King AI Privacy Policy
Effective date: October 29, 2026
This policy covers the King AI: AI Video Creator app ("King AI", "the app"). It explains:
- what personal data we collect;
- why we collect it;
- who receives it;
- how long we keep it;
- what choices you have.
King AI is provided by NOWAY MOBILE OÜ, Tornimäe tn 5, 10145 Tallinn, Estonia, registry number 17201091 ("we", "us"). We are the controller of your personal data.
For any question or request, email contact@nowaymobile.com.
1. Summary
- No name or email needed. The app creates an anonymous account on your device.
- If you choose Sign in with Apple, we receive an Apple account identifier and an email address. The email can be an Apple relay address.
- AI partners. To make a video, we send your prompt to two partners, and in photo mode your photo as well:
- OpenAI checks the request for safety, translates it and improves the prompt.
- fal.ai generates the video with the model you choose.
- The first time, the app asks for your permission before sending anything.
- Automatic checks. Every request and every finished video is checked for rule violations.
- Photos of real people are not accepted.
- We do not use facial recognition and do not try to identify anyone in a photo.
- No selling, no training by us. We do not sell your personal data. We do not use your prompts, photos or videos to train AI models. How our AI partners handle your data is described in section 4.
- Payments go through Apple. We never see your payment card.
- Account deletion. You can delete your account, videos and coins at any time in Account → Delete account.
2. Data we collect
2.1 Account
| Data | Details |
|---|---|
| User ID | An anonymous account ID, created the first time you open the app. |
| Sign in with Apple (optional) | Apple's identifier for you in our app, and your email address. If you choose "Hide My Email", this is an Apple relay address. We do not ask for your name. |
| Account merge | If you sign in on a device where you were using the app anonymously, we move that anonymous account's coins and videos to your signed-in account, then delete the anonymous account. |
2.2 What you create
| Data | Details |
|---|---|
| Prompts | The text you type. We also keep the English version we create from it, the improved prompt sent to the video model, and the detected language. |
| Photos (photo mode) | We store the photo you pick or take as it was uploaded. That file can include embedded information: camera details, date, the location if your camera saved one, and content credentials (C2PA) describing how the image was made. We read the content credentials only to check whether the image was made by AI. Before a photo goes to any AI partner, we make a copy with the embedded information removed. |
| Video settings | Model, length, shape (aspect ratio) and coin price. |
| Videos | The generated videos and their preview images, status, time of creation, and any error. |
| Reports | When you report a video: the reason you choose and an optional note (up to 500 characters). |
2.3 Safety data
| Data | Details |
|---|---|
| Automated review | For each request, the result of the automatic check. For example: whether a photo shows a realistic person, or whether the request is sexual. |
| Blocked requests | The rule that was broken, the first 120 characters of the prompt, the detected language, the model and mode, whether the photo had content credentials and who issued them, and the time. |
| Account standing | Rule violations ("strikes"), suspensions and account closures. |
2.4 Purchases and coins
| Data | Details |
|---|---|
| Purchases | From Apple through RevenueCat: product, price, currency, store country, transaction IDs, and subscription events (start, renewal, cancellation, expiry, refund). These are linked to your King AI user ID. |
| Coin history | Every coin added, spent or returned, with the time and, for videos, the model and video. |
We do not receive your name, payment card or billing address from Apple.
2.5 Usage and device data
| Data | Details |
|---|---|
| App analytics (Google Firebase Analytics) | In-app events and screens viewed. Examples of events: onboarding viewed, paywall viewed, purchase made, video shared, video downloaded, video reported with its reason. Also: app version, device model, operating system, language, approximate location (country or region, derived from the IP address) and an app-instance identifier. |
| Advertising measurement (Meta App Events) | The same in-app events, plus app installs, app launches and in-app purchases, which Meta's software logs automatically. With your permission under Apple's App Tracking Transparency, also your device's advertising identifier (IDFA). |
| Notifications | If you allow notifications, a Firebase Cloud Messaging token for your device. |
| App integrity | Firebase App Check uses Apple App Attest and DeviceCheck to confirm that requests come from a genuine copy of the app on a real device. This does not give us information about you. |
| Settings download | Firebase Remote Config downloads app settings using an app-instance identifier. |
| Technical logs | Our hosting providers process your IP address whenever your device connects. Our server logs record your user ID, video IDs and errors. |
2.6 Data that stays on your device
These preferences are stored only on your device and are not sent to us:
- whether you agreed to sending requests to our AI partners;
- the model, length and shape you used last;
- which videos you have already opened;
- which videos you asked to be notified about.
2.7 Device permissions
All permissions are optional. You can change them at any time in iOS Settings.
| Permission | Used for |
|---|---|
| Photos | To pick a photo. Only the photo you pick is uploaded. |
| Camera | To take a photo for photo mode. |
| Add to Photos | To save finished videos to your library. |
| Notifications | To tell you when a video is ready. |
| Tracking (App Tracking Transparency) | To let Meta use your advertising identifier for ad measurement. |
We do not access your contacts, your device's location services, your microphone or your browsing history.
2.8 Support
If you email us, we receive your email address and whatever you write.
3. Why we use your data
The legal bases in this table apply to users in the EEA and the UK.
| Purpose | Data | Legal basis |
|---|---|---|
| Run your account, make videos, show your history and keep your account across devices | Account, content, coin history | Performing our contract with you |
| Send your request to the AI partners that check it and generate the video | Prompt, photo copy without embedded information, video settings | Performing our contract with you. We also ask for your permission in the app before the first request. |
| Keep King AI safe and legal: review requests and videos, block content, count strikes, suspend or close accounts, handle reports, protect children | Content, safety data, user ID | Our legitimate interest in a safe, lawful service; legal obligations where they apply |
| Sell plans and coin packs, add and return coins, handle refunds and prevent fraud | Purchase data, coin history | Performing our contract with you; legal obligations (accounting and tax records) |
| Understand how the app is used and fix problems | Analytics, technical logs | Our legitimate interest in improving the app |
| Measure our advertising | Meta App Events, advertising identifier | Your consent |
| Notify you when a video is ready | Notification token | Your consent (the iOS permission) |
| Protect the service from fake apps and automated abuse | App integrity, technical logs | Our legitimate interest in security |
| Answer support requests, enforce our Terms, defend legal claims, respond to lawful requests | Any of the above, as needed | Legitimate interests; legal obligations |
Automated decisions. Our safety check runs automatically. It decides whether a request is allowed and whether a finished video is published. Repeated or severe violations can automatically suspend or close an account. The app tells you which rule a blocked request broke. If you think a decision is wrong, email contact@nowaymobile.com and a person will review it.
4. Who receives your data
| Recipient | What they receive | Why | Where |
|---|---|---|---|
| OpenAI (OpenAI OpCo, LLC and its affiliates) | Your prompt, a smaller copy of your photo without embedded information, and three frames of each finished video | Safety review, translation and prompt improvement | United States |
| fal.ai (Features & Labels, Inc.) | The final English prompt, the photo copy without embedded information, and the video settings | Video generation. Depending on the model you choose, fal.ai may pass the request to the model's developer: Kuaishou (Kling), MiniMax, Alibaba Cloud (Wan) or Google (Gemini Omni Flash). | United States and, depending on the model, the model developer's country (for example China or Singapore) |
| Google (Firebase / Google Cloud) | All data in section 2 except what stays on your device | Hosting, database, file storage, sign-in, analytics, settings, notifications, app integrity | United States and other countries where Google operates |
| RevenueCat, Inc. | Purchase data linked to your user ID | Managing purchases and subscriptions | United States |
| Apple | What Apple needs for purchases, Sign in with Apple, App Attest and tracking permission | Payments, sign-in, app integrity | Apple's own policy applies |
| Meta Platforms | App events; the advertising identifier only with your permission | Advertising measurement | United States / Ireland |
| Authorities | What the law requires | Legal requests; reporting child sexual abuse material and other illegal content to the competent authorities or organizations | — |
| Successor company | The data needed to continue the service | Merger, acquisition or sale of the app. We would tell you first. | — |
About the AI partners:
- Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models. OpenAI may keep it for up to 30 days to detect abuse.
- fal.ai and the model developers process your request to generate the video, under their own terms.
Selling and sharing. We do not sell personal data.
- Under some US state laws (for example California), sending app events to Meta for ad measurement can count as "sharing" for cross-context behavioral advertising.
- To opt out, deny tracking when the app asks, or turn off "Allow Apps to Request to Track" in iOS Settings, or email us.
Sharing videos. When you share a video, it goes through the iOS share sheet to the app or person you choose. Their own privacy terms apply.
5. International transfers
Your data is processed in the United States and in the other countries listed in section 4. Where your data leaves the EEA or the UK, we rely on one of these:
- Standard Contractual Clauses approved by the European Commission (and the UK addendum);
- the EU-U.S. Data Privacy Framework, where the recipient is certified.
6. How long we keep data
| Data | How long |
|---|---|
| Account, prompts, videos, preview images, coin balance and history | Until you delete your account. In-app deletion removes them from our systems immediately. |
| Original uploaded photos | Until you delete your account. |
| Anonymous accounts that are no longer used | Until the account is deleted. |
| Blocked-request records, strikes and reports | As long as necessary to investigate violations and prevent repeat abuse. We keep these after account deletion for that purpose. |
| Purchase and coin transaction records | 7 years, as required by accounting law. |
| App analytics | Up to 14 months. |
| Server logs | About 30 days. |
| Data held by AI partners | OpenAI: up to 30 days. fal.ai and model developers: according to their own terms. |
Videos you save to Photos or share stay wherever you saved or sent them. Deleting your account does not remove those copies.
7. Your choices and rights
In the app and on your device:
- Delete your account: Account → Delete account. This deletes your videos, photos, coins and history.
- It does not cancel a subscription. Cancel it in iOS Settings → [your name] → Subscriptions.
- Permissions: change Photos, Camera, Notifications and Tracking in iOS Settings at any time.
In the EEA and the UK, you have the right to:
- access your data and get a copy;
- correct it;
- have it deleted;
- restrict its use;
- receive it in a portable format;
- object to uses based on legitimate interests;
- withdraw consent at any time (this does not affect earlier use);
- ask for a person to review an automated decision.
You can also complain to a data protection authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee). You can contact the authority where you live as well.
In the United States (for example California, Colorado, Connecticut, Virginia and other states with privacy laws), you have the right to:
- know what data we have about you;
- get a copy of it;
- correct it;
- delete it;
- opt out of "sharing" for cross-context behavioral advertising (see section 4).
We do not use sensitive personal information to infer characteristics about you. We will not treat you differently for using these rights. An authorized agent can make a request for you.
How to make a request: email contact@nowaymobile.com from the email address you signed in with.
- If you use the app without signing in, we may not be able to confirm the account is yours. In that case, use Account → Delete account on your device.
- We answer within one month (EEA/UK) or 45 days (US). We may need to confirm your identity first.
8. Children
King AI is only for people 18 and older.
- Photos showing children are rejected, and sexual content involving minors leads to immediate account closure.
- If we learn that someone under 18 is using the app, we delete their account.
9. Security
- Data is encrypted in transit (TLS) and stored encrypted by Google Cloud.
- Access rules let only your account read your videos and coin history. Coins and videos can only be changed by our servers.
- App Check blocks requests that do not come from the genuine app.
- Only staff who need it for support or safety reviews can access personal data.
Video files are stored at addresses that contain a long random token. We do not publish these addresses, but anyone who has one can open that video.
No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
10. AI-generated content
Videos made with King AI are labeled as AI-generated in the app. The stored files carry metadata saying they were made by AI.
11. Changes to this policy
When this policy changes, we update the effective date at the top. For important changes, we tell you in the app before they apply.
12. Contact
NOWAY MOBILE OÜ
Tornimäe tn 5, 10145 Tallinn, Estonia
contact@nowaymobile.com