Privacy Policy

Last updated: March 26, 2026

1. Information We Collect

When you create an account or use TrueMoments, we collect the following categories of information:

Account information: Your full name, email address, and authentication credentials. If you sign in with Google, we receive your Google profile name and email address via OAuth.

Uploaded content: Photos you upload for animation. These are transmitted to our AI processing pipeline and handled as described in Section 3.

Usage data: Information about how you interact with the service, including animation history, credit balance, and feature usage.

Technical data: IP address, browser type, operating system, and device information collected automatically when you access the service.

2. How We Use Your Information

We use the information we collect to:

• Operate and provide the TrueMoments service, including processing your photos into animations.
• Manage your account, credit balance, and subscription status.
• Process payments securely through Stripe.
• Send transactional emails such as account confirmation, password reset, and payment receipts.
• Improve and develop the service by analysing aggregate usage patterns.
• Comply with legal obligations and enforce our Terms of Service.

Your uploaded photos are never used to train AI models. We do not sell your personal data or content to third parties for marketing or advertising purposes.

3. Photo Storage and Processing

When you submit a photo for animation, it is uploaded to our infrastructure and transmitted to fal.ai, our AI video generation partner, for processing. fal.ai processes the photo solely to produce the requested animation output.

Your original uploaded photo is not stored permanently after the animation is complete. Generated video outputs are stored temporarily to allow you to view and download your result; they are not retained indefinitely. All data in transit is protected using HTTPS encryption.

4. Third-Party Services

We rely on the following trusted third-party services to operate TrueMoments:

Supabase — provides authentication, user database, and file storage. Your account data is stored securely in Supabase's infrastructure.

Stripe — handles all payment processing. We do not store your credit card details; all payment information is handled directly by Stripe and subject to their Privacy Policy.

fal.ai — provides the AI image-to-video generation capabilities. Photos are transmitted to fal.ai solely for animation processing.

Vercel — hosts the TrueMoments web application.

Google OAuth — used for optional Google sign-in. We only receive your name and email from Google.

5. Content Moderation

All uploaded photos pass through automated NSFW content detection before being submitted to our AI pipeline. Photos flagged as containing explicit, harmful, or prohibited content are rejected and not processed. No credit is consumed for rejected uploads.

We do not manually review uploaded photos except where required by law or to investigate a reported violation of our Terms of Service.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including HTTPS encryption for all data in transit, Supabase authentication with secure session management, and Stripe's PCI-compliant payment infrastructure.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and cannot accept liability for unauthorised access beyond our reasonable control.

7. Data Retention

We retain your account data (name, email, credit balance, animation history) for as long as your account is active. Uploaded photos are not stored permanently after processing is complete. Generated video outputs are stored temporarily and deleted after a reasonable period.

If you delete your account or submit a deletion request, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at support@truemoments.io.

We will respond to verified requests within 30 days. We may need to verify your identity before fulfilling a request.

9. Cookies

TrueMoments uses essential session cookies only. These cookies are required to maintain your authenticated session and are not used for tracking, advertising, or analytics purposes. We do not use third-party tracking cookies or advertising pixels.

10. Children's Privacy

TrueMoments is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has created an account, we will delete the account and all associated data promptly. If you believe a child has registered, please contact us at support@truemoments.io.

11. Legal Bases for Processing (GDPR)

If you are located in the European Union, United Kingdom, or Canada, we are required to inform you of the legal bases we rely on when processing your personal information:

Consent: Where you have given us explicit consent to process your data for a specific purpose (e.g. optional marketing communications). You may withdraw consent at any time by contacting us at support@truemoments.io.

Performance of a Contract: Processing is necessary to provide you with the TrueMoments service — for example, processing your photos, managing your account, and handling credits and payments.

Legitimate Interests: We process certain data based on our legitimate business interests, including improving the service, detecting and preventing fraud, and maintaining security. We ensure these interests are not overridden by your rights.

Legal Obligations: We may process your data where necessary to comply with applicable laws, court orders, or regulatory requirements.

Vital Interests: In rare circumstances, we may process data to protect the vital interests of you or another person.

TrueMoments does not conduct targeted advertising. We do not send marketing emails beyond transactional communications directly related to your account and use of the service.

12. When and With Whom Do We Share Your Information

We do not sell your personal information to third parties. We have not disclosed personal information to third parties for business or commercial purposes in the preceding 12 months. We share your information only in the following limited circumstances:

Service providers: We share information with trusted third-party providers who help us operate the service — specifically Supabase (authentication and database), Stripe (payment processing), fal.ai (AI animation generation), Vercel (web hosting), and Google (OAuth sign-in). Each provider only receives the data necessary for their specific function and is contractually required to protect it.

Business transfers: If TrueMoments is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such change via the email address associated with your account.

Legal requirements: We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

13. Cookies and Tracking Technologies

TrueMoments uses essential cookies only. These are strictly necessary session cookies used to maintain your authenticated login state and remember your user preferences. Without these cookies, the service cannot function correctly.

We do not use advertising cookies, tracking pixels, web beacons, or third-party analytics tools such as Google Analytics. We do not track you across other websites or build advertising profiles based on your behaviour.

Most web browsers allow you to control cookie behaviour through their settings. You can configure your browser to refuse cookies or to alert you when cookies are being sent. Note that disabling essential cookies may prevent certain features of TrueMoments from functioning correctly.

14. Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track (DNT) feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. At this time, no uniform technology standard for recognising and implementing DNT signals has been finalised.

As such, TrueMoments does not currently respond to DNT browser signals. If a standard is adopted that we are required to follow, we will update this Privacy Policy accordingly.

15. California Residents — CCPA Privacy Rights

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) regarding your personal information.

Categories of personal information we collect:

• Identifiers: Name, email address, IP address, and account credentials.
• Commercial information: Purchase history, credit pack and subscription transactions, and credit usage records.
• Internet/network activity: Browser type, pages visited, device information, and animation history.
• Geolocation data: Approximate location inferred from your IP address.

We do not collect biometric data, education information, professional or employment information, or other sensitive personal information beyond what is listed above.

Your CCPA rights:

• Right to know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale: We do not sell your personal information. No opt-out is required, but you have this right.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at support@truemoments.io. We will verify your identity before processing your request and will respond within 45 days as required by law.

16. International Data Transfers

TrueMoments is hosted and operated in the United States. Our web application is deployed via Vercel, and our user database is hosted on Supabase in the US East (us-east-1) region.

If you are accessing TrueMoments from outside the United States — including from the European Union, United Kingdom, Canada, or Australia — your personal information will be transferred to, stored in, and processed in the United States. By creating an account and using the service, you acknowledge and consent to this transfer.

We take steps to ensure that any international transfers of personal data are handled in accordance with applicable data protection laws and that appropriate safeguards are in place.

17. How to Review, Update, or Delete Your Data

You can review and update your account information at any time by logging into your TrueMoments account settings.

To request a copy of the personal data we hold about you, to correct inaccurate information, or to request deletion of your account and associated data, please email us at support@truemoments.io. We will respond to all verified requests within 30 days.

Upon account deletion, your personal data will be removed from our active databases within 30 days. Some data may be retained in encrypted backups for a limited period, or as required by law (for example, for tax or fraud prevention purposes). Retained data will not be used for any other purpose.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the service after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

19. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at support@truemoments.io.