Privacy Policy

ActivArt ("we", "us", "our") is built to keep activity data and ordinary video rendering on your device, and to send only the inputs needed when you explicitly request AI processing. This policy explains what is accessed, where it goes, and how temporary media is removed.

1. What We Access

• Activity data: activity name, start time, duration, distance, and (where available) route, elevation, pace, and other workout statistics from a connected activity source or a FIT activity file you explicitly select. Used only to identify the time window for photo matching and to render in-app statistics and videos on your device. FIT files and imported activity values are processed and stored locally on your device and are not uploaded to ActivArt.
• Device photo gallery: photos whose capture timestamp falls within an activity's time window, plus any photo you add to an activity yourself, by importing it from your gallery, taking it in the app, or sharing it into ActivArt from another app. The app reads pixels only when you explicitly trigger photo processing.
• Account authentication: when you sign in with Google or Apple, we receive your email address. This is stored in our VPS database (encrypted with AES-256-GCM; a keyed hash is used as the lookup key so the plaintext is never exposed to SQL queries) and is used solely to identify your account for quota management and account deletion.
• Usage tracking: local and cloud-synced usage counts for AI image generations, AI video generations, stats overlays, custom logos, and on-device video generations, used to enforce free-tier allowances and Premium quotas. Linked to your account email but contains no other personal data.
• Subscription identifier: to manage ActivArt Premium and Custom Logos purchases, we use a randomly generated anonymous identifier (a UUID) as your purchase account ID. This identifier is never your Firebase UID or your email address.
• Promotional codes: an offer link may carry a plaintext code in its URL fragment. Browser fragments are not sent to our server, and the Redeem page removes the fragment from the address bar after reading it. When you apply the code from your signed-in account, we send it in an authenticated request, then store only a one-way keyed hash and a redemption record linked to your keyed email hash and anonymous purchase account ID. We retain the campaign benefit, status, timestamps, and expiry so we can enforce redemption limits, restore access classification, and prevent repeat use. The plaintext code is not stored.
• Logo overlays: custom logo images and their positions, stored securely in the app's local private storage. Never transmitted to our servers.
• Support inquiries: when you use our contact form, we collect your name, email address, and message content to respond to your request. This data is used solely for support.

2. What We Do NOT Collect

• We do not collect your name or any personal identifiers beyond your email address (required for account authentication) and what you explicitly provide via the support form.
• We do not keep your photos as a permanent ActivArt library. Image-generation inputs are discarded after processing. For AI video generation, the selected original or generated photo is held temporarily in private object storage while a durable job runs, then deleted when the job reaches a final state.
• We do not store your account credentials, only short-lived OAuth tokens or platform-provided health access.
• We do not use advertising SDKs or track your location.

3. Third-Party Services

ActivArt integrates with official APIs from Intervals.icu, Strava, Apple (Apple Health, sign-in with Apple), and Google (Health Connect, Firebase, sign-in with Google). Subscription and one-time-purchase management and requested AI processing are handled by specialist service providers and ActivArt-operated processing infrastructure. The minimum source image and server-owned prompt needed for a requested generation are sent to the selected processor; routing is based on verified account access and is not chosen by the app. Usage data collected by third-party services is handled in accordance with their respective privacy policies.

4. AI Photo Processing

When you apply an AI effect to an existing photo (image-to-image), your photo is transmitted securely for processing. The image is used solely to generate the result and is not retained or stored after generation completes. When generating a brand-new image from your activity type (text-to-image), no photo data is sent at all, only a text prompt describing your activity and style preferences. If you enable the statistics overlay, selected activity figures (such as distance and time) are included as text in that prompt so the AI can render them into the image.

Your photos and your activity data are used only to produce the specific result you request. They are never used to train, fine-tune, or otherwise improve any artificial intelligence or machine learning model, ours or a third party's. In particular, we do not use data obtained through the Strava API to train AI or ML models.

Finished AI images include machine-readable XMP provenance metadata identifying the AI origin category and ActivArt as the creating tool. This marker is not drawn visibly into the image pixels. It does not contain your name, email address, prompt, activity statistics, location, or other account identifiers. Location and capture-time EXIF data are handled separately as described above.

4a. Video Generation (On-Device)

GPS-route and elevation-profile videos are rendered entirely on your device. No video data, and no constituent photos used in the video, is uploaded during video generation. The finished MP4 lives only on your device until you choose to share it.

4b. AI Video Generation

When you choose to animate a selected original or generated photo, the image and a description of your selected style, effects, activity controls, and statistics are securely uploaded to create a short video using hosted or ActivArt-operated AI processing. The model may generate audio. ActivArt validates and post-processes the result, adds signed provenance metadata, and makes the private result available to your authenticated account for up to 24 hours so an interrupted download can resume.

The temporary source is deleted after the job finishes. Final private media and expired job media are deleted after the recovery period, with object-storage lifecycle rules as a backstop. Account deletion also removes your linked job records and media keys. AI video inputs and outputs are not used to train models by ActivArt.

5. Data Retention

All core app data (tokens, style preferences, custom logos) is stored locally on your device. Deleting the app removes this data. Subscription usage counts, durable AI-video job status, and promotional-code redemption records sync to our VPS and are retained while your account is active. AI-video media is temporary as described in Section 4b. When you delete your account, your user-linked job, redemption, and other account data are permanently removed from our servers after a 30-day grace period (see Section 6). Aggregate campaign configuration remains but no longer identifies your account.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right to erasure (Art. 17 GDPR): You can delete your account at any time via Settings → Account → Delete Account in the app, or via activart.app/account on the web. You will be signed out immediately. Your data is permanently deleted from our servers after a 30-day grace period. Signing back in within 30 days cancels the deletion and fully restores your account and quota.
• Email security: Your email address is stored encrypted (AES-256-GCM) on our servers. It is never stored in readable form in the database. A keyed HMAC-SHA256 hash is used for all lookups.
• Right to access / data portability: To request a copy of the data we hold about you, contact us at [email protected].
• Lawful basis: We process your email address on the basis of legitimate interest, specifically to enforce per-account AI generation quotas and prevent abuse.