PREPARED AUGUST 31, 2026

Privacy Policy

Last Updated: [[LAST_UPDATED_DATE]]
Effective Date: [[EFFECTIVE_DATE]]

This notice describes the proposed privacy practices for the Service. It remains incomplete until the operating entity and production data flow are verified.

1. Scope and privacy controller

This policy applies to the CutPapaya mobile application, its public website, and related support channels (the “Service”). The data controller is [[OPERATOR_LEGAL_NAME]], registered at [[REGISTERED_ADDRESS]].

2. Information under review

Depending on the final product flow, information may include sign-in details, uploaded media, written instructions, generated results, transaction records, technical logs, and support correspondence. Remove any category the app does not actually collect.

3. Why information is processed

Information would be used to operate creative tools, deliver requested results, administer access and purchases, prevent misuse, improve reliability, answer users, and comply with valid legal process. Any analytics or advertising purpose requires separate confirmation.

4. AI content handling

To create an output, source content may pass through [[AI_MODEL_PROVIDERS]] on infrastructure supplied by [[CLOUD_INFRASTRUCTURE_PROVIDERS]]. Before launch, document regional routing, storage duration, review access, and any training or secondary-use restriction.

Do not upload content you lack the right or authority to use. Content is not treated as biometric identification data unless the final product deliberately performs that function; confirm the shipping behavior.

5. Providers and disclosures

Information may be disclosed to contracted vendors that support hosting, AI processing, authentication, analytics, crash reporting, payments, and customer care. Record the final vendors in [[PRODUCTION_VENDOR_LIST]]. Disclosure may also occur to protect users, comply with binding legal process, or complete a corporate transaction with appropriate safeguards.

6. Retention

Account, content, output, diagnostic, purchase, and support records must follow the confirmed schedule in [[RETENTION_SCHEDULE]]. Data may be kept longer only when necessary for security, disputes, legal duties, or documented backup cycles.

7. Security and international transfer

Reasonable organizational and technical measures should protect information in transit, at rest, and during vendor processing. No system is perfectly secure. If information moves across borders, the operator must use a lawful transfer mechanism suited to the launch markets.

8. Your choices and rights

Subject to applicable law, users may request access, correction, deletion, restriction, portability, or an objection to certain processing. Requests must be sent through [[PRIVACY_REQUEST_CHANNEL]]. Identity verification and legally permitted retention may apply.

9. Account and data deletion

The verified deletion route is [[ACCOUNT_DELETION_URL_OR_EMAIL]]. The final page must explain which account and content records are erased, what is retained, and the expected handling time. Uninstalling the app does not itself submit a deletion request or cancel a store-managed subscription.

10. Children and age requirement

The minimum permitted age is [[MINIMUM_AGE]]. The released wording must match the store rating, sign-up flow, safety controls, and target markets. If information from an ineligible child is identified, the operator should take appropriate steps to remove it.

11. Regional disclosures

Before publication, add the notices and rights required for [[TARGET_MARKETS]], including any lawful-basis, sale/share, targeted-advertising, appeal, or authorized-agent disclosures that actually apply.

12. Policy changes

Material changes should be described with an updated date and any notice or consent required by law. Earlier versions should be retained according to the operator’s recordkeeping policy.

13. Contact

Privacy requests: [[PRIVACY_EMAIL]]
Support: [[SUPPORT_EMAIL]]
Operator: [[OPERATOR_LEGAL_NAME]]
Address: [[REGISTERED_ADDRESS]]