Privacy Policy

Last updated: September 11, 2026

Operational Workflow Summary

  1. Users are required to submit photographic images and select a template of their preference.
  2. A dedicated instance of the stable diffusion model is fine-tuned using the submitted data to deliver a customised user experience.
  3. Following the fine-tuning phase, the system produces an avatar that corresponds to the individually adapted model.
  4. Upon successful generation of the avatar, both the original uploaded photographs and the fine-tuned model copy are permanently erased from our server infrastructure. It should be noted that certain constraints govern the use of avatars—specifically, the generation of nude imagery or the unauthorised use of third-party photographs is strictly prohibited.
  5. Under no circumstances will your personal information be utilised for the purpose of general model training or for the development of any other independent AI offerings.

Cloud Processing at User Direction

The Application offers certain AI-enabled editing, enhancement, and rendering functionalities that rely on secure cloud-based computation. Such cloud processing is activated solely when you deliberately engage a feature that necessitates server-side execution.

Conditions for Upload

Media files, including images and videos, are transmitted to our protected servers exclusively after you have manually chosen a cloud-dependent function and expressly triggered the processing operation. SnapCharm does not autonomously upload your personal media—whether in the background, automatically, or without your explicit involvement. Prior to any upload, the App conspicuously notifies you that cloud processing will be required.

Storage Duration and Data Removal

Uploaded media is retained only for the period required to fulfill the requested service. Both the original files submitted and any output generated are permanently and automatically expunged within 72 hours following the conclusion of processing. Smart Mahallu neither maintains backup copies of your uploaded materials nor utilises your content for promotional purposes, model training, user profiling, or any other extraneous activities.

Security Measures

All data transmissions, whether uploads or downloads, are safeguarded by industry-standard TLS encryption protocols. Access to any uploaded materials is strictly confined to automated processing mechanisms and authorised system components that are essential for delivering the requested functionality.

Content Advisory and Reporting

We endeavour to calibrate the AI model with the utmost care to ensure appropriate outputs. Nevertheless, you may occasionally encounter content that you deem unsuitable. Should you come across any material that you consider offensive or objectionable, please notify us via Smartmahallu@gmail.com. We commit to responding expeditiously, and your reports contribute valuable insights that assist us in refining our algorithms on an ongoing basis.

Categories of Information Collected

  1. Platform Interaction Data
    We may gather information pertaining to your engagement with our Platforms, including browsing patterns, click activity, downloaded materials, shared content, video manipulation actions, and any other data you supply during service usage. This information enables us to provide and maintain the Platform's core functionalities.
  2. Device Specifications and Log Information
    To ensure operational stability and security, enhance user experience, facilitate advertising and notification delivery, and safeguard your account integrity, we collect certain device attributes and log records when you access our services. These include: unique device identifiers, Google Advertising ID (GAID), device model, system language setting, geographic country, advertising identifier, operating system version, IP address, software release version, network access method, connection quality indicators, and service log entries.
  3. User Inquiries and Feedback Data
    When you contact us for technical support or to submit feedback, we collect the information and attachments you provide, alongside your contact particulars (including telephone number and email address). This allows us to respond effectively to your queries and deliver appropriate customer service.
  4. Facial Feature Processing Information
    When you utilise facial editing or synthesis capabilities, we automatically detect the positioning and geometric configuration of facial landmarks to derive the necessary analytical data for image manipulation. The resulting visual outputs are then delivered back to you. We do not retain the original photographs, video clips, facial data points, or generated renderings, nor do we transfer them to any external parties. This operation is performed exclusively to support the facial recognition functionality and enhance the quality of your output. Should your editing involve facial features of other individuals, it is your responsibility to notify them and secure their explicit consent.
  5. Server-Side Processing Operations
    To facilitate efficient and precise image or video processing, we may temporarily transmit your media files or associated descriptive tags to cloud infrastructure for effect rendering. Such transmissions are utilised solely for the specific processing task you have requested. We do not preserve the media, tags, or any ancillary data beyond the minimal duration required, nor do we employ them for any ancillary purpose or disclose them to third parties.

Device Permissions

To provide you with better products, efficient services, and an improved user experience, we may request certain permissions on your device when offering additional features. With your consent and following the principle of collecting only the minimum necessary data, we may access the following permissions and the corresponding information:

  1. Read/Write External Storage Permission - Used to read from and write to your device's external memory card for video editing purposes.
  2. Camera Permission - Allows you to take photos and record videos within the app.
  3. Network Access Permission - Enables various online services, such as accessing and downloading materials.

The personal information associated with these permissions is regarded as sensitive in nature. Should you choose to decline a permission, this will merely restrict your access to the particular feature that relies upon it; your utilisation of other functionalities within the Application will remain unaffected. You may review the current status of your permissions at any time via the system settings on your device. It is within your discretion to grant or revoke any or all of these permissions in accordance with your personal preferences.

Please note that by granting a permission, you are providing your explicit authorisation for us to collect and process the relevant personal data exclusively for the purpose of delivering the corresponding service. In the event that you subsequently disable a permission, such action constitutes a withdrawal of your prior consent, and we shall cease any further collection or usage of personal information predicated on that permission from that moment onward. Nevertheless, the revocation of a permission shall not affect any data collection or processing activities that were lawfully conducted during the period when the permission remained active.

Third-Party SDKs and Service Providers

To deliver core features, process analytics, and support in-app purchases, SnapCharm integrates with the following third-party software development kits (SDKs). Each SDK may collect and process certain device and usage data as described below. All such processing occurs only after you have consented to this Privacy Policy.

  1. AppsFlyer (provided by AppsFlyer Ltd.)
    Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.
    Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data helps us understand how you discovered our app and improve our promotional activities.
  2. Google Play Billing (provided by Google LLC)
    Purpose: Processing in-app purchases and subscription transactions.
    Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is handled directly by Google Play.
  3. Google Install Referrer (provided by Google LLC)
    Purpose: Identifying the source (channel) that led to your app installation.
    Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.
  4. Google Ads Identifier & AppSet ID (provided by Google LLC)
    Purpose: Providing anonymized identifiers for analytics and ad performance measurement.
    Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.
  5. Google Sign-In (provided by Google LLC)
    Purpose: Enabling Google account-based login and authentication.
    Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.
  6. Functional Libraries (No Data Collection)
    The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data

We collect and examine data to continuously improve our Service and user experience. This information is processed in aggregated form, allowing us to better understand usage patterns and refine our products. Such summarized insights may be shared with our affiliates, agents, and business partners for purposes including research, development, and commercial planning. Please be assured that this data is anonymized and does not personally identify you or your end users.

Purposes of Personal Data Usage

We may process the information you supply, in accordance with the provisions of this policy, for the purpose of rendering our services or maintaining communication with you. The principal use cases encompass the following:

  1. Service Optimisation
    Your data assists us in creating, developing, operating, delivering, and refining our product offerings. By way of illustration, analysing user engagement patterns with the platform enables us to verify that it remains user-friendly and logically structured.
  2. Security Maintenance
    We employ your information to uphold account and network integrity, thereby safeguarding our services for all users. This may entail preliminary filtering or examination of uploaded materials for potentially illicit content. Your data may also be utilised for risk mitigation, customer security support, and related protective measures.
  3. Transmission of Essential Notifications
    We utilise your information to convey significant communications, including alerts pertaining to your account status or amendments to our terms, conditions, and policies.
  4. Fulfilment of Legal Requirements
    We retain and administer your information to the extent necessary for compliance with our statutory duties. This may encompass recording, auditing, analysing, or otherwise processing your data in conformity with relevant legislation, including in cases of emergency circumstances.

Your Choices

You may limit data collection by:

Your Right to Delete Data

While using our app, you retain full control over your information and may delete saved records at any time. We are committed to protecting your privacy and ensuring that data removal is possible. You can clear your history and other stored information through the app's settings menu. Additionally, uninstalling the app will automatically erase any data stored locally on your device. Please be aware that once data is deleted, it cannot be restored. If you have any questions regarding your deletion rights, feel free to reach out to our support team for help.

Cookies and Related Tracking Technologies

In common with the majority of online service providers, we employ cookies, web beacons, and analogous technologies. Cookies constitute small data files that are stored on your hard drive or within your device's memory. They preserve information regarding your utilisation of our services, facilitating functions such as user authentication, retention of your preferences and configuration settings, analysis of traffic volumes and usage behaviours, evaluation of advertising campaign effectiveness, and enablement of social interaction features. Web beacons are minor software components embedded within web pages or email communications, which assist us in comprehending your engagement with such content.

The majority of web browsers accept cookies as a default setting. You retain the ability to modify your browser preferences to delete or inhibit browser cookies should you so choose. Nevertheless, please be advised that such actions may impair the availability and full functionality of our services.

We engage third-party analytics solutions to measure traffic volumes and usage patterns across our services. These tools collect data transmitted by your device or by our services, encompassing the pages you visit, the add-ons you employ, and other information that contributes to our service improvement efforts. Such analytics data is aggregated with comparable data from other users in a manner that does not reasonably permit identification of any particular individual.

We collaborate with third-party advertising partners to deliver advertisements across the internet and other media channels. For the purpose of evaluating advertising effectiveness and determining remuneration to these partners, we incorporate third-party software modules within our applications. Furthermore, we may include such modules to gain deeper insights into user interactions with our services.

Data Retention Period

We maintain your personal information for a duration of 48 months. We may continue to preserve and utilise your data to the extent required for compliance with legal obligations (including adherence to applicable statutory provisions), resolution of disputes, and enforcement of our contractual terms and internal policies.

Furthermore, we retain Usage Data for internal analytical activities. Such data is generally held for a comparatively shorter timeframe, except in circumstances where it is necessary for strengthening security measures, enhancing the operational capabilities of our Service, or where we are subject to legal mandates that necessitate extended preservation.

Data Sharing

We do not sell or rent your personal data to third parties. The SDKs listed above share data only with their respective providers for the purposes stated, and we contractually require them to process data in accordance with applicable privacy laws.

How We Share Your Information

Smart Mahallu does not sell, rent, or trade your personal information to any third party. We share personal information only when necessary to provide the services you request, operate and maintain SnapCharm, process transactions, comply with applicable laws, or protect our legal rights and the security of our services.

Third-Party Service Partnerships

In order to deliver the fundamental features of SnapCharm, we engage with a curated selection of external service providers. These partners offer support across various operational areas, including user identity verification, transaction processing, analytical measurement, installation source attribution, cloud-based infrastructure, fraudulent activity detection, and application performance oversight.

Depending on the feature you use, these providers may process limited categories of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

AI-Based Content Processing Operations

When you voluntarily submit photographs, video clips, or other media files for AI-enabled processing, your materials are utilised exclusively for the purpose of generating the outputs that you have explicitly requested.

Your submitted content is never sold, sublicensed, or disclosed to external parties for purposes of advertising, behavioural profiling, or the development of general-purpose artificial intelligence systems. Media files are processed solely in fulfilment of the specific service you have requested, and are automatically expunged in accordance with the data retention provisions set forth in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

If SnapCharm or Smart Mahallu becomes involved in a merger, acquisition, corporate reorganization, financing, sale of assets, or similar business transaction, your personal information may be transferred as part of that transaction.

In such cases, the receiving entity will be required to protect your personal information under privacy protections that are substantially equivalent to those described in this Privacy Policy and in accordance with applicable data protection laws.

Data Security and Protective Safeguards

We attach considerable importance to the security of your personal data. In order to prevent unauthorised access, improper disclosure, or other potential vulnerabilities, we have instituted reasonable physical, technical, and administrative controls over information collected through your engagement with our Platform services. We are resolute in our commitment to safeguarding your information to the best of our ability.

Our security protocols are subject to regular evaluation and are revised as necessary to accommodate shifts in business operations, technological advancements, and regulatory frameworks. These protective measures encompass, though are not confined to, technical and administrative security policies, access restriction mechanisms, and staff awareness and training initiatives.

Notwithstanding our strong emphasis on data protection, it must be acknowledged that no method of data transmission over the internet or digital storage mechanism can be rendered completely infallible. Although we endeavour to protect your personal information using standards consistent with industry practice, absolute security cannot be assured.

Should we become aware of any security compromise affecting your personal data, we will provide notification in accordance with applicable statutory requirements. By utilising the Platform, you consent to receive such notifications through electronic means.

Your Privacy Rights

If you wish to learn more about your legal rights under applicable laws or would like to exercise any of them, please feel free to reach out to us using the contact details provided in the "How to Contact Us" section below. Depending on your local regulations, you may have the right to ask us to:

  1. Provide access to, or a copy of, certain personal information we hold about you.
  2. Stop using your information for direct marketing purposes, including any marketing activities based on profiling.
  3. Correct any outdated or inaccurate information we have about you.
  4. Erase specific information we maintain on you.
  5. Limit how we process or share certain information related to you.
  6. Transfer your information to another third-party service provider.
  7. Withdraw any consent you previously gave regarding the processing of your information.

We will assess all submissions and provide a response within the period prescribed by relevant legislation. Please note that, under certain circumstances, specific information may fall outside the scope of such requests — for instance, where we are required to continue processing your data in order to safeguard our legitimate interests or to fulfil binding legal obligations. Prior to acting upon your request, we may request that you furnish reasonable documentation or information for the purpose of confirming your identity.

Protection of Minor Users' Privacy

Our services are not directed towards individuals under the age of 18 (hereinafter referred to as "minors"). We do not knowingly collect personally identifiable information from any person below this age threshold. Should you be a parent or legal guardian and become aware that your child has submitted Personal Data to us, please contact us without delay. Upon confirmation that such information has been collected absent verifiable parental consent, we will take prompt and appropriate measures to remove it from our systems.

Rights Under CCPA, VCDPA, GDPR, and LGPD

We comply with the privacy standards prescribed by the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), the General Data Protection Regulation (GDPR) of the European Union, and the Lei Geral de Proteção de Dados (LGPD) of Brazil. For users resident in these jurisdictions, applicable legislation affords you rights including, but not limited to, accessing, rectifying, erasing, or opposing the processing of your personal data. Should you wish to exercise any of these entitlements, please contact our support team for further guidance.

Legal Bases for Data Processing

We process your personal information in accordance with relevant data protection regulations, including the GDPR. Depending upon the particular purpose of the processing activity, we rely upon one or more of the following lawful grounds:

  1. Legitimate Interests
    We may process certain non-sensitive data to pursue our legitimate interests, which include:
    • Enhancing the performance and user experience of our applications.
    • Maintaining the security and reliability of our apps and services.
    • Studying app usage patterns to better inform future development.
    When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.
  2. Legal Obligations
    In certain situations, we are required to process your data to meet legal obligations, such as complying with applicable financial, tax, or regulatory requirements.
  3. Vital Interests
    In exceptional circumstances, we may process your data to protect your vital interests or those of another person — for example, in response to a security incident affecting an application.

Right to Submit a Complaint

Should you believe that our handling of your personal data contravenes applicable data protection legislation or infringes upon your entitlements under such laws, you are entitled to lodge a complaint with the competent supervisory authority. This right extends, for instance, to residents of the European Union under the General Data Protection Regulation (GDPR), as well as to individuals covered by other local data protection statutes that may be relevant to your jurisdiction.

Filing a Complaint

In the event that you wish to submit a complaint, you may contact the appropriate data protection supervisory body in your country of residence. The contact details for such authorities are generally accessible through their respective official websites. Alternatively, you may contact us directly for additional assistance or direction.

Internal Resolution Mechanism

Prior to advancing a matter to a formal complaint, we kindly request that you contact us in the first instance, so that we may undertake reasonable measures to address your concerns. You may reach our Data Protection Officer (DPO) or otherwise contact us via Smartmahallu@gmail.com.

Data Controller Identification

For the purposes of relevant data protection regulations, the data controller responsible for the processing of personal information gathered through SnapCharm is Smart Mahallu. Smart Mahallu establishes the purposes and methods for processing personal data and bears the responsibility for ensuring adherence to applicable privacy laws. Should you have any privacy-related inquiries, please direct them to us at Smartmahallu@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Amendments to This Privacy Policy

We may update this Privacy Policy on an occasional basis. We recommend that you review this page periodically to remain informed of any modifications. Should any revisions be made, we will display the updated policy on this same page. All changes shall become effective immediately upon publication.

Contact Us

Should you have any inquiries, reservations, or recommendations relating to our Privacy Policy, please feel free to reach out to us at Smartmahallu@gmail.com.