Privacy Policy

Last updated: September 11, 2026

Operational Workflow

  1. Users submit their images and select a preferred design template.
  2. A dedicated copy of the stable diffusion framework is fine-tuned using the submitted data to tailor the user experience.
  3. Following the fine-tuning stage, the system produces a custom avatar based on the individualized model.
  4. Upon avatar completion, both the original uploaded images and the fine-tuned model copy are permanently deleted from our infrastructure. It should be noted that certain limitations apply to avatar generation—for instance, generating explicit content or using unauthorized portraits is strictly prohibited.
  5. Your personal information is never incorporated into any general-purpose model training or utilized for the development of additional standalone AI offerings.

User-Initiated Cloud Processing

LumiCraft offers a range of AI-driven editing, enhancement, and rendering functions via secure cloud-based computation. Such processing is triggered solely when you deliberately activate a feature that relies on server-side operations.

Upload Trigger

Images, videos, or other files are transmitted to our protected servers only after you consciously choose a cloud-enabled tool and manually start the processing action. LumiCraft never transfers your personal media automatically, covertly, or in the absence of your explicit involvement. Prior to any transmission, the App clearly notifies you that cloud processing will be engaged.

Data Retention and Deletion

Uploaded content is retained solely for the duration needed to fulfill the requested operations. Both the original submitted files and the resulting outputs are permanently erased within 72 hours following task completion. Brady Carter maintains no backup copies of your uploaded media and does not utilize your content for advertising, model training, behavioral analysis, or any extraneous objectives.

Security

All data transfers are safeguarded via industry-standard TLS encryption protocols. Access to uploaded materials is confined exclusively to automated processing mechanisms and the authorized infrastructure essential for delivering the requested service.

Content Notice

We make every effort to configure the AI model in the most suitable manner. Nevertheless, you might still come across material that does not align with your personal preferences. Should you encounter anything objectionable or unsuitable, kindly notify us at BradleyCartersix@gmail.com. We will respond swiftly, and your input will also contribute to refining our algorithm in the long run.

Information We Collect

  1. Platform Activity Data
    We may gather data regarding your engagement with our Platforms. This encompasses your browsing patterns, click actions, file downloads, shared materials, video modification operations, and any other input you supply during service usage. Such data enables us to provide the Platform's functionalities to you.
  2. Device and Log Data
    To ensure stable and secure performance, enhance user experience, facilitate advertising and message distribution, and safeguard your account integrity, we collect specific device and log information when you access our services via the Platforms. These items include: unique device identifier, GAID, device model, system language, country, advertising ID, operating system and version number, IP address, software version, network access type, network quality indicators, and service logs.
  3. Feedback and Support Data
    When you contact us for assistance or to share feedback, we collect the information and attachments you provide, along with your contact information (such as phone number and email address). This enables us to address your concerns and deliver customer support.
  4. Face Recognition Information
    When you utilize facial editing or synthesis functions, we automatically identify the positioning and contours of your facial characteristics to extract the necessary data for image processing. The resulting outputs are then delivered to you. We do not retain these images, videos, facial data, or output files, nor do we disclose them to any external parties. This processing is carried out exclusively to support the face recognition capability and enhance your final results. If your editing involves another individual's facial features, it is your obligation to inform that person and obtain their consent.
  5. Cloud-Based Processing
    To facilitate fast and precise image or video processing, we may temporarily transfer your files or associated metadata to a cloud server for effect generation. These transfers are utilized solely for the particular processing task you have initiated. We do not hold onto the files, metadata, or related data beyond the necessary timeframe, nor do we employ them for any other purposes or share them with third parties.

Device Permissions

In order to deliver superior products, efficient services, and a more satisfying user experience, we may request specific permissions on your device when providing supplementary features. With your explicit authorization and in accordance with the principle of collecting only the bare minimum of data, we may access the following permissions and the associated information:

  1. Read/Write External Storage Permission - Used to read from and write to your device's external memory card for video editing purposes.
  2. Camera Permission - Allows you to take photos and record videos within the app.
  3. Network Access Permission - Enables various online services, such as accessing and downloading materials.

The information associated with these permissions is regarded as sensitive. Should you choose not to grant a permission, it will merely restrict your access to the particular feature that depends on it; your capacity to utilize other functions within the app will remain unaffected. You may review the current permission status at any time via your device's system settings. You are entirely free to turn any or all of these permissions on or off according to your personal preferences.

Please bear in mind that when you approve a permission, you are granting us the authority to collect and utilize the relevant personal data solely for the purpose of delivering the associated service. If you subsequently deactivate a permission, this effectively cancels or withdraws your prior consent, and we will cease collecting or using personal information based on that permission from that moment onward. However, disabling a permission will not impact any data collection or usage that took place while the permission was still active.

Third-Party SDKs and Service Providers

To facilitate essential functionalities, perform analytical operations, and enable in-app purchase services, LumiCraft incorporates the following third-party software development kits (SDKs). Each of these SDKs may gather and handle specific device and activity data in the manner outlined below. All such data processing takes place solely after you have provided your consent to this Privacy Policy.

  1. AppsFlyer (provided by AppsFlyer Ltd.)
    Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.
    Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data
  2. Google Play Billing (provided by Google LLC)
    Purpose: Processing in-app purchases and subscription transactions.
    Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is handled directly by Google Play.
  3. Google Install Referrer (provided by Google LLC)
    Purpose: Identifying the source (channel) that led to your app installation.
    Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.
  4. Google Ads Identifier & AppSet ID (provided by Google LLC)
    Purpose: Providing anonymized identifiers for analytics and ad performance measurement.
    Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.
  5. Google Sign-In (provided by Google LLC)
    Purpose: Enabling Google account-based login and authentication.
    Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.
  6. Functional Libraries (No Data Collection)
    The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data

We gather and study information in order to consistently enhance our Service and optimize the overall user experience. This information is handled in a consolidated format, enabling us to gain clearer insights into behavioral trends and refine our product offerings. These aggregated findings may be disclosed to our affiliates, agents, and commercial partners for purposes such as research, product evolution, and business strategy. Rest assured that this data is de-identified and does not reveal your identity or that of your end users.

How We Use Your Personal Information

We may utilize the data you supply, in accordance with this policy, to provide our services or to reach out to you. Specific applications include the following:

  1. Service Enhancement
    Your data assists us in creating, building, operating, delivering, and refining our products. For instance, by examining how users engage with the platform, we can ensure it remains user-friendly and straightforward.
  2. Security Purposes
    We employ your data to uphold account and network safety, safeguarding our services for all users. This may involve pre-screening or scanning uploaded material for potentially illegal content. Your data may also be applied to risk mitigation, customer security assistance, and related protective measures.
  3. Sending Important Communications
    We use your data to deliver essential notifications, such as alerts concerning your account or revisions to our terms, conditions, and policies.
  4. Compliance with Legal Obligations
    We preserve and manage your data as needed to fulfill our legal duties. This may involve recording, auditing, analyzing, or processing your information in accordance with relevant laws, including in urgent circumstances.

Your Choices

You may limit data collection by:

Your Right to Delete Data

While using our application, you maintain complete authority over your information and may remove saved records whenever you wish. We are dedicated to safeguarding your privacy and ensuring that data deletion remains an accessible option. You can clear your activity history and other stored content through the app's settings section. Furthermore, uninstalling the application will automatically wipe any data saved locally on your device. Please note that once data has been erased, it cannot be recovered. Should you have any inquiries concerning your deletion entitlements, do not hesitate to contact our support team for assistance.

Cookies and Similar Data Technologies

Like most online platforms, we employ cookies, web beacons, and comparable technologies. Cookies are small text files placed on your hard drive or within your device's memory. They hold details about your usage of our services, supporting functions such as user verification, retaining your preferences and configurations, analyzing visitor traffic and behavior patterns, evaluating ad campaign effectiveness, and enabling social interactions. Web beacons are small embedded components on webpages or in emails that help us gauge your engagement with that material.

Most web browsers accept cookies as a default setting. You can typically modify your browser preferences to reject or remove browser cookies if you wish. However, please note that this may impact the accessibility and performance of our services.

We utilize third-party analytics solutions to assess visitor volume and usage patterns for our services. These tools capture data transmitted by your device or our services, including the pages you view, features you activate, and other details that assist us in refining our offerings. This analytics information is combined with similar data from other users in a manner that does not reasonably identify any individual.

We collaborate with external advertising partners to display ads across websites or other media. To evaluate ad performance and calculate compensation for these partners, we incorporate third-party components into our applications. Additionally, we may include such modules to gain deeper insight into how users engage with our services.

How Long We Keep Your Personal Information

We retain your personal data for a duration of 48 months. We may continue to store and utilize your information as necessary to satisfy legal requirements (such as adhering to applicable regulations), address disputes, and enforce our contractual terms and policies.

We also hold onto Usage Data for internal analytical purposes. This category of data is typically maintained for a shorter period, unless it is required to bolster security, enhance our Service performance, or we are legally compelled to preserve it for an extended timeframe.

Data Sharing

We do not sell or lease your personal data to outside parties. The SDKs referenced above share data exclusively with their respective providers for the stated purposes, and we contractually obligate them to handle data in compliance with relevant privacy regulations.

How We Share Your Information

Brady Carter does not sell, lease, or exchange your personal information with any external entity. We disclose personal information only when essential to deliver the services you have requested, operate and sustain LumiCraft, process payments, comply with applicable legal requirements, or protect our legitimate rights and the security of our services.

Third-Party Service Providers

To enable the core functionality of LumiCraft, we partner with rigorously vetted third-party service providers. These partners deliver services including user authentication, payment handling, analytics, install tracking, cloud hosting, fraud detection, and application performance oversight.

Depending on the feature you use, these providers may process limited categories of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

AI Content Processing

When you voluntarily submit photos, videos, or other media for AI-driven handling, your materials are utilized exclusively to produce the outcomes you have requested.

Your submitted content is never sold, licensed, or disclosed to external parties for advertising, behavioral analysis, or training general-purpose AI systems. Media files are handled solely for the specific service you have requested and are automatically removed in accordance with the retention timeframe set forth in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

Should LumiCraft or Brady Carter become party to a merger, acquisition, corporate restructuring, financing arrangement, asset sale, or comparable business event, your personal information may be transferred as part of that proceeding.

In such instances, the acquiring entity will be obligated to safeguard your personal information under privacy standards that are essentially equivalent to those outlined in this Privacy Policy and in compliance with relevant data protection legislation.

Data Security and Protection Measures

We treat the security of your personal information with serious consideration. To prevent unauthorized access, exposure, or other potential threats, we have put in place reasonable physical, electronic, and administrative safeguards for data gathered through your use of our Platform offerings. We are dedicated to making every reasonable effort to protect your information.

Our security protocols are regularly assessed and revised as necessary to keep pace with operational developments, technological advancements, and legal mandates. These measures encompass, but are not limited to, technical and organizational security frameworks, access restrictions, and staff awareness initiatives.

While we attach great importance to safeguarding your data, please recognize that no method of online transmission or electronic storage is completely secure. Although we endeavor to protect your personal information using industry-standard approaches, absolute security remains unattainable. Should we become aware of a security incident affecting your personal information, we will notify you as required by applicable regulations. By using the Platform, you consent to receive such notifications through electronic means.

Your Privacy Rights

Should you wish to gain further understanding of your legal entitlements under relevant laws or desire to exercise any of them, please do not hesitate to contact us through the details provided in the "How to Contact Us" section below. Depending on your jurisdiction, you may have the right to request that we:

  1. Grant access to, or supply a copy of, certain personal information we maintain about you.
  2. Cease using your data for direct promotional activities, including any marketing efforts based on behavioral analysis.
  3. Rectify any outdated or inaccurate details we hold concerning you.
  4. Delete specific information we have stored about you.
  5. Restrict how we process or disclose certain data pertaining to you.
  6. Transmit your information to an alternative third-party service provider.
  7. Revoke any prior consent you have given regarding the handling of your data.

We will examine all requests and respond within the timeframe mandated by applicable legislation. Please note that under certain circumstances, some information may not be subject to such requests—for instance, if we are required to continue processing your data to safeguard our legitimate interests or to fulfill legal obligations. Prior to acting on your request, we may ask you to furnish reasonable evidence to confirm your identity.

Privacy Protections for Minors

Our services are not intended for individuals under 18 years of age (referred to as "minors"). We do not knowingly gather personally identifiable information from anyone below this age threshold. If you are a parent or legal guardian and become aware that your child has submitted Personal Data to us, please contact us. Upon learning that such information has been collected without verified parental authorization, we will take appropriate measures to remove it from our systems.

Rights Under CCPA, VCDPA, GDPR, and LGPD

We comply with the privacy standards established by California (CCPA), Virginia (VCDPA), the European Union (GDPR), and Brazil (LGPD). For users located in these regions, applicable laws grant you privileges such as accessing, amending, deleting, or objecting to the handling of your personal data. To exercise any of these rights, please contact our support team for further assistance.

Legal Grounds for Processing Your Data

We handle your personal information in accordance with relevant data protection regulations, including the General Data Protection Regulation (GDPR). Depending on the particular purpose of processing, we rely on one or more of the following legal bases:

  1. Legitimate Interests
    We may process certain non-sensitive data to pursue our legitimate interests, which include:
    • Enhancing the performance and user experience of our applications.
    • Maintaining the security and reliability of our apps and services.
    • Studying app usage patterns to better inform future development.
    When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.
  2. Legal Obligations
    In certain situations, we are required to process your data to meet legal obligations, such as complying with applicable financial, tax, or regulatory requirements.
  3. Vital Interests
    In exceptional circumstances, we may process your data to protect your vital interests or those of another person - for example, in response to a security incident affecting an application.

Right to Lodge a Complaint

If you believe that our handling of your personal data contravenes applicable data protection regulations or infringes upon your rights under those regulations, you are entitled to submit a complaint to a supervisory authority. This right applies, for instance, to EU residents under the General Data Protection Regulation (GDPR), as well as other local privacy laws that may be relevant to your region.

Where to Submit a Complaint

Should you wish to file a complaint, you may reach out to the appropriate data protection authority in your jurisdiction. Their contact details are generally accessible through their official websites. Alternatively, you may contact us directly for additional assistance.

Internal Resolution First

Prior to escalating to a formal complaint, we kindly request that you get in touch with us so that we may make reasonable attempts to resolve your issues. You can contact our Data Protection Officer (DPO) or reach us at BradleyCartersix@gmail.com.

Data Controller Information

For the purposes of relevant data protection legislation, the data controller responsible for processing personal information collected via LumiCraft is Brady Carter. Brady Carter establishes the purposes and methods of personal data processing and bears responsibility for ensuring adherence to applicable privacy regulations. For any privacy-related inquiries, please contact us at BradleyCartersix@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Updates to This Privacy Policy

We may update our Privacy Policy from time to time. We recommend that you check this page regularly for any modifications. Whenever changes are introduced, we will publish the updated policy on this page. All revisions become effective immediately upon publication.

Get in Touch

Should you have any inquiries, issues, or recommendations regarding our Privacy Policy, please feel free to reach out to us at BradleyCartersix@gmail.com.