Privacy Policy

Hocus AI · Last updated: June 4, 2026

This Privacy Policy explains how Hocus AI ("we", "us", "the app") collects, uses, and shares information when you use the Hocus AI mobile application. By using the app you agree to this policy.

Face & biometric data

Because Hocus AI animates a photo of a person, the photos you choose to upload may contain a face (yours or, with their permission, someone else's). We treat any face in your photo as sensitive data and handle it as follows:

What we collect. Only the photo you deliberately select and upload. The face contained in that photo is used purely as visual input to generate your video or AI photo. We do not scan, map, or build a faceprint, face template, or other biometric identifier, and we do not use facial recognition to identify, verify, or track you.
How we use it. Solely to generate the specific dance video or AI photo you request, by applying your chosen template/effect to the person in the image. We use it for no other purpose. We never use your face or photos to train AI models, and we never use them for advertising.
Who we share it with, and where it is stored. To produce your result, the photo (including any face in it) is sent to the third-party AI generation providers listed under "Service providers" below — OpenAI, fal.ai, Kling (Kuaishou), and ByteDance/BytePlus — strictly to generate your output. Photos and generated results are stored on our infrastructure (Cloudflare R2 and Supabase). We do not sell this data.
How long we keep it. Source photos you upload are deleted within 24 hours of processing. Generated videos and images are kept so you can access them in the app and are automatically deleted after 90 days, or sooner if you request deletion by emailing us.

This section is the complete description of how the app collects, uses, discloses, shares, and retains face data. If you do not want a face processed, do not upload a photo containing one.

Information we collect

Photos you provide. When you create a video or AI photo, the image you select — which may contain your or another person's face — is uploaded to our processing servers and to third-party AI providers solely to generate your result. We do not use your photos to train models or for advertising.
Generated content. The videos and images we produce for you are stored so you can access them in the app.
Purchase information. Subscription and in-app purchase status (handled by Apple and our billing provider, RevenueCat). We never receive your full payment-card details.
Device & usage data. Device identifiers, app interactions, and diagnostics used to operate, secure, and improve the app.
Advertising identifier (IDFA). Only if you grant permission via Apple's App Tracking Transparency prompt. Used to measure which ads led you to install the app.

How we use your information

To generate the videos and images you request.
To process subscriptions and in-app purchases.
To operate, secure, troubleshoot, and improve the app.
To measure advertising and marketing performance (only with your ATT consent for cross-app tracking).

Service providers we share data with

We share the minimum data necessary with vendors that process it on our behalf. Each provider is contractually required to protect your data and use it only to perform its service for us:

AI processing: OpenAI, fal.ai, Kling (Kuaishou), and ByteDance/BytePlus — your uploaded photo (including any face it contains) is sent to these third-party AI services to generate your videos and images. They process it only to return your result and do not receive it for their own advertising.
Infrastructure & storage: Supabase and Cloudflare (R2) — to run our backend and store your results.
Purchases: RevenueCat and Apple — to manage subscriptions.
Analytics & attribution: PostHog (product analytics) and AppsFlyer (install attribution / advertising measurement). AppsFlyer may share measurement data with ad networks such as Meta, TikTok, and Google when you have granted tracking permission.

We do not sell your personal information.

Data retention

Source photos you upload are deleted within 24 hours of processing. Generated content is retained so it remains available to you in the app and is automatically deleted after 90 days, or sooner if you request it. You can request deletion of your data at any time by emailing us.

Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To exercise any right, contact us at the address below.

Children

Hocus AI is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect their personal data.

Tracking & your choices

You can decline cross-app tracking at any time in iOS Settings → Privacy & Security → Tracking, or when prompted by the App Tracking Transparency dialog. Declining does not affect your ability to use the app.

Contact

Questions or requests: [email protected]