Privacy Policy

Last updated: September 22, 2026

Application and Developer Details

This Privacy Policy is applicable solely to the mobile application known as SparkForge (hereinafter referred to as the "App"), which is distributed through Google Play.

The App is created, possessed, and managed by Zaitoune LLC (hereinafter referred to as the "Developer," "we," "our," or "us"). Any mention of "we," "our," or "us" in this Privacy Policy shall be understood as referring to Zaitoune LLC, the legal entity accountable for the functioning of SparkForge.

Should you obtain SparkForge via Google Play, the present Privacy Policy shall regulate the gathering, utilization, retention, and sharing of your data during your use of the App.

Overview of the Process

  1. A photograph is submitted by the user, who then selects a template of their choosing.
  2. To tailor the experience, a duplicate of the stable diffusion model undergoes retraining with the provided data.
  3. Upon completion of retraining, an avatar is produced by the system using the customized model.
  4. As soon as the avatar has been generated, the submitted photograph along with the retrained model duplicate is irrevocably erased from our servers. Kindly be advised that specific limitations govern avatar usage—for instance, explicit imagery or the use of another individual's photographs without consent is prohibited.
  5. Your personal information is never employed for general model training or for the creation of any other separate AI products.

Cloud Processing Initiated by the User

Through protected cloud-based computation, SparkForge offers a number of AI-driven editing, enhancement, and rendering capabilities. Such cloud processing takes place solely when you deliberately engage a function that demands server-side computation.

Upload Activation

Your images, videos, or other media are transmitted to our protected servers only once you have proactively chosen a cloud-dependent feature and clearly commenced the processing. Under no circumstances does SparkForge transmit your personal media on its own, behind the scenes, or absent your direct involvement. Prior to any transmission taking place, the App explicitly signals that cloud processing is necessary.

Data Retention and Deletion

Media that has been uploaded is kept solely for the duration required to carry out the requested processing. The original uploaded files together with the generated results are erased automatically and irreversibly within 72 hours following the completion of processing. Zaitoune LLC keeps no backups of your uploaded media and refrains from using your content for advertising, AI model training, profiling, or any purpose unrelated to the service.

Security

Every upload and download is safeguarded through TLS encryption conforming to industry standards. Access to uploaded content is confined strictly to automated processing systems and the authorized infrastructure essential for delivering the requested service.

Content Notice

We endeavor to configure the AI model as suitably as possible. Nevertheless, you may still come across content that strikes you as unsuitable. Should you encounter anything offensive or inappropriate, kindly report it to us at developers.zaitoune@gmail.com. We will act without delay, and your feedback additionally assists us in refining the algorithm over time.

Information We Collect

  1. Platform Activity Data
    We may gather data concerning your engagement with our Platforms. This encompasses your browsing patterns, clicks, downloads, shared content, video editing actions, and any other information you furnish while utilizing our services. Such data assists us in providing the Platform's features to you.
  2. Device and Log Data
    In order to maintain stable and secure operation, enhance user experience, facilitate advertising and message delivery, and safeguard your account security, we collect specific device and log details when you access our services through the Platforms. These comprise: unique device identifier, GAID, device model, system language, country, advertising ID, operating system and version number, IP address, software version, network access type, network quality metrics, and service logs.
  3. Feedback and Support Data
    When you contact us for support or to submit feedback, we collect the information and materials you provide, together with your contact details (such as phone number and email address). This enables us to address your inquiries and deliver customer assistance.
  4. Face Recognition Information
    When you utilize face editing or synthesis features, we automatically detect the position and shape of your facial features to analyze necessary information for photo processing. The resulting renderings are then returned to you. We do not store these photos, videos, facial feature data, or renderings, nor do we share them with any third party. This processing is carried out solely to enable the face recognition function and improve your output quality. If your editing involves someone else's facial features, you are responsible for informing that individual and obtaining their permission.
  5. Cloud-Based Processing
    To enable fast and accurate image or video processing, we may temporarily upload your materials or related tags to a cloud server for effect generation. These uploads are used only for the specific processing task you request. We do not retain the materials, tags, or associated data longer than necessary, nor do we use them for any other purpose or share them with third parties.

Device Permissions

To provide you with better products, efficient services, and an improved user experience, we may request certain permissions on your device when offering additional features. With your consent and following the principle of collecting only the minimum necessary data, we may access the following permissions and the corresponding information:

  1. Read/Write External Storage Permission - Used to read from and write to your device's external memory card for video editing purposes.
  2. Camera Permission - Allows you to take photos and record videos within the app.
  3. Network Access Permission - Enables various online services, such as accessing and downloading materials.

The data tied to these permissions is considered sensitive. If you decline a permission, it will only prevent you from using the specific feature that requires it; your ability to use other functions in the app will not be affected. You can check the current status of your permissions at any time through your device's system settings. You are free to enable or disable any or all of these permissions according to your own preferences.

Please be aware that when you grant a permission, you are authorizing us to collect and use the related personal information solely for providing the corresponding service. If you later disable a permission, this cancels or revokes your previous authorization, and we will stop collecting or using personal information based on that permission from that point forward. However, turning off a permission will not affect any data collection or usage that occurred while the permission was still enabled.

Third-Party SDKs and Service Providers

To deliver core features, process analytics, and support in-app purchases, SparkForge integrates with the following third-party software development kits (SDKs). Each SDK may collect and process certain device and usage data as described below. All such processing occurs only after you have consented to this Privacy Policy.

  1. AppsFlyer (provided by AppsFlyer Ltd.)
    Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.
    Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data helps us understand how you discovered our app and improve our promotional activities.
  2. Google Play Billing (provided by Google LLC)
    Purpose: Processing in-app purchases and subscription transactions.
    Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is handled directly by Google Play.
  3. Google Install Referrer (provided by Google LLC)
    Purpose: Identifying the source (channel) that led to your app installation.
    Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.
  4. Google Ads Identifier & AppSet ID (provided by Google LLC)
    Purpose: Providing anonymized identifiers for analytics and ad performance measurement.
    Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.
  5. Google Sign-In (provided by Google LLC)
    Purpose: Enabling Google account-based login and authentication.
    Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.
  6. Functional Libraries (No Data Collection)
    The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data

Data is gathered and assessed by us in order to continually enhance our Service and the user experience. This information undergoes processing in an aggregated manner, enabling us to gain a clearer understanding of usage patterns and to refine our products. Such consolidated insights may be disclosed to our affiliates, agents, and business partners for purposes that include research, development, and commercial planning. You may rest assured that this data is anonymized and does not personally identify you or your end users.

How We Use Your Personal Information

We may use the information you provide, consistent with this policy, to deliver our services or to communicate with you. Specific use cases include the following:

  1. Service Enhancement
    Your information helps us create, develop, operate, deliver, and improve our offerings. For example, by studying how users interact with the platform, we can ensure it remains intuitive and easy to use.
  2. Security Purposes
    We use your information to maintain account and network security, protecting our services for all users. This may include pre-screening or scanning uploaded content for potentially unlawful material. Your data may also be used for risk prevention, customer security support, and related safety measures.
  3. Sending Important Communications
    We use your information to deliver critical notices, such as alerts about your account or updates to our terms, conditions, and policies.
  4. Compliance with Legal Obligations
    We retain and manage your information as necessary to meet our legal responsibilities. This may involve recording, auditing, analyzing, or processing your data in line with applicable laws, including in emergency situations.

Your Choices

You may limit data collection by:

Your Right to Delete Data

Throughout your use of our app, you maintain complete authority over your information and are free to remove stored records whenever you wish. We are dedicated to safeguarding your privacy and to making data removal achievable. You may erase your history and other retained information by accessing the app's settings menu. Furthermore, removing the app from your device will cause any locally stored data to be deleted automatically. Kindly note that data, once deleted, is incapable of being recovered. Should you have any inquiries concerning your deletion rights, please do not hesitate to contact our support team for assistance.

Cookies and Similar Data Technologies

As is common among online services, cookies, web beacons, and comparable technologies are employed by us. Cookies are tiny data files that reside on your hard drive or within your device's memory. They hold information regarding your use of our services, assisting with functions such as user authentication, remembering your preferences and settings, analyzing traffic and usage patterns, measuring ad campaign performance, and enabling social features. Web beacons are small software elements embedded in web pages or emails that help us comprehend your interaction with that content.

The majority of web browsers accept cookies automatically. You can typically modify your browser settings to remove or prevent browser cookies if you so choose. Please bear in mind, however, that this may impact the availability and functionality of our services.

Third-party analytics tools are utilized by us to assess traffic and usage trends for our services. These tools gather data transmitted by your device or our services, including the pages you visit, add-ons you use, and other information that assists us in enhancing our offerings. This analytics data is combined with similar data from other users in a manner that does not reasonably identify any particular individual.

We collaborate with third-party advertising agencies to display ads on the internet or other media. To evaluate ad effectiveness and determine payment amounts owed to these agencies, third-party modules are integrated into our applications. In addition, such modules may be included to better understand how users interact with our services.

How Long We Keep Your Personal Information

Your personal data is retained by us for a period of 48 months. We may preserve and utilize your information as needed to satisfy legal obligations (for instance, compliance with applicable laws), settle disputes, and enforce our agreements and policies.

Usage Data is likewise retained by us for internal analytical purposes. This category of data is typically stored for a shorter period unless it is required to strengthen security, enhance our Service functionality, or we are legally obligated to keep it for a longer duration.

Data Sharing

Your personal data is neither sold nor rented by us to third parties. The SDKs mentioned above share data solely with their respective providers for the stated purposes, and we contractually obligate them to process data in accordance with applicable privacy laws.

How We Share Your Information

Zaitoune LLC does not sell, rent, or trade your personal information to any third party. Personal information is shared by us only when necessary to deliver the services you request, operate and maintain SparkForge, process transactions, comply with applicable laws, or protect our legal rights and the security of our services.

Third-Party Service Providers

In order to deliver the core functionality of SparkForge, we collaborate with carefully chosen third-party service providers. These providers facilitate services including user authentication, payment processing, analytics, installation attribution, cloud infrastructure, fraud prevention, and application performance monitoring.

Depending on the feature you use, these providers may process limited categories of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

AI Content Processing

Whenever you willingly submit photos, videos, or other media for processing powered by AI, your content is utilized exclusively to produce the results you have requested.

Your uploaded content is never sold, licensed, or disclosed to third parties for advertising, profiling, or the training of general artificial intelligence models. Media files are handled solely for the requested service and are automatically removed in accordance with the retention period set out in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

Should SparkForge or Zaitoune LLC participate in a merger, acquisition, corporate reorganization, financing, sale of assets, or comparable business transaction, your personal information may be conveyed as part of that transaction.

Under such circumstances, the entity receiving your information will be obligated to safeguard your personal information under privacy protections that are substantially equivalent to those set forth in this Privacy Policy and in compliance with applicable data protection laws.

Data Security and Protection Measures

The security of your personal information is a matter we treat with seriousness. In order to prevent unauthorized access, disclosure, or other potential risks, reasonable physical, electronic, and organizational safeguards have been put in place for data gathered through your use of our Platform services. We are dedicated to making every effort to protect your information.

Our security practices undergo regular review and are updated when necessary to remain consistent with business developments, technological changes, and legal requirements. Such measures encompass, without being limited to, technical and organizational security policies, access controls, and employee training programs.

Although safeguarding your data is a high priority for us, please recognize that no method of internet transmission or electronic storage is completely secure. While we endeavor to protect your personal information using industry-standard practices, absolute security cannot be assured.

Should we become aware of a security breach impacting your personal information, we will notify you as required by applicable laws. By using the Platform, you consent to receiving such notifications electronically.

Your Privacy Rights

Should you desire to gain further understanding of your legal rights under applicable laws, or wish to exercise any of them, please do not hesitate to contact us through the details set out in the "How to Contact Us" section below. Subject to your local regulations, you may be entitled to request that we:

  1. Furnish access to, or a copy of, particular personal information we hold concerning you.
  2. Cease using your information for direct marketing purposes, including any marketing activities founded on profiling.
  3. Rectify any outdated or inaccurate information we possess about you.
  4. Delete specific information we maintain regarding you.
  5. Restrict how we process or share certain information relating to you.
  6. Transmit your information to another third-party service provider.
  7. Revoke any consent you previously granted concerning the processing of your information.

All requests will be assessed by us and answered within the timeframe mandated by applicable law. Kindly note that in certain circumstances, particular information may be exempt from such requests — for instance, where we must continue processing your data to safeguard our legitimate interests or to satisfy legal obligations. Prior to handling your request, we may ask you to supply reasonable information so that your identity can be verified.

Privacy Protections for Minors

Our services are not designed for users under 18 years of age (referred to as "minors"). We do not knowingly collect personally identifiable information from anyone below this age. If you are a parent or legal guardian and become aware that your child has provided us with Personal Data, please get in touch with us. Upon discovering that such information has been collected without verified parental consent, we will take appropriate steps to delete it from our records.

Rights Under CCPA, VCDPA, GDPR, and LGPD

The privacy obligations established by California (CCPA), Virginia (VCDPA), the European Union (GDPR), and Brazil (LGPD) are observed by us. Where users reside in these jurisdictions, the applicable laws confer upon you rights such as obtaining access to, rectifying, erasing, or raising objections to the processing of your personal data. Should you wish to exercise any of these rights, please contact our support team for assistance.

Legal Grounds for Processing Your Data

Your personal information is processed by us in accordance with relevant data protection laws, including the General Data Protection Regulation (GDPR). Subject to the particular purpose of processing, we depend upon one or more of the following legal bases:

  1. Legitimate Interests
    We may process certain non-sensitive data to pursue our legitimate interests, which include:
    • Enhancing the performance and user experience of our applications.
    • Maintaining the security and reliability of our apps and services.
    • Studying app usage patterns to better inform future development.
    When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.
  2. Legal Obligations
  3. Vital Interests
    In exceptional circumstances, we may process your data to protect your vital interests or those of another person — for example, in response to a security incident affecting an application.

Right to Lodge a Complaint

Should you believe that our handling of your personal data infringes applicable data protection laws or your rights under those laws, you are entitled to submit a complaint to a supervisory authority. This applies, for instance, to residents of the EU under the General Data Protection Regulation (GDPR), as well as under other local data protection laws that may govern your region.

Where to Submit a Complaint

If you wish to lodge a complaint, you may get in touch with the relevant data protection authority in your country. Their contact details are generally published on their official websites. As an alternative, you may contact us directly for additional guidance.

Internal Resolution First

Prior to escalating the matter to a formal complaint, we respectfully encourage you to reach out to us so that we may make reasonable efforts to resolve your concerns. You can contact our Data Protection Officer (DPO) or write to us at developers.zaitoune@gmail.com.

Data Controller Information

For the purposes of applicable data protection laws, Zaitoune LLC serves as the data controller accountable for the processing of personal information gathered through SparkForge. The purposes and means of processing personal data are determined by Zaitoune LLC, which bears responsibility for ensuring adherence to applicable privacy legislation. Should you have any privacy-related inquiries, please contact us at developers.zaitoune@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Updates to This Privacy Policy

Our Privacy Policy may be revised by us from time to time. We encourage you to review this page periodically for any updates. When changes are made, we will post the revised policy on this page. All changes take effect immediately upon posting.

Get in Touch

Should you have any questions, concerns, or suggestions regarding our Privacy Policy, please do not hesitate to contact us at developers.zaitoune@gmail.com.