This Privacy Policy explains what personal data the Caruvo mobile application and the caruvo.app website collect, how it is used, and the choices you have. The service is operated by Yevhen Stryzh (individual, Ukraine) — "Caruvo", "we", "us".
Data controller: Yevhen Stryzh, an individual operating under the laws of Ukraine.
Contact: [email protected].
Account data. Your email address, or the identifier provided when you sign in with Apple or Google. We do not receive your passwords from these providers.
Content you provide. Product photos and other reference images, your own video clips, brand assets (logo, colors), text briefs and descriptions, and transcripts of voice dictation you choose to use. Voice dictation is performed on your device by the operating system; we receive only the resulting text.
Generated content. The carousels, videos, voiceovers and music generated for you, and the settings used to create them.
Device data. Push notification token, device language, app version and platform — used to deliver notifications in your language and to operate the app.
Usage and diagnostics. We use Google Firebase Analytics (feature usage events, e.g. "generation started") and Firebase Crashlytics (crash reports) to understand product usage and fix defects. These tools collect device identifiers and technical data as described in Google's documentation.
Credits and transaction records. Your credit balance, charges, refunds and purchase records.
To provide the service: generate content from your inputs, store your creations, and deliver them to you.
To operate the product: send push notifications (e.g. "your video is ready") in your device language, provide support, maintain your credit balance.
To keep the service safe: prevent abuse, enforce our Terms, protect against fraud.
To improve the product: aggregated analytics about how features are used.
To comply with legal obligations, including accounting and record-keeping.
Caruvo is an AI product. To generate your content, your inputs (photos, briefs, reference materials) are transmitted to third-party AI providers (image, video, voice and music generation models, and large language models) for the duration of processing. These providers process the data on our instructions to produce your result; we select providers that do not claim ownership of your inputs.
Infrastructure processors we use: Supabase (database, file storage and authentication; EU region), Vercel (backend hosting), Google Cloud (video rendering infrastructure), Google Firebase (analytics and crash reporting), Expo (push notification delivery), and Apple (app distribution and in-app purchase processing).
We do not sell your personal data.
Performance of a contract (providing the service you signed up for); legitimate interests (product analytics, abuse prevention, service communications); consent where required (you can withdraw it at any time); and compliance with legal obligations.
Account data and your content are kept while your account is active. You can delete individual creations at any time in the app.
When you delete your account, your profile, uploaded files and generated content are deleted. We retain transaction, billing and audit records (e.g. generation charges, refunds, consent records) for as long as the law requires — these no longer identify you beyond what the legal obligation demands.
Backup copies are purged within 30 days.
Analytics and crash data are retained per Google Firebase retention settings.
You may access, correct, export or delete your data, object to or restrict certain processing, and lodge a complaint with a supervisory authority.
In the app: Settings → Export data, and Settings → Delete account. See also our Data Deletion page.
Or email us at [email protected] — we respond within 30 days.
The service is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
Our processors may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
Data is transmitted over encrypted connections and stored with access controls. No system is perfectly secure; we work to protect your data proportionately to the risk.
We may update this policy. Material changes are announced in the app, and you may be asked to review the updated documents. The current version and its effective date are always available at caruvo.app/privacy.
Yevhen Stryzh — [email protected].