Privacy Policy

Last updated: 6 November 2026

1. Controller

Frenk Development UG (haftungsbeschränkt), Kastanienallee 21, 10435 Berlin, Germany. Managing director: Andreas Frenk. Email: info@garuda-development.com. Our apps are published under the name Garuda Development.

2. This website

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, the hosting provider processes technical data such as your IP address, date and time, requested page and browser type in server logs to deliver the site and keep it secure (Art. 6(1)(f) GDPR). We do not use cookies, analytics or tracking on this website. Vercel may transfer data to the USA based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

3. The Imagine AI app

The app lets you create images and videos with AI. We process the following data to provide the service (Art. 6(1)(b) GDPR):

• Account data: an account ID and, if you sign in with Apple or Google, the email address and name that provider shares with us. Without signing in, an anonymous account ID is used.
• Content you provide: text prompts, photos and video clips you select or capture with the camera, and the images and videos generated from them, plus your stories and figures.
• Credits and purchases: your credit balance, streak and activity needed to run the app. Purchases are handled by Apple or Google and RevenueCat; we do not receive your payment details.
• Device data: a push notification token if you allow notifications, and basic technical data needed for app security.
• Reports: if you report a result or a story scene, we store the report, its reason, and a copy of the reported prompt or text so we can review it (Art. 6(1)(f) GDPR, our interest in keeping the app free of harmful content).

4. AI processing

To generate results, your prompts and photos or clips are sent to third-party AI providers (currently fal.ai) that run the models on our behalf. They process the content only to create your result. Generated content may be inaccurate or unexpected. Please do not upload photos of other people without their permission, and do not upload sensitive or illegal content.

5. Crash reports and usage statistics

Crash reports. If the app crashes, Firebase Crashlytics (Google) receives a technical report: the error and where it happened, the app version, your device model, operating system version, free memory and an anonymous installation ID. It contains no prompts, photos or names. We use it to find and fix errors (Art. 6(1)(f) GDPR). It is switched on in the released app.

Usage statistics. Google Analytics for Firebase can count which features are used (for example that a picture was created, which model was chosen, that the subscription screen was opened) with an anonymous app instance ID. This is off by default. It is only used if you switch on "Share usage statistics" in the app settings (Art. 6(1)(a) GDPR and section 25 TDDDG). You can switch it off again at any time in the same place, which stops further collection. We do not use the advertising ID, we do not track you across other apps or websites, and we never put your prompts or other personal text into these statistics.

6. Service providers

We use Google Firebase (authentication, database, file storage, cloud functions, push messages, app integrity checks, crash reports and, with your consent, usage statistics; servers mainly in the EU), RevenueCat (subscription and purchase management), Apple and Google (sign-in, app stores, payments) and fal.ai (AI generation). Some providers may process data outside the EU, based on Standard Contractual Clauses or the EU-US Data Privacy Framework.

7. Camera, microphone and photos

The app asks for access to your camera, microphone and photo library only when you choose to capture or select content. You can revoke access in your device settings.

8. Storage, retention and deletion

We keep your data while your account exists. You can delete your account in the app settings, which removes your account data and content from our systems. How long the rest is kept:

• Your content (prompts, pictures, videos, stories, figures) and credit history: until you delete the content or your account.
• Push notification token: until you turn notifications off, sign out, delete your account, or the token stops working.
• Server logs of the app backend (technical events, no content): 30 days.
• Reports of content: as long as needed to review them, at most 12 months.
• Crash reports: 90 days at Firebase Crashlytics.
• Usage statistics (only if you switched them on): 2 months at Google Analytics for Firebase.
• AI provider (fal.ai): the prompts, photos and results of a request may be kept by fal.ai for up to 30 days (its default), and result files on its content network until they expire, then they are deleted.
• Purchases: Apple or Google keep the payment records. RevenueCat keeps your subscription and purchase history to manage your access, and deletes it on request. Records we must keep by law (for example for tax purposes) are kept for the legal period.

Backups and caches are overwritten or expire after a short time. You can ask us at any time to delete your data earlier (see "Your rights").

9. Children

The app is not directed at children under 16. Please do not use it without parental consent if you are younger.

10. Your rights

You have the right to access, correct, delete and restrict processing of your data, to data portability and to object (Art. 15-21 GDPR). To exercise these rights, email us. You can also lodge a complaint with a data protection authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

11. Changes

We may update this policy when the app or the law changes. The current version is always available on this page.