CUTPAPAYA LEGAL

Privacy Policy

In short. You must be 16 or older to use CutPapaya. A picture or clip leaves your phone only at the moment you ask for a cleanup, a restyle, or an animation. Personal information is never traded for money here. What follows explains accounts, creative files, advertising, purchases, storage periods, and how to close everything down. The controller is TAS 286 FIFTH LLC, registered at 2875 NE 191st St PH 2A, Miami, FL 33180-2841, United States.

1. Scope and controller

Three things fall under this Policy: the CutPapaya app for Android, the pages hosted at app.cutpapaya.com, and every channel we staff for support, privacy requests, abuse reports, and billing questions. “Service” below means all three together. Accountability for the processing described here sits with TAS 286 FIFTH LLC of 2875 NE 191st St PH 2A, Miami, FL 33180-2841, United States.

A few companies we work alongside decide for themselves how to handle what reaches them, instead of following only our instructions. Google Play, the Google or Facebook sign-in service, the networks that fill ad slots, and the payment channel each publish separate notices covering their own conduct. Those notices sit beside this one rather than underneath it.

2. Information we handle

Device permissions

Nothing is requested up front. A prompt appears at the exact point an action you started needs it: reaching your gallery so a file can be opened or a finished piece saved, or posting notifications about a finished job, a payment, or something affecting your account or its security. Android settings let you take any of these back later, at the cost of whichever feature depended on it. Handing one file to the app through the system picker keeps the rest of your gallery out of reach.

3. Why we use information

The uses are: setting up and defending accounts; recognising you at sign-in; running whatever cleanup, background swap, retouch, restyle, or animation you asked for; handing results back and filing them in history where that is switched on; keeping credits, plans, and payments straight; checking that an optional rewarded ad really played; watching reliability and campaign performance; chasing down crashes; blocking fraud and abuse; replying to you; sending the notices a service has to send; applying our rules; and meeting obligations the law imposes.

Somewhere a legal ground is demanded, ours will be the contract we have with you, our legitimate interest in keeping the Service running and protected, a legal duty, or your consent where the activity is optional. Pulling consent back changes what happens from then on; it does not retroactively taint processing that was lawful at the time.

4. Creative content and AI processing

4.1 Running a creative task

Ask CutPapaya to strip out an object, swap a background, tidy a portrait, restyle a shot, or set a still in motion, and the file you chose is uploaded with your instructions to our systems, and onward to the hosting, rendering, and AI model providers we have under contract. A recipient is given only what the request reasonably requires, and we avoid attaching a direct account identifier wherever that is technically possible.

Do not upload another person’s image, voice, or other personal information without the permission and the legal right to do so. Do not submit highly sensitive material — identity papers, medical records, financial paperwork — that the requested edit does not actually need.

Your inputs and your results are not training material. We do not feed a private photo, video, prompt, or generated result into the training of a general-purpose AI model, and we do not hand any of it over for that purpose. A provider under contract may handle the same material only to run, secure, and support the task we asked it to perform, under our instructions and within the law — not to build a product of its own.

Retouching a face or lifting an object out of a frame requires working out where things sit and what shape they are. That calculation is never turned into an identity check, a login factor, or a face database.

4.2 Storage of inputs and results

Source content you upload is cleared from our processing servers once the task finishes. What came back stays available in your account history for convenience; delete a result and it is cleared from our systems within 24 hours. A generation provider may still be holding its own copy under its separate rules.

5. How we disclose information

Information reaches the recipients below, for the purposes this Policy describes:

• Contracted cloud, AI, rendering, moderation, storage, analytics, communications, customer-support, and security providers, each acting on our behalf and bound by confidentiality and data-protection obligations.
• App stores, payment processors, and sign-in providers, so that a user can be authenticated, a purchase completed, a subscription managed, fraud prevented, and a refund handled.
• Professional advisers and parties to a corporate transaction, where legal, audit, financing, merger, acquisition, or asset-sale work reasonably requires it, under appropriate confidentiality protections.
• Authorities and other parties, where this is reasonably necessary to follow the law or legal process, protect safety and rights, look into fraud or abuse, or enforce our agreements.

We do not sell personal information for money, and we do not share personal information for cross-context behavioural advertising. CutPapaya carries no in-app public community and no public-posting feature: what you create stays inside your account unless you export it yourself or pass it to someone through another service.

6. Advertising, analytics, and website storage

CutPapaya carries advertising, and watching one voluntarily may earn a reward. Where this is disclosed and legally permitted, an advertising identifier together with device and network signals can be processed to deliver an ad, cap how often it appears, measure whether it worked, and screen it for fraud. What you photograph, edit, or type is never consulted to decide which ad you get. Skip an optional rewarded placement and its reward simply is not granted.

Analytics and attribution tell us which features are used, how a build performs, and where an install came from. Android carries its own switches for the advertising identifier, and resetting or limiting it there applies to CutPapaya as well. If you would like us to record an advertising opt-out under the law where you live, write to support@cutpapaya.com.

This website sets no advertising or measurement cookies at present; only storage needed for security or display may be used.

7. Retention

• Files you supply are cleared from the active processing we control as soon as the job ends; a copy sitting with a generation provider follows that provider’s own schedule.
• Results stay in history until you remove them or close the account; one deleted through the in-app control ordinarily leaves the live storage we control inside 24 hours.
• After a closure request is accepted, the account and service records it covers normally leave live systems within a day, except for the items listed just below.
• Payment orders are held for accounting and audit reasons, with no fixed deletion date at present.
• Server logs capable of carrying a user identifier expire on whatever schedule the relevant logging system is configured with.
• Closing a CutPapaya account currently leaves the Adapty profile, entitlements, and transaction history untouched and un-anonymised; Adapty stores those on its own terms.
• A support thread or abuse case is held for as long as investigating it, recording the result, and satisfying security or legal duties reasonably requires.

Sealed backups can hold information until the ordinary rotation writes over it. A narrow set of records may survive, or be locked away rather than erased, where tax, compliance, litigation, fraud-prevention, safety, or other legal reasons demand it.

8. Your choices, rights, and deletion

Which rights you hold depends on where you live. The usual set covers inspecting or fixing your data, having it wiped, receiving a transferable copy, capping or objecting to a particular use, revoking permission going forward, stepping out of qualifying targeted advertising or data sharing, and challenging a request we turned down. Expect us to establish who you are, and whether you are entitled to ask, before acting.

The permanent deletion control inside CutPapaya removes your account and the data it covers. Locked out of the app? Write to support@cutpapaya.com under the subject line “CutPapaya Account Deletion Request.” Processing begins once the request is accepted and usually wraps up within 24 hours, with an automatic retry if something fails temporarily. There is no way back afterwards, and removing the app from your phone does not start any of this.

What today’s workflow clears: sign-in access, profile fields, credit balances and their history, membership records, job and creation history, feedback, payment events, temporary caches, and generated media held in storage we control. What it leaves behind: payment orders retained for audit and compliance, logs still waiting on their scheduled expiry, Adapty subscription and transaction records, and copies held by a generation provider. Closing a CutPapaya account does not, as things stand, dispatch any erasure or anonymisation instruction to Adapty.

Deleting the CutPapaya sign-in account is separate from withdrawing an earlier Google authorisation, which you revoke yourself in Google Account settings. It is also separate from cancelling a Google Play subscription, which has to be managed or stopped inside Google Play.

9. Children and age requirement

Sixteen is the floor for using CutPapaya, and data from anyone below it is not knowingly collected. A user of 16 or 17 has to be able to enter this agreement where they live, and must bring in a parent or guardian anywhere local law makes approval of the Service or of a payment a condition. Suspect that someone under age has given us data? Tell us, so it can be looked into and removed as appropriate.

10. International transfers

Work may be carried out in the United States or wherever else our vendors keep operations. Privacy law in a receiving country will not necessarily match the law at home. Where transfer rules bite, the controller leans on an approved contract, an adequacy decision, valid consent, or another safeguard the law recognises.

11. Security

Traffic is encrypted, access is restricted, operations are logged, vendors are assessed, and internal administrative controls apply. None of that makes an internet service risk-free. Keep your sign-in details to yourself and tell Support quickly if something looks wrong. Where an incident triggers a duty to notify, affected people and the relevant regulators will hear from us as the law directs.

12. Regional notices

United States

Your state may give you the right to learn what is held, reach it, correct it, delete it, or take a copy elsewhere; to restrict certain uses of sensitive categories; to step out of qualifying targeted advertising, sale, sharing, or profiling; and to appeal a refusal. CutPapaya trades no information for money, and does not knowingly pass on the personal information of a person below 16 in a way that counts as a sale or a share.

EEA, United Kingdom, and Switzerland

Where these rules apply you can request a copy, correct what is wrong, ask for erasure, restrict a use, object to processing, port your data elsewhere, or withdraw consent for anything still to come. Complaints go to your data-protection authority. Where legitimate interests is the stated ground, you may also ask how the balancing was done.

13. Changes and contact

Product, operational, or legal developments may prompt a revision. The effective date above will move, and further notice or a fresh consent will follow wherever that is required.