1. Introduction
Welcome to AI Time Machine ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application AI Time Machine (the "App").
By downloading, accessing, or using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
Key Privacy Commitments:
- We use anonymous authentication — no email, no login, no personal account required
- Your uploaded photos are automatically deleted from AI processing servers within 1 hour
- We do NOT sell your personal data to third parties
- We do NOT use your photos to train AI models
- You have full control over your data and can delete it at any time
2. Information We Collect
2.1 Information Generated Automatically (No Sign-Up Required)
Anonymous Account Identifier
When you first launch the App, we create an anonymous user ID via Firebase Anonymous Authentication. This ID is not linked to your email, name, phone number, or any personal identifier. It exists only to:
- Track your credit balance across sessions
- Save your generation history on this device
- Manage your subscription state
Device Information
- Device type and model
- iOS version
- App version
- Anonymous installation identifier (for fraud prevention)
2.2 Information You Provide Directly
Photos and Media
- Uploaded Photos: Images you upload for AI transformation. These are temporarily processed and automatically deleted from processing servers within 1 hour.
- Generated Content: AI-generated images and videos. References to these results are stored in our database; the media files are served via our content delivery network.
User Input
- Style and Era Selections: The photo styles, eras, and video categories you choose
- Generation Preferences: Aspect ratio, duration, and other settings
- Onboarding Preferences: Optional age range and interest selections to personalize the home screen (stored locally on your device)
2.3 Information Collected for Service Operation
Usage Data
- Number and type of generations (photo vs video)
- Credit transactions (deductions, refunds, purchases)
- Rate-limit tracking (to prevent abuse)
- Error logs and crash reports (anonymized)
Push Notification Token
The App does not currently send push notifications. If we add this feature in the future, we will request your explicit permission first.
2.4 Information from Third-Party Services
- Apple App Store: Purchase confirmations and subscription status. We do not receive your payment card details.
- RevenueCat: Subscription management linked to your anonymous user ID.
- Firebase App Check: Cryptographic device attestation to verify requests come from a genuine copy of our App.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide AI photo generation | Uploaded photos, category prompts | Contract performance |
| Provide AI video generation | Uploaded photos, video prompts | Contract performance |
| Anonymous account & credit balance | Anonymous user ID, credit transactions | Contract performance |
| Process in-app purchases | Purchase confirmations, subscription status | Contract performance |
| Prevent abuse & rate-limiting | Anonymous ID, request counts, App Check tokens | Legitimate interest |
| Improve our services | Anonymized crash reports, error logs | Legitimate interest |
| Customer support | Anonymous ID (you provide voluntarily) | Contract performance |
4. Photo Processing and AI Services
Important: Different AI providers handle photos and videos. Understanding how each works is crucial for your privacy.
4.1 Photo Generation (Google Firebase AI Logic / Gemini)
When you transform a photo into a different era or style:
- Upload: Your photo is securely transmitted via encrypted HTTPS directly from your device to Google's Firebase AI Logic service
- Processing: The Gemini 2.5 Flash Image model generates your transformed result
- Delivery: The generated image is returned directly to your device
- Retention: Google processes the image only to fulfill your request and does not use it to train models. Per Google's policy, input images are not retained beyond the duration of processing.
4.2 Video Generation (fal.ai / Seedance 2.0)
When you generate a time-travel video:
- Upload: Your photo is securely transmitted via HTTPS to our Firebase Cloud Functions
- Forward: The image is forwarded to fal.ai, which routes it to ByteDance's Seedance 2.0 video model
- Generation: The AI generates a short video clip from your image
- Delivery: The video URL is returned to your device
- Automatic Deletion: Your original uploaded photo is automatically deleted from fal.ai servers within 1 hour of processing completion
4.3 Our AI Partner Data Handling
Our AI processing partners (Google / Gemini and fal.ai / Seedance):
- Process images only for the purpose of generating your requested content
- Automatically delete uploaded inputs within 1 hour
- Do NOT use your images to train AI models
- Do NOT share your images with third parties
- Maintain SOC 2 / ISO 27001 / equivalent enterprise security standards
4.4 Faces and Biometric Data
Although your photos may contain your face, the App uses your image only to generate the visual result you request. We do NOT perform facial recognition, we do NOT create, derive, or store any facial geometry, faceprint, or other biometric identifier, and we do NOT use your face to identify or track you. Your uploaded photo is processed transiently for generation and then deleted — it is never stored as a biometric template.
4.5 Generated Content Storage
- Generation Metadata: Stored in our Firebase Firestore database (linked to your anonymous user ID) so that your gallery persists across sessions
- Result Files: Photo results are served via the AI provider's secure CDN. Video results are served via our Cloudflare R2 storage
- Local Save: You can optionally save any generated content to your device's photo library
4.6 Data Processing Consent
Before you use any AI generation feature for the first time, the App shows a clear consent screen explaining how your photo is handled. This screen confirms:
- That your photo is uploaded over an encrypted connection solely to generate your requested result
- That uploaded photos are automatically deleted within 1 hour and never stored
- That your generated content stays on your device, under your control
- That we never sell your data and never use your face to train AI models
AI generation does not proceed until you accept. You can withdraw your consent at any time by deleting your account (Profile → Delete account), which permanently removes your consent record and all associated data.
4.7 Community (User-Generated Content)
The App includes an optional Community feed where users can voluntarily share creations they generated in the App so that others can discover styles and try them. Sharing is entirely optional — nothing is published unless you tap "Share to Community."
- What is shared: only the AI-generated photo or video you choose to share, plus non-personal metadata (the style name, the prompt used, and your anonymous user ID). We do not reveal your name, email, or any directly identifying information — accounts are anonymous.
- Where it is stored: shared media files are stored on Cloudflare R2 object storage and delivered via Cloudflare's CDN; post metadata is stored in our Firebase Firestore database.
- Visibility: shared posts are publicly visible to other users of the App inside the Community feed.
- Your control: you can delete any of your own posts at any time from the Community feed ("My Posts"). Deleting your account also removes your posts.
Zero tolerance for objectionable content. Before posting, you must agree to our Community Guidelines. Every post includes a Report option and an option to Block the poster. Reported content is reviewed and removed if it violates our rules, and content reaching a report threshold is automatically hidden. We aim to act on reports of objectionable content within 24 hours. Users who post offensive, explicit, or abusive content may be banned. To report content or a user, use the in-App report control or contact timemachine.app.support@gmail.com.
5. Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Uploaded photos (AI processing) | 1 hour after processing | Automatic deletion by AI provider |
| Generated content (gallery) | Until you delete your account | Delete in-App or delete account |
| Community posts (shared media) | Until you delete the post or your account, or it is removed for violating rules | Community → My Posts → Delete, or report-based removal |
| Anonymous user account | Until you delete your account | Profile → Delete account |
| Credit transactions | While account is active | Deleted with account |
| Crash reports | 90 days | Automatic expiration |
| Purchase history (Apple) | As required by law (typically 7 years) | Legal requirement (held by Apple) |
6. Data Sharing and Disclosure
6.1 Third-Party Service Providers
We share information with trusted third-party service providers who assist us in operating the App:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Anonymous auth, database, cloud functions, App Check | Anonymous user ID, usage data |
| Firebase AI Logic / Gemini | Photo generation | Uploaded photos (deleted after processing) |
| fal.ai / Seedance | Video generation | Uploaded photos (deleted within 1 hour) |
| Cloudflare | Video content delivery (CDN + R2 storage) | Generated video files |
| RevenueCat | Subscription management | Anonymous user ID, purchase status |
| Apple | App Store, in-app purchases | Purchase transactions |
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
6.2 What We Do NOT Do
- We do NOT sell your personal information to third parties
- We do NOT share your photos with advertisers
- We do NOT use your photos to train AI models
- We do NOT provide your data to data brokers
- We do NOT display advertisements in the App
- We do NOT track you across other apps or websites
6.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights or property
- Prevent fraud or illegal activity
- Protect the safety of users or the public
7. Data Security
Encryption
- All data transmitted between your device and our servers uses TLS 1.3 encryption
- Data at rest is encrypted using industry-standard AES-256
App Integrity
- Firebase App Check (App Attest): Cryptographically verifies that requests originate from a legitimate copy of our App, preventing API abuse
- Server-side credit deduction with atomic transactions (preventing client manipulation)
- Rate limiting to prevent automated abuse
Infrastructure Security
- Firebase infrastructure with Google Cloud security
- Cloudflare edge network protection
- Regular security monitoring and audits
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
8. Your Rights and Choices
8.1 Access Your Data
You can view your:
- All generated content in the Gallery tab
- Anonymous account info and credit balance in the Profile tab
For a complete data export, contact us at timemachine.app.support@gmail.com with your anonymous user ID.
8.2 Delete Your Data
Delete Individual Generations: In the Gallery, tap any item and use the delete action.
Delete Your Entire Account: Go to Profile → Account → Delete account. This permanently deletes:
- Your anonymous Firebase account
- All your generated images and videos
- Your credit balance and transaction history
- Any local app data
This action is immediate and irreversible. To also cancel any active subscription, go to iPhone Settings → Apple ID → Subscriptions.
8.3 Opt-Out Options
- Photo Library Access: Manage in iOS Settings → AI Time Machine → Photos
- Camera Access: Manage in iOS Settings → AI Time Machine → Camera
- App Tracking: We respect iOS App Tracking Transparency — we do not track you across other apps or websites
8.4 California Residents (CCPA/CPRA)
California residents have additional rights:
- Right to Know: Request what personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: We do not sell personal information, so this right does not apply
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise these rights, contact timemachine.app.support@gmail.com.
8.5 European Users (GDPR)
If you are in the European Economic Area, you have rights including:
- Right of Access: Obtain a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
Legal Basis for Processing: Contract performance (providing services), legitimate interests (security, abuse prevention).
8.6 Turkish Users (KVKK)
Türkiye'de yaşayan kullanıcılar, 6698 sayılı KVKK kapsamında bilgilerinin işlenmesine ilişkin sahip oldukları haklar (öğrenme, düzeltme, silme, itiraz vb.) için timemachine.app.support@gmail.com adresine başvurabilirler. Tüm veriler şu temel ilkelere göre işlenir: hukuka uygunluk, dürüstlük, doğruluk ve güncellik, belirli/açık/meşru amaç, amaçla bağlantılı/sınırlı/ölçülü.
9. Children's Privacy
The App is rated 4+ on the App Store. We do not knowingly collect personal information from children under 13. Since we use anonymous authentication, we do not collect any directly identifying information from any user — but:
- If we discover we have collected identifying information from a child without appropriate consent, we will delete it immediately
- Account purchases require age verification through Apple ID
If you are a parent or guardian and believe your child is using the App, contact us at timemachine.app.support@gmail.com.
10. International Data Transfers
Your information may be transferred to and processed in:
- United States: Firebase, Google Cloud, fal.ai servers
- Global Edge Locations: Cloudflare CDN for content delivery
When we transfer data internationally, we implement appropriate safeguards:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all service providers
- Ensuring recipients maintain adequate security measures
11. Third-Party Links
The App may contain links to third-party websites or services (such as Apple's Terms of Service / Standard EULA). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated Privacy Policy at this URL
- Updating the "Last Updated" date at the top
- Showing an in-app notification for significant changes
Continued use of the App after changes become effective constitutes acceptance of the revised Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
We will respond to your inquiry within 30 days (or sooner as required by applicable law).
Thank you for trusting AI Time Machine. Your privacy is important to us — that is why we built the App with anonymous authentication, no tracking, and automatic deletion of your photos. We are committed to being transparent about how we handle your data while delivering an extraordinary creative experience.