Privacy Policy

1. Scope of Application and Service Description

1. Applicable scenarios: This Policy covers every situation in which you download, install, and use Quiver AI through Google Play, including free features (if any), paid in-app purchases (if any), AI image and video creation, and other App-related activities.
2. Product positioning: Quiver AI is an AI visual-creation tool for images and videos. You do not need photography, editing, or professional creative experience. By uploading local image materials and choosing a style, you can generate still images, videos, and other creative visual works through AI algorithms, giving everyday visuals a new look.
3. Account mechanism: The App has no registration, login, or account-binding features. You are not required to submit a phone number, email address, password, or other identity details. After you tick the box to accept this Privacy Policy and the Terms of Service, you may use all basic features.
4. Payment mechanism (if any): The App may offer paid in-app purchases. You may voluntarily buy add-on services such as exclusive creation entitlements, premium style templates, and high-definition export permissions. In-app purchase transaction data is used only for order verification, entitlement fulfillment, and after-sales support.

2. Data Controller and Data Protection Officer (DPO)

1. Data Controller: Thien An Technology Co., Ltd (together, “we,” “us,” or “our”) is the sole data controller for all personal-data processing connected with the App, and independently bears the related legal responsibilities under applicable law.
2. Registered Address: 607-609 Nguyen Kiem, Duc Nhuan Ward, Ho Chi Minh City, Vietnam
3. Official Contact Email: [email protected]
4. Data Protection Officer (DPO): You may contact the Data Protection Officer at the official email above about data compliance, privacy rights, and any data-processing matter. We will reply within the time limits required by applicable law.

3. Types of User Data We Collect and Purposes of Collection

We follow “minimum necessity” and “purpose limitation.” We collect only what is needed to deliver core App features, keep the service stable, improve the experience, and complete in-app purchases. We do not collect extra user data unrelated to those services. The categories and purposes are as follows.

(A) Device and App Information

1. Data collected: Device model, system version, unique device identifiers, App installation information, App running logs, network access status, device hardware parameters, and other basic device information read by the App.
2. Purposes: To ensure normal launch, operation, and feature compatibility; to diagnose crashes, lag, and similar issues; to improve compatibility and stability; to reduce security risks from malicious devices or abnormal operations; and to help protect users.

(B) Photo Library and External Storage Data

1. Data collected: After you grant permission, we may access image materials in the device photo library and visual media files on external storage. We only access content that you actively select and upload for AI creation. We do not privately read or scan other private files.
2. Purposes: This permission is needed for core services: uploading materials, generating AI images and videos, previewing works, and saving or exporting them locally.

(C) Service Interaction and Transaction Data

1. Data collected: Feature operation records, style-selection preferences, creation records, in-app purchase order information (if any), payment credentials or proof of purchase (if any), service-usage duration, and other interaction data.
2. Purposes: To record creation preferences so we can improve AI algorithms and styles; to make sure in-app entitlements take effect; to verify orders and handle after-sales questions; and to analyze usage for product iteration.

(D) User-Initiated Inquiry Data

1. Data collected: Message content and contact details you voluntarily send through the official email when reporting a problem or making a request.
2. Purposes: To respond accurately to inquiries, complaints, and rights requests, and to complete after-sales coordination.

4. Legal Bases for Data Processing

All personal-data processing is carried out under commonly recognized global compliance frameworks and applicable national laws. The core legal bases are:

1. Your explicit consent: Accepting this Privacy Policy, granting device permissions, uploading materials yourself, and starting an in-app purchase are the principal bases for most processing.
2. Necessity for contract performance: Processing is needed to perform the service agreement with you, deliver the App’s core creation services, and fulfill in-app purchase entitlements.
3. Legitimate interests: Without overriding your fundamental privacy rights, we may carry out reasonably necessary processing to keep the App secure, improve products and services, and prevent abuse or attacks.
4. Compliance with legal obligations: We process data as required to meet statutory duties, including data retention, preservation of transaction records, and compliance self-assessments.

5. Data Storage, Retention Periods, and Security

(A) Data Storage and Retention Periods

1. Material data: Creative materials you upload and AI-generated works are stored only on your local device. The cloud temporarily caches data solely for real-time AI creation. After creation is completed, cloud cache data is automatically cleared. We do not retain your original materials long-term.
2. Operational and transaction data: App running logs, interaction records, and in-app purchase order data are retained only for the period necessary for service continuation and compliance. After you uninstall the App or request deletion of data, we will thoroughly clear cloud-retained data within the time limits required by law.
3. Compliance retention data: Certain transaction and log data may be retained for the minimum statutory retention period required to meet legal, regulatory, and audit compliance obligations, and will be permanently destroyed upon expiration.

(B) Data Security Measures

We use industry-standard encryption technologies, secure transmission protocols, and cloud data isolation mechanisms to protect user data against leakage, alteration, loss, and unauthorized access. We also maintain internal data access controls so that only authorized personnel may access user data, and only when necessary for work purposes, to prevent internal misuse.

Users are responsible for safeguarding the security of their personal devices and App usage environments, properly managing device permissions, and avoiding privacy risks arising from device theft or leakage.

6. Data Sharing, Sale, and User Opt-Out Mechanisms

This section describes core data rights and is designed to align with GDPR, LGPD, CCPA, CPRA, VCDPA, and similar laws, so you retain control over your personal data.

(A) Data Sharing Rules

We do not share personal data without limit. We share data with compliant third parties only in the lawful situations below, and those parties have entered into confidentiality agreements and must follow global privacy laws:

1. Hosting and technology service providers: Partners that support App operation, AI computing capacity, and data storage. They receive only the minimum data needed to provide the service and may not use it for other purposes.
2. Payment and transaction service providers: Compliant payment institutions that process in-app purchases and order verification. They handle only transaction-related data and do not retain your creative materials or private content.
3. Legal and regulatory scenarios: Disclosure required by lawful instructions of judicial or regulatory authorities, or as needed to comply with laws, legal proceedings, or industry rules.

Except for the situations above, we will not share or disclose users’ personal data to any commercial entity or third-party organization.

(B) Data Sale Rules and User Opt-Out Rights

We strictly prohibit selling, renting, or trading users’ personal data in any form. We will not use personal information, creative materials, device information, usage records, or similar data for commercial sale or profit.

Where regional law treats certain activities as “data sharing” or “commercial transfer,” you may opt out and refuse at any time, without conditions, and may terminate all sharing and transfer of your personal data at any time.

(C) How to Opt Out of Data Sharing / Sale

You may exercise opt-out rights and stop data sharing through any of the following methods:

1. On-device actions: In phone system settings, disable the App’s access to the photo library, storage, and device-information permissions to immediately stop the corresponding collection and sharing. Uninstalling the App fully terminates local data collection and cloud synchronization.
2. Manual request: Email the official contact address ([email protected]) with the statement “Terminate Data Sharing / Opt Out of Data Transfer,” and include relevant device identifiers. We will complete verification within 15 business days and permanently terminate all sharing and transfer of that user’s data.

7. Region-Specific Privacy Rights for Global Users

The App is designed to accommodate privacy laws in multiple regions. Users in different places may have additional statutory rights. Exercising those rights is free of charge and without barriers, and you are not required to complete complex repeated identity verification.

1. Users in the European Union (GDPR): EU users have rights of access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and the right to lodge a complaint. You may at any time request to access, export, or delete all of your personal data, and may withdraw previously granted privacy consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before it was withdrawn.
2. Users in Brazil (LGPD): Brazilian users may inquire into processing details, correct inaccurate data, delete redundant data, and restrict the scope of processing. You have the right to complete information on purposes, retention periods, and third-party sharing, and may object to processing based on legitimate interests.
3. Users in California, United States (CCPA/CPRA): California users have rights to know, delete, and access data, and to opt out of the sale of personal data. You may request, free of charge, the categories of personal data we collect, the purposes of use, and the parties with whom data is shared. You may request complete deletion of personal-data records, permanently refuse any sale of personal data, and will not be discriminated against or have service entitlements restricted for exercising privacy rights.
4. Users in Virginia, United States (VCDPA): Virginia users may access, correct, and delete personal data; opt out of personalized processing and data sharing; obtain explanations related to automated decision-making; and not be subjected to discriminatory treatment in services.
5. Users in other regions: Users elsewhere may enjoy equivalent privacy-protection rights under locally applicable personal-data laws. We will adapt to the corresponding regional compliance requirements to protect your lawful interests.

8. Special Statement on In-App Purchase Data Processing

1. During in-app purchase transactions, we do not collect users’ bank card numbers, payment passwords, or other core payment privacy information. Payment processes are completed by official compliant payment service providers. We obtain only necessary transaction data such as order numbers, payment status, and entitlement activation status.
2. Transaction data is used only for entitlement verification, order after-sales support, and compliance bookkeeping. It will not be used for marketing push, third-party sharing, or commercial sale.
3. Users may request to inquire into or delete their personal in-app purchase transaction records at any time. We will respond promptly subject to compliance requirements.

9. Users’ Rights to Lodge Complaints with Supervisory Authorities

If you believe that our data-processing activities violate this Privacy Policy or applicable local privacy laws, or if you object to our privacy-handling results or after-sales responses, you have the statutory right to lodge a complaint or appeal with the local data-protection supervisory authority.

You may also first contact us through the official email. We will promptly handle user disputes, actively cooperate with investigations and verification by supervisory authorities, and fully remediate any non-compliant data-processing practices.

10. Updates to This Privacy Policy and Notice

We reserve the right to revise this Privacy Policy from time to time based on product-feature iterations, business adjustments, updates to laws and regulations, and changes in Google Play compliance requirements.

After an update, we will notify users through in-App pop-ups and/or page notices. The updated Policy takes effect as of the date of publication. Continued use of the App after a Policy update constitutes acceptance of the revised Privacy Policy. If you do not agree to the updated terms, you may immediately stop using the App and uninstall it.

11. Disclaimer

1. We assume no responsibility for data leakage caused by users’ own disclosure of personal data, users’ own authorization of third parties to obtain data, or illegal intrusion into users’ devices.
2. Changes to data-processing rules resulting from adjustments to laws, regulations, or regulatory policies, or from force majeure, do not constitute a violation by us.
3. All privacy risks and liabilities arising from minors’ use of the App by concealing their age shall be borne by the users and their guardians.