Privacy Policy

Last updated: [August 21st, 2026]

Application and Developer Information

This Privacy Policy is applicable solely to the FilmNova mobile application (hereafter referred to as the "App"), which is available for download on Google Play.

The App is created, owned, and maintained by Lavish Food (hereinafter referred to as the "Developer," "we," "our," or "us"). Any mention of "we," "our," or "us" within this document signifies Lavish Food as the legal entity responsible for the functioning of FilmNova.

If you have obtained FilmNova via Google Play, this Privacy Policy sets forth the rules regarding how your data is collected, used, stored, and shared during your use of the App.

Process Overview

  1. Users submit photos and pick a desired template.
  2. A dedicated instance of the stable diffusion model is fine-tuned with the submitted data to tailor the output.
  3. Once fine-tuning is complete, the system produces an avatar using the customized model.
  4. After the avatar has been generated, both the original uploaded images and the fine-tuned model copy are permanently erased from our servers. Please be aware that avatar usage is subject to certain rules—for instance, generating explicit content or utilizing another person's photographs without proper authorization is strictly forbidden.
  5. Your personal data is never utilized for broad model training or for creating any other standalone AI offerings.

User-Initiated Cloud Processing

FilmNova delivers certain AI-driven editing, enhancement, and rendering functionalities via secure cloud-based infrastructure. Such processing is triggered solely when you deliberately activate a feature that relies on server-side computation.

Upload Trigger

Media files—including images, videos, or other content—are transmitted to our protected servers exclusively after you consciously choose a cloud-enabled function and manually start the process. FilmNova does not autonomously upload your personal media in the background or without your explicit action. Prior to any upload, the App clearly notifies you that cloud processing is necessary.

Data Retention and Deletion

Uploaded media is retained only for the duration required to fulfill the requested processing task. Both the initial uploaded files and the resulting outputs are automatically and irreversibly removed within 72 hours following the completion of processing. Lavish Food does not maintain backups of your uploaded content and does not leverage your data for advertising, AI model training, behavioral profiling, or any other unrelated activities.

Security

All data transmissions, whether uploading or downloading, are safeguarded through industry-standard TLS encryption. Access to any uploaded content is strictly confined to automated processing systems and the authorized infrastructure essential for delivering the requested service.

Content Notice

We make every effort to set up the AI model in the most responsible manner. Nevertheless, you may occasionally come across material that you find inappropriate. If you encounter anything offensive or unsuitable, kindly report it to us at sunilc639@gmail.com. We will respond swiftly, and your input also plays a valuable role in helping us refine the algorithm over time.

Information We Collect

1. Platform Activity Data

We may gather data regarding your interactions with our Platforms, such as browsing history, click activity, downloads, content you share, video editing operations, and any other inputs you provide while using our services. This data assists us in delivering the Platform's functionalities to you.

2. Device and Log Data

To ensure stable and secure operations, enhance user experience, facilitate advertising and message delivery, and safeguard your account, we collect certain device and log details when you access our services via the Platforms. This includes: unique device identifier, GAID, device model, system language, country, advertising ID, operating system and version, IP address, software version, network access type, network quality metrics, and service logs.

3. Feedback and Support Data

When you contact us for assistance or to share feedback, we collect the information and materials you supply, along with your contact details (such as phone number and email address). This enables us to address your questions and provide customer support.

4. Face Recognition Information

When you utilize face editing or synthesis features, we automatically detect the position and contours of your facial features to extract the necessary data for photo processing. The resulting outputs are then delivered back to you. We do not retain these photos, videos, facial feature data, or renderings, nor do we share them with any outside parties. This processing is performed exclusively to enable the face recognition function and enhance your output quality. If your editing involves another individual's facial features, you are responsible for notifying that person and securing their consent.

5. Cloud-Based Processing

To facilitate fast and precise image or video processing, we may temporarily transfer your materials or associated tags to a cloud server for effect generation. These uploads are utilized solely for the specific processing task you have requested. We do not keep the materials, tags, or related data beyond the necessary period, nor do we employ them for any other purposes or disclose them to third parties.

Device Permissions

To provide you with better products, efficient services, and an improved user experience, we may request certain permissions on your device when offering additional features. With your consent and following the principle of collecting only the minimum necessary data, we may access the following permissions and the corresponding information:

  1. Read/Write External Storage Permission – Used to read from and write to your device's external memory card for video editing purposes.
  2. Camera Permission – Allows you to take photos and record videos within the app.
  3. Network Access Permission – Enables various online services, such as accessing and downloading materials.

The information associated with these permissions is regarded as sensitive in nature. If you choose not to grant a particular permission, this will merely restrict your access to the specific feature that depends on it; your ability to utilize other parts of the app will remain unaffected. You may review your current permission settings at any time via your device's system preferences. You are also entitled to enable or disable any or all of these permissions according to your personal preference.

Please understand that when you give a permission, you are consenting to our collection and use of the relevant personal information exclusively for delivering the associated service. Should you later revoke a permission, this action terminates your prior consent, and we will cease any further collection or use of personal information based on that permission from that moment onward. However, disabling a permission will not impact any data collection or usage that occurred while the permission was still active.

Third-Party SDKs and Service Providers

To enable essential functionalities, conduct analytics, and facilitate in-app purchase operations, FilmNova incorporates several third-party software development kits (SDKs). Each of these SDKs may gather and handle specific device-related and usage data as outlined below. All such data processing activities take place solely after you have provided your consent through this Privacy Policy.

  1. AppsFlyer (provided by AppsFlyer Ltd.)
    Purpose: Mobile attribution, marketing analytics, and campaign performance tracking.
    Data collected: Device identifiers (Android ID, Google Advertising ID), IP address, app install source (referrer), conversion events, and in-app user actions. This data helps us understand how you discovered our app and improve our promotional activities.
  2. Google Play Billing (provided by Google LLC)
    Purpose: Processing in-app purchases and subscription transactions.
    Data collected: Purchase details, transaction history, and order identifiers. We do not store or have access to your full payment card information; all payment data is handled directly by Google Play.
  3. Google Install Referrer (provided by Google LLC)
    Purpose: Identifying the source (channel) that led to your app installation.
    Data collected: Referrer information (e.g., which campaign or ad led to the install) and installation timestamp. This data is used exclusively for attribution analysis.
  4. Google Ads Identifier & AppSet ID (provided by Google LLC)
    Purpose: Providing anonymized identifiers for analytics and ad performance measurement.
    Data collected: Google Advertising ID (AAID) and AppSet ID. You may reset or limit these identifiers at any time via your device settings.
  5. Google Sign-In (provided by Google LLC)
    Purpose: Enabling Google account-based login and authentication.
    Data collected: Only when you actively choose to sign in, we receive your basic profile information (name and email address) as provided by your Google account. No data is collected passively.
  6. Functional Libraries (No Data Collection)
    The following tools are used solely for technical operations such as networking, image loading, media playback, local storage, and background scheduling. They do not collect, transmit, or process any personal data: Retrofit & OkHttp (networking), Glide (image loading), ExoPlayer (media playback), DataStore (local preferences), WorkManager (background tasks), and Hilt (dependency injection).

Analytical Data

We gather and study data on an ongoing basis to enhance our Service and user experience. This information is handled in aggregate form, helping us gain a clearer understanding of usage behaviors and improve our offerings. Such summarized findings may be shared with our affiliates, agents, and business partners for objectives like research, product development, and commercial strategy. Please rest assured that this data is anonymized and does not reveal your identity or that of your end users.

How We Use Your Personal Information

We may utilize the information you supply, in accordance with this policy, to provide our services or to communicate with you. Specific purposes include the following:

  1. Service Enhancement – Your data assists us in building, developing, operating, delivering, and refining our products. For instance, by analyzing how users engage with the platform, we can ensure it stays intuitive and straightforward.
  2. Security Purposes – We rely on your information to uphold account and network security, ensuring our services remain protected for all users. This may involve pre-screening or scanning uploaded content for potentially illegal material. Your data may also be applied to risk prevention, customer security support, and other related protective measures.
  3. Sending Important Communications – We use your information to send essential notifications, such as alerts concerning your account or updates to our terms, conditions, and policies.
  4. Compliance with Legal Obligations – We retain and manage your information as needed to satisfy our legal duties. This may include recording, auditing, analyzing, or processing your data in compliance with applicable laws, including during emergency circumstances.

Your Choices

You may limit data collection by:

Your Right to Delete Data

While using our app, you retain complete authority over your information and may erase stored records at any moment. We are dedicated to safeguarding your privacy and facilitating data removal. You can wipe your history and other saved information through the app's settings menu. Additionally, uninstalling the application will automatically remove any data locally stored on your device. Please note that once data is deleted, it cannot be recovered. If you have any inquiries concerning your deletion rights, please don't hesitate to contact our support team for assistance.

Cookies and Similar Data Technologies

Like most online platforms, we employ cookies, web beacons, and analogous technologies. Cookies are small text files saved on your hard drive or device memory. They store information about your usage of our services, aiding in functions such as user authentication, remembering your preferences and configurations, analyzing traffic and usage behaviors, assessing ad campaign performance, and enabling social features. Web beacons are small software components placed on web pages or within emails, helping us gauge your engagement with that content.

Most web browsers accept cookies automatically. You may typically adjust your browser preferences to delete or reject browser cookies if you wish. However, please be aware that doing so might impact the availability and performance of our services.

We utilize third-party analytics tools to monitor traffic and usage patterns for our services. These tools collect data transmitted by your device or our services, including the pages you visit, extensions you use, and other information that helps us enhance our offerings. This analytics data is aggregated with similar data from other users in a manner that does not reasonably identify any specific individual.

We collaborate with third-party advertising partners to display ads across the internet and other media. To evaluate ad performance and determine compensation for these partners, we incorporate third-party modules into our applications. Additionally, we may include such modules to gain deeper insights into how users interact with our services.

How Long We Keep Your Personal Information

We hold onto your personal data for a period of 48 months. We may retain and utilize your information as necessary to satisfy legal obligations (for instance, adhering to applicable laws), address disputes, and enforce our agreements and policies.

We also keep Usage Data for internal analytical purposes. This category of data is generally retained for a briefer period, unless it is required for strengthening security, enhancing our Service performance, or if legal requirements demand a longer retention period.

Data Sharing

We do not sell or lease your personal data to outside parties. The SDKs referenced above only share data with their respective providers for the stated purposes, and we contractually obligate them to handle data in compliance with relevant privacy regulations.

How We Share Your Information

Lavish Food does not sell, lease, or exchange your personal information with any third party. We disclose personal information only when it is essential to deliver the services you have requested, operate and sustain FilmNova, handle transactions, comply with applicable laws, or defend our legal rights and the integrity.

Third-Party Service Providers

To deliver the essential features of FilmNova, we collaborate with a number of rigorously vetted external service providers. These partners assist with functions such as user verification, payment transaction handling, data analytics, installation source tracking, cloud hosting, fraud detection, and application performance oversight.

Depending on which features you utilize, these providers may process certain limited types of information, including:

Each third-party provider processes personal information solely for the purpose of delivering the services they perform on our behalf and in accordance with their own privacy policies and applicable data protection laws. We do not authorize our service providers to use your personal information for their own independent advertising or marketing purposes.

AI Content Processing

When you choose to upload photos, videos, or other media for AI-driven processing, your content is utilized exclusively to produce the outputs you have requested.

Your uploaded materials are never sold, sublicensed, or distributed to outside parties for promotional, behavioral analysis, or general AI model training purposes. Media files are handled solely for the specific service you have requested and are automatically removed in accordance with the retention schedule set out in this Privacy Policy.

Legal Disclosure

We may disclose your personal information only when we believe such disclosure is necessary to:

Business Transfers

Should FilmNova or Lavish Food become party to a merger, acquisition, corporate restructuring, financing arrangement, asset sale, or comparable business dealing, your personal data may be transferred as part of that transaction.

Under such circumstances, the acquiring entity will be obligated to safeguard your personal information under privacy standards that are materially equivalent to those outlined in this Privacy Policy and in compliance with relevant data protection legislation.

Data Security and Protection Measures

We treat the security of your personal information with the utmost seriousness. To defend against unauthorized access, disclosure, or other potential threats, we have put in place reasonable physical, electronic, and organizational protections for data gathered through your use of our Platform services. We are committed to making every reasonable effort to secure your information.

Our security protocols are regularly assessed and revised as necessary to keep pace with business evolution, technological advancements, and legal mandates. These measures encompass, but are not limited to, technical and organizational security frameworks, access control mechanisms, and staff training initiatives.

While we place strong emphasis on data protection, please recognize that no method of transmission over the internet or electronic storage is completely foolproof. Although we endeavor to safeguard your personal information using industry-standard approaches, absolute security cannot be assured.

Should we become aware of a security incident affecting your personal information, we will provide notification as required by applicable law. By using the Platform, you consent to receive such notifications in electronic form.

Your Privacy Rights

If you would like more information about your legal entitlements under relevant regulations or wish to exercise any of them, please don't hesitate to reach out using the contact information found in the "How to Contact Us" section below. Depending on the laws applicable in your region, you may be entitled to request that we:

  1. Grant you access to, or furnish a copy of, certain personal data we hold about you.
  2. Cease using your data for direct marketing purposes, including any marketing efforts based on profiling.
  3. Rectify any outdated or inaccurate information we possess about you.
  4. Delete specific data we maintain concerning you.
  5. Restrict how we process or disclose certain information relating to you.
  6. Facilitate the transfer of your information to another third-party service provider.
  7. Revoke any prior consent you provided regarding the handling of your data.

We will assess all requests and respond within the period prescribed by applicable law. Please note that in certain circumstances, some information may not be subject to such requests—for example, if we must continue processing your data to safeguard our legitimate interests or to fulfill legal obligations. Before acting on your request, we may ask you to provide reasonable information to confirm your identity.

Privacy Protections for Minors

Our services are not intended for individuals under 18 years old (referred to as "minors"). We do not willfully collect personally identifiable information from anyone below that age. If you are a parent or legal guardian and become aware that your child has provided us with Personal Data, please contact us. Upon discovering that such information has been gathered without verified parental consent, we will take appropriate measures to remove it from our systems.

Rights Under CCPA, VCDPA, GDPR, and LGPD

We comply with the privacy standards established by California (CCPA), Virginia (VCDPA), the European Union (GDPR), and Brazil (LGPD). For users located within these jurisdictions, applicable laws afford you rights such as accessing, correcting, deleting, or objecting to the processing of your personal data. To exercise any of these rights, please contact our support team for assistance.

Legal Grounds for Processing Your Data

We handle your personal information in accordance with relevant data protection regulations, including the General Data Protection Regulation (GDPR). Depending on the particular purpose of processing, we rely on one or more of the following legal justifications:

  1. Legitimate Interests – We may process certain non-sensitive data to pursue our legitimate interests, which include: Enhancing the performance and user experience of our applications. Maintaining the security and reliability of our apps and services. Studying app usage patterns to better inform future development. When relying on legitimate interests, we carefully weigh our interests against your rights and freedoms.
  2. Legal Obligations – In certain situations, we are required to process your data to meet legal obligations, such as complying with applicable financial, tax, or regulatory requirements.
  3. Vital Interests – In exceptional circumstances, we may process your data to protect your vital interests or those of another person — for example, in response to a security incident affecting an application.

Right to Lodge a Complaint

If you believe that our handling of your personal data infringes upon applicable data protection legislation or your rights under such laws, you are entitled to submit a complaint to a supervisory authority. This right applies, for instance, to EU residents under the General Data Protection Regulation (GDPR), as well as under other local data protection laws that may be relevant in your area.

Where to Submit a Complaint

If you wish to file a complaint, you may reach out to the appropriate data protection authority in your country. Their contact information is generally accessible through their official websites. Alternatively, you may contact us directly for additional guidance.

Internal Resolution First

Before proceeding to a formal complaint, we kindly ask that you reach out to us so that we may make every reasonable effort to resolve your concerns. You may contact our Data Protection Officer (DPO) or email us at sunilc639@gmail.com.

Data Controller Information

For the purposes of relevant data protection regulations, the data controller responsible for handling personal information collected via FilmNova is Lavish Food. Lavish Food establishes the purposes and methods of processing personal data and bears responsibility for ensuring compliance with applicable privacy laws. For any privacy-related inquiries, please contact us at sunilc639@gmail.com.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our privacy practices. The DPO can be contacted as follows:

Updates to This Privacy Policy

We may update our Privacy Policy on occasion. We recommend that you check this page from time to time to stay informed of any modifications. When we make changes, we will publish the updated policy on this page. All revisions become effective as soon as they are posted.

Get in Touch

Should you have any questions, concerns, or suggestions about our Privacy Policy, please feel free to reach out to us at sunilc639@gmail.com.