Privacy Policy

This Privacy Policy explains how Wondermaker AI (“Wondermaker AI,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use our mobile application and website (collectively, the “Service”). By using the Service, you agree to the practices described here.

We collect the following categories of information:

• Account information. When you sign up — including via Sign in with Apple — we collect identifiers such as your email address, user ID, display name, and profile details you provide.
• Content you create or upload. The text prompts you enter and the images, videos, audio, and reference photos you upload or generate. Generated content and your prompts are stored so you can access your creations.
• Device permissions. With your permission, we access your camera (profile photos), photo library (uploading references and saving creations), and microphone (voice prompts). You can revoke these in your device settings at any time.
• Usage & analytics data. App interactions, feature usage, device type, OS version, and diagnostic data, collected through analytics tooling (PostHog).
• Advertising & tracking identifiers. If you grant permission via the App Tracking Transparency prompt, we may access your device advertising identifier (IDFA / Advertising ID) to measure and improve advertising. If you decline, we do not use it for cross-app tracking.
• Subscription & purchase data. Subscription status and transaction records, processed through our paywall and the app stores. We do not receive or store your full payment card details.
• Push tokens. If you enable notifications, we store a push token to notify you when your creations are ready.

• To provide, operate, and maintain the Service and generate your content.
• To create and manage your account and process subscriptions.
• To send you notifications you have opted into.
• To analyze usage, fix bugs, and improve features and performance.
• To measure and (with consent) personalize advertising.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

To generate images, video, and music, your prompts and any uploaded reference media are sent to third-party AI model providers (including fal.ai and the model providers it routes to) for processing. These providers process your content to return a result and handle it subject to their own privacy terms. We do not sell your prompts or content. Generated content is AI-created and may not depict real people, places, or events.

We share information only as described below. We do not sell your personal information.

• Service providers. Vendors who help us run the Service — including cloud hosting and storage, our database/auth provider (Supabase), analytics (PostHog), AI model providers (fal.ai and its upstream providers), subscription/paywall infrastructure, and push delivery — under agreements that limit their use of your data.
• Legal & safety. When required by law, regulation, or valid legal process, or to protect the rights, safety, and property of Wondermaker AI, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain your information for as long as your account is active or as needed to provide the Service. You can delete your creations in the app and request deletion of your account and associated data by contacting us. We may retain limited information as required for legal, accounting, or security purposes.

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing.

• EEA/UK (GDPR). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our legal bases include performance of a contract, consent (e.g. tracking), and legitimate interests.
• California (CCPA/CPRA). You have the right to know, delete, and correct your personal information, and to opt out of “sharing” for cross-context behavioral advertising. We do not sell your personal information. You will not be discriminated against for exercising these rights.

To exercise any right, email us at [email protected].

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Because the Service includes AI-generated content and advertising, it is intended for users who meet the minimum age in our terms and the app store age rating. If you believe a child has provided us information, contact us and we will delete it.

We use technical and organizational measures — including encryption in transit (HTTPS/TLS) — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We and our service providers may process and store your information in countries other than your own, including the United States. Where required, we use appropriate safeguards for such transfers.

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, notify you in the app.

Questions about this Policy or your data? Email us at [email protected].