (including login information such as email addresses).
4.5 We do not use facial, key-point or body-detection data to identify or verify any individual, nor do we create biometric identifiers or user profiles.
4.6 All of this data is used solely for generating the requested AI output and is erased immediately after processing; no copies remain afterward.
5.1 Certain features (for example, content sharing) require you to complete a login process.
5.2 When you register through a third-party service (such as Google, Facebook or Apple ID), we receive information associated with that account, including your name, email address, username and any other information you submit during registration.
5.3 All login-related information is removed at the same time your account is deleted.
5.4 You may delete your account and its associated data at any time through in-app self-service or by contacting our support team. See Section 12 for details.
6.2.1 When you sign in through a third-party service (such as Google), you may be redirected to a web page operated by that provider.
6.2.2 The provider may use Cookies or similar technologies to maintain your session and complete authentication.
6.2.3 We do not use Cookies for advertising, tracking or analytics, nor do we independently access or store them. Any Cookies used during third-party login are controlled by the relevant third party and governed by its privacy policy.
6.2.4 Our application does not use Cookies to track you across other applications or websites.
We may integrate third-party services to support analytics, advertising and infrastructure stability. These services may collect limited technical data in accordance with their own privacy policies.
All third-party providers are bound by contractual obligations to comply with applicable data-protection laws. Advertising-related partners may collect advertising identifiers solely for attribution and fraud prevention. You may review their processing rules through their official policies or restrict collection via their opt-out mechanisms. We do not authorize any third party to use collected information for purposes unrelated to the Services.
8.1 The photos and videos you upload for AI processing are never disclosed to third parties, except when you voluntarily choose to share the generated results yourself.
8.2 We may share Personal Data (and non-personal information) with service providers acting on our behalf (such as data-management, hosting and infrastructure providers), and we may share aggregated, non-personally-identifying Log Data for advertising and product promotion. See Section 7 for the third parties involved.
8.3 We may disclose Personal Data only in the following circumstances:
We will not disclose your uploaded images or videos to any service unless you voluntarily share them (together with the results) through the Services or a third-party service.
The application may request the following permissions, each used strictly for its stated purpose:
Depending on your jurisdiction, you may have the following rights:
To exercise these rights, submit a written request to the contact listed in Section 19, including your name, registered email or account ID, contact information and the right you wish to exercise. Where applicable, please provide identity-verification materials. We will respond within 15 working days; if we are unable to fulfill the request, we will provide a written explanation of the reasons and legal basis.
You may delete your account and data in any of the following ways:
After deletion, all relevant Personal Data will be removed, subject to compliance with legal and technical obligations (such as backups).
We implement technical and organizational measures designed to protect your privacy and prevent unauthorized access or misuse, and we continually update these measures as technology evolves. However, we cannot guarantee that unauthorized third parties will never circumvent our safeguards. If you use a password to access the Services, you are responsible for keeping it confidential.
13.1 Data Transmission: All data (including uploaded media and Personal Data) is transmitted using TLS 1.2+ encrypted protocols.
13.2 Data Storage: Sensitive data is stored on encrypted servers (AES-256), with access granted only to authorized personnel on a need-to-know basis (requiring multi-factor authentication).
13.3 Access Control: A strict permission-classification system limits internal access to user data, and all access activities are recorded in audit logs.
13.4 Emergency Response: In the event of a data breach, we will notify affected users within 72 hours of discovery (where required by applicable law) and take remedial measures and report to the relevant authorities.
Minors must obtain prior consent from a parent or legal guardian before using the Services. We recommend that guardians read this Policy carefully and advise minors to seek guidance before submitting Personal Data.
If you are a guardian and discover that a minor (under the age of 13) has used the Services and submitted Personal Data without authorization, you may submit a deletion request to the contact in Section 19. The request must include the guardian's identity document, proof of the guardianship relationship (such as a household register or birth certificate) and the minor's account information (if any). We will delete the relevant data within 15 working days of verifying the materials.
COPPA: We respect children's privacy in accordance with the Children's Online Privacy Protection Act. We do not knowingly collect or solicit information from individuals under 13, nor allow such individuals to register. If we discover that we have collected Personal Data from a child under 13 without parental consent, we will delete it as soon as possible. If you believe we may hold such information, please contact us at [email protected].
User data may be processed on servers located outside your country of residence. We adopt appropriate safeguards (such as standard contractual clauses where required) to protect such transfers in accordance with applicable data-protection laws.
For users in the European Economic Area or the United Kingdom, we process Personal Data on the following legal bases:
This Privacy Policy is consistent with the disclosures in the Google Play Data Safety section. All data collection, use, sharing and retention practices comply with those disclosures, including the declaration of the following data types and purposes:
We do not share user-provided photos, videos or generated content with third parties except as described in Section 8 and Section 7.
We may update this Privacy Policy from time to time. For material changes (including expansion of the data-collection scope, changes in use purposes or changes in sharing recipients), we will notify you of the changes and their effective date at least 30 days in advance via in-app notices or email to your registered address. Non-material changes will be announced via in-app notifications. Your continued use of the Services constitutes acceptance of the updated Policy; if you do not agree, you should stop using the Services and delete your account.
If you have any questions or requests regarding this Privacy Policy, please contact us at:
Email: [email protected]
We will respond to all privacy-related inquiries within 15 working days.