Back

Privacy Policy for ReMotion

Last Updated: December 31, 2025

1. Introduction

SIA ByteMind ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ReMotion mobile application (the "App"), backend services, and related services (collectively, the "Service").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.

2. Company Information

Data Controller: SIA ByteMind

Registered Country: Latvia

Contact Email: info@bytemind.lv

Website: https://remotionapp.com

3. Information We Collect

3.1 Information You Provide

Account Information:

  • User ID (generated by RevenueCat or provided by you)
  • Subscription status and purchase history

Content You Upload:

  • Photographs and images you select for animation
  • Videos you create using the App
  • Text overlays and customizations you add to videos

Usage Information:

  • Project titles and settings
  • Aspect ratio preferences
  • Music selections
  • Animation presets and preferences

3.2 Information Collected Automatically

Device Information:

  • Device type and model
  • Operating system version
  • Unique device identifiers
  • App version

Usage Data:

  • Features you use within the App
  • Time spent in the App
  • Error logs and crash reports
  • Performance metrics

Analytics Data:

  • App usage patterns
  • Feature interactions
  • User journey data
  • Conversion events (subscriptions, exports)

3.3 Information from Third Parties

Apple App Store:

  • Purchase and subscription information
  • Transaction history
  • Subscription status

RevenueCat:

  • App User ID
  • Subscription status and entitlements
  • Purchase verification data

Photo Library (with your permission):

  • Photos you select from your device
  • Photo metadata (when you grant access)

3.4 Backend-Collected Information

API Request Data:

  • App User ID transmitted with each API request
  • Request timestamps and identifiers
  • API endpoint accessed
  • Request metadata (user agent, IP address for rate limiting)

Backend Processing Data:

  • Image data transmitted to backend servers for AI processing
  • Animation job IDs and status
  • Credit transaction logs
  • Error logs and processing failures

Server-Side Analytics:

  • API usage patterns and frequency
  • Credit allocation and spending patterns
  • Job processing times and success rates
  • Rate limit violations and abuse prevention data

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Service Provision

  • Process and generate animated videos from your photographs
  • Store your projects and content
  • Manage your subscription and credit allocation
  • Provide customer support
  • Process API requests and manage backend services
  • Allocate and track credits server-side
  • Verify subscription status through RevenueCat REST API

4.2 Service Improvement

  • Analyze usage patterns to improve the App
  • Fix bugs and technical issues
  • Develop new features
  • Optimize performance
  • Monitor backend service performance and reliability
  • Analyze API usage to optimize backend infrastructure

4.3 Communication

  • Send you important updates about the Service
  • Respond to your inquiries and support requests
  • Notify you about changes to our Terms or Privacy Policy

4.4 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests and court orders
  • Protect our rights and prevent fraud

4.5 Analytics

  • Understand how users interact with the App
  • Measure the effectiveness of features
  • Improve user experience
  • Monitor backend service health and performance

4.6 Backend Operations

  • Process AI animation generation requests through third-party providers
  • Manage credit allocation and monthly capacity limits
  • Enforce rate limiting and abuse prevention
  • Log API requests for debugging and service improvement
  • Store temporary image data for processing

5. Data Storage and Security

5.1 Data Storage

  • Your photographs and videos are stored on your device and on our servers
  • Project data is stored locally on your device using SwiftData
  • Generated videos are stored locally on your device
  • We retain your data for as long as necessary to provide the Service

5.2 Backend Data Storage

Server Infrastructure:

Backend services are hosted on Vercel's serverless infrastructure.

Data is stored across multiple third-party services:

  • Upstash Redis: Credit balances, usage data, rate limiting data, monthly capacity tracking
  • Vercel Blob Storage: Temporary image storage during processing
  • Third-Party AI Providers (Replicate, Fal.ai): Temporary image and video storage during processing

Data Types Stored on Backend:

  • App User IDs (from RevenueCat)
  • Credit balances and transaction history
  • Monthly capacity usage data
  • Rate limiting data (IP addresses for abuse prevention)
  • API request logs (for debugging and service improvement)
  • Temporary image data (deleted after processing)
  • Job status and processing metadata

Data Retention on Backend:

  • Credit balances: Retained while account is active
  • Usage logs: Retained for service operation and debugging
  • Temporary images: Deleted immediately after processing completion
  • API logs: Retained for a limited period for debugging purposes
  • Monthly capacity data: Retained per month for capacity management

5.3 Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit (HTTPS)
  • Secure storage of data on our servers
  • Access controls and authentication
  • Regular security assessments

Backend Security Measures:

  • API authentication using secure tokens
  • Rate limiting to prevent abuse and DDoS attacks
  • Encrypted API communications (HTTPS/TLS)
  • Secure credential storage (environment variables)
  • Access controls on backend infrastructure
  • Regular security updates and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5.4 Data Retention

  • We retain your account information while your account is active
  • We retain your projects and content as long as they are stored in the App
  • We may retain certain information for legal, regulatory, or business purposes
  • You can delete your projects and content at any time through the App

Backend Data Retention:

  • Credit balances: Retained while subscription is active
  • API request logs: Retained for up to 90 days for debugging
  • Temporary processing data: Deleted immediately after processing
  • Monthly capacity data: Retained per month, reset at month end
  • Error logs: Retained for up to 30 days

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

6.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

  • RevenueCat: Subscription management and payment processing
  • Apple: App Store transactions and subscription management
  • Backend Services: AI animation processing and credit management
  • Analytics Providers: Usage analytics and crash reporting

Backend Service Providers:

  • Vercel: Hosting and serverless infrastructure
  • Upstash Redis: Data storage (credits, usage, rate limiting)
  • Replicate: AI-powered animation generation
  • Fal.ai: Alternative AI-powered animation generation
  • RevenueCat REST API: Subscription verification and status
  • Vercel Blob Storage: Temporary image storage

6.2 Data Transmission to Third Parties

AI Processing:

  • Your images are transmitted to third-party AI providers (Replicate, Fal.ai) for processing
  • Images are sent to these providers' servers for animation generation
  • Generated videos are stored on AI providers' CDNs and accessible via URLs
  • AI providers may temporarily store your images during processing

Subscription Verification:

  • Your App User ID is transmitted to RevenueCat REST API for subscription verification
  • RevenueCat returns subscription status and entitlement information
  • This data is used to allocate credits and manage access

6.3 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders or legal processes
  • Government requests
  • Enforcement of our Terms of Service
  • Protection of our rights and property

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6.5 With Your Consent

We may share your information with your explicit consent or at your direction.

7. Third-Party Services

7.1 Apple App Store

  • Your purchases and subscriptions are processed through Apple's App Store
  • Apple collects payment information and processes transactions
  • Your use of the App Store is subject to Apple's Privacy Policy

7.2 RevenueCat

  • RevenueCat manages subscription status and entitlements
  • RevenueCat collects your App User ID and subscription data
  • Your use of RevenueCat services is subject to RevenueCat's Privacy Policy
  • We use RevenueCat REST API to verify subscription status server-side

7.3 AI Processing Services

Your photographs are processed by third-party AI services to generate animations:

  • Images are transmitted to our backend servers for processing
  • Backend servers forward images to AI providers (Replicate, Fal.ai) for processing
  • Processed videos are returned to your device

AI Provider Data Handling:

  • Replicate: Processes images on their servers, stores temporary data during processing
  • Fal.ai: Processes images on their servers, stores temporary data during processing
  • Both providers store generated videos on their CDNs
  • Your use of these services is subject to their respective Privacy Policies

7.4 Backend Infrastructure Providers

Vercel:

  • Hosts our backend services and serverless functions
  • Processes API requests and manages server infrastructure
  • May log request metadata for service operation
  • Your use of Vercel-hosted services is subject to Vercel's Privacy Policy

Upstash Redis:

  • Stores credit balances, usage data, and rate limiting information
  • Data is encrypted in transit and at rest
  • Your use of Upstash services is subject to Upstash's Privacy Policy

Vercel Blob Storage:

  • Temporarily stores images during processing
  • Images are deleted after processing completion
  • Your use of Vercel Blob Storage is subject to Vercel's Privacy Policy

8. Photo Library Access

8.1 Permission Required

  • The App requires access to your photo library to select photographs for animation
  • You can grant or revoke this permission at any time through your device settings

8.2 How We Use Photos

  • Photos you select are copied to the App's local storage
  • Selected photos are transmitted to our servers for AI processing
  • Original photos remain in your photo library and are not modified
  • We do not access photos you do not explicitly select

8.3 Backend Photo Processing

Image Transmission:

  • Selected photos are converted to base64 format and transmitted to backend APIs
  • Images are sent via HTTPS to our backend servers
  • Images are temporarily stored on Vercel Blob Storage during processing

AI Processing:

  • Images are forwarded from our backend to AI providers (Replicate, Fal.ai)
  • AI providers process images on their servers to generate animations
  • Processed videos are stored on AI provider CDNs

Image Deletion:

  • Images are deleted from Vercel Blob Storage immediately after processing
  • We do not permanently store your images on our servers
  • AI providers may retain images temporarily during processing (subject to their policies)

8.4 Photo Storage

  • Selected photos are stored locally on your device
  • Processed images may be cached on our servers temporarily
  • You can delete photos from projects at any time

9. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Your Rights and Choices

10.1 Access and Correction

  • You can access and update your account information through the App
  • You can view and manage your projects and content
  • You can update your subscription preferences
  • You can request access to backend-stored data by contacting us

10.2 Data Deletion

  • You can delete individual projects and content through the App
  • Deleting a project removes associated images and videos from your device
  • You can request deletion of your account by contacting us

Backend Data Deletion:

  • Upon account deletion request, we will delete:
    • Credit balances and transaction history
    • API usage logs associated with your account
    • Any temporary data stored on backend servers
  • Note: Some data may be retained in backups for a limited period
  • Data stored by third-party providers (Replicate, Fal.ai) is subject to their deletion policies

10.3 Subscription Management

  • You can manage your subscription through your Apple ID account settings
  • Cancelling your subscription stops automatic renewal
  • You retain access until the end of your paid period
  • Backend systems automatically update credit allocation based on subscription status

10.4 Photo Library Access

  • You can revoke photo library access through your device settings
  • Revoking access may limit certain App features

10.5 Analytics Opt-Out

  • You can opt out of analytics tracking through your device settings
  • Some analytics may be necessary for App functionality
  • Backend API logging is necessary for service operation and cannot be opted out

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries.

Backend Data Transfers:

  • Backend services are hosted on Vercel (global infrastructure)
  • Data may be processed in multiple countries where Vercel operates
  • AI providers (Replicate, Fal.ai) may process data in various countries
  • Upstash Redis data may be stored in regions outside your country
  • RevenueCat processes data in accordance with their global operations

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. European Economic Area (EEA) Users

If you are located in the EEA, you have certain rights under the General Data Protection Regulation (GDPR):

12.1 Your Rights

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data
  • Right to Object: Object to processing of your data
  • Right to Withdraw Consent: Withdraw consent at any time

Backend Data Rights:

  • You can request access to backend-stored data (credit balances, usage logs)
  • You can request deletion of backend data associated with your account
  • You can request correction of inaccurate backend data
  • Data portability includes backend-stored credit and usage information

12.2 Exercising Your Rights

To exercise these rights, please contact us at info@bytemind.lv. We will respond to your request within 30 days.

12.3 Legal Basis for Processing

We process your personal data based on:

  • Consent: When you provide explicit consent
  • Contract Performance: To provide the Service you requested
  • Legitimate Interests: To improve the Service and prevent fraud
  • Legal Obligations: To comply with applicable laws

Backend Processing Legal Basis:

  • Contract Performance: Processing images and managing credits to provide the Service
  • Legitimate Interests: API logging, abuse prevention, service improvement
  • Legal Obligations: Data retention for legal and regulatory compliance

13. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):

13.1 Your Rights

  • Right to Know: Request information about data collection and sharing
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

13.2 Exercising Your Rights

To exercise these rights, please contact us at info@bytemind.lv.

Backend Data Rights (CCPA):

  • You can request information about backend data collection and storage
  • You can request deletion of backend-stored personal information
  • We do not sell backend data to third parties

14. Cookies and Tracking Technologies

The App may use cookies and similar tracking technologies to:

  • Remember your preferences
  • Analyze App usage
  • Improve user experience

You can control cookie preferences through your device settings, though this may affect App functionality.

Backend Tracking:

  • Backend services use request identifiers and logging for service operation
  • IP addresses are used for rate limiting and abuse prevention
  • API request metadata is logged for debugging and service improvement
  • These tracking mechanisms are necessary for service operation

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated Privacy Policy in the App
  • Updating the "Last Updated" date
  • Sending a notification through the App (if applicable)

Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using the App.

16. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

  • Notify you as soon as practicable
  • Provide information about the nature of the breach
  • Explain steps we are taking to address the breach
  • Advise you on steps you can take to protect yourself

Backend Data Breach:

In the event of a backend security breach, we will:

  • Notify affected users promptly
  • Disclose what data may have been compromised
  • Take immediate steps to secure backend systems
  • Work with third-party providers to address any breaches in their systems

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

SIA ByteMind

Email: info@bytemind.lv

Website: https://remotionapp.com

We will respond to your inquiry within a reasonable timeframe.

18. Data Protection Officer

For users in the EEA, if you have concerns about how we handle your personal data, you may also contact your local data protection authority.

19. Specific Data Practices

19.1 Photograph Processing

  • Photographs you select are processed on our servers using AI technology
  • Processed images are temporarily stored during animation generation
  • Original photographs are not modified or permanently stored on our servers
  • Generated videos are stored locally on your device

Backend Photograph Processing:

  • Images are transmitted to backend servers via HTTPS
  • Images are temporarily stored on Vercel Blob Storage
  • Backend servers forward images to AI providers (Replicate, Fal.ai)
  • AI providers process images on their infrastructure
  • Processed videos are stored on AI provider CDNs
  • Images are deleted from our servers immediately after processing

19.2 Subscription Data

  • Subscription information is managed by RevenueCat and Apple
  • We receive subscription status and entitlement information
  • Payment information is processed by Apple and not shared with us
  • We use subscription data to allocate credits and manage access

Backend Subscription Verification:

  • Backend servers query RevenueCat REST API using your App User ID
  • RevenueCat returns subscription status and entitlement information
  • This data is used server-side to allocate monthly credits
  • Subscription status is cached and verified periodically
  • No payment information is transmitted to or stored on our backend

19.3 Credit System

  • Credit balance and usage are tracked and stored
  • Credit allocation is linked to your subscription status
  • Credit usage data is used to manage monthly capacity limits

Backend Credit Management:

  • Credit balances are stored in Upstash Redis using your App User ID
  • Credit transactions are logged server-side for audit purposes
  • Monthly capacity limits are tracked per month in Redis
  • Credit allocation is performed atomically to prevent race conditions
  • Credit spending is verified server-side before AI processing begins
  • Daily spending limits are enforced on backend servers

19.4 Analytics

  • We use analytics to understand App usage and improve features
  • Analytics data is aggregated and anonymized where possible
  • Individual user behavior may be tracked for service improvement

Backend Analytics:

  • API request logs are collected for service operation and debugging
  • Request patterns are analyzed to optimize backend performance
  • Error rates and processing times are monitored
  • Rate limit violations are logged for abuse prevention
  • Credit usage patterns are analyzed to manage capacity

19.5 API Request Data

Data Collected:

  • App User ID (from RevenueCat)
  • Request timestamps
  • API endpoints accessed
  • Request metadata (for rate limiting and abuse prevention)
  • IP addresses (for rate limiting, not stored long-term)

How It's Used:

  • Process API requests and provide services
  • Enforce rate limiting and prevent abuse
  • Debug service issues
  • Monitor service performance
  • Improve backend infrastructure

Data Retention:

  • API request logs: Up to 90 days
  • Rate limiting data: Real-time, not stored long-term
  • Error logs: Up to 30 days

19.6 Third-Party Data Sharing

Data Shared with AI Providers:

  • Images you select for animation
  • Animation parameters (preset, duration, aspect ratio)
  • Your images are processed on AI provider servers
  • Generated videos are stored on AI provider CDNs

Data Shared with RevenueCat:

  • App User ID (for subscription verification)
  • No payment or personal information is shared

Data Shared with Infrastructure Providers:

  • Vercel: API request data, server logs, temporary image storage
  • Upstash: Credit balances, usage data, rate limiting data
  • All data sharing is necessary for service provision

20. Consent and Withdrawal

By using the App, you consent to the collection and use of your information as described in this Privacy Policy. You may withdraw your consent at any time by:

  • Deleting the App
  • Cancelling your subscription
  • Contacting us to request data deletion

Backend Data Consent:

  • By using the App, you consent to backend data processing as described
  • Backend processing is necessary for service provision
  • Withdrawing consent may affect your ability to use the Service
  • You can request deletion of backend data at any time

Please note that withdrawing consent may affect your ability to use the App.

By using ReMotion, you acknowledge that you have read, understood, and agree to this Privacy Policy.