Privacy                        

Last Updated:  2023-12-20

Zenepic develops and publishes apps for the web and mobile devices. This Privacy Policy (this “Policy”) describes the ways Zenepic (“Studio,” “us”, “our” or “we”) collects, stores, uses, discloses or otherwise processes personal information of our users (“users” or “you”) in connection with their use of our products or services, including our product offerings provided on a mobile platform or any other product or service that posts or links to this Policy (each a “Service,” collectively, the “Services”).  Additionally, this Policy describes the rights and choices concerning your information that may apply to you.  

This Privacy Policy covers the following topics:

If you have questions regarding this Policy or our collection and use of personal information, please contact us as described in the Section “Contact Us”.

1. PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT

When you interact with or use our Services, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our Services (e.g., information about how you interact with our Services) and sometimes we collect the personal information directly from you when you use our Services (e.g., information you give us when setting up your account or user profile).  At times, we may collect personal information about you from other sources and third parties, including other players.

Registration Information

We may offer you the option to complete a user profile that is visible to other Studio users (“Account”). If you create an Account, you may provide us your name, a username, e-mail address, a password and other information that helps us confirm that it is you accessing your Account. We may do this through in-App dialog boxes, which you may choose to skip. If you sign into the Services with Facebook Connect, we will collect information that is visible via your Facebook account such as: (1) your first and last name, (2) Facebook ID, (3) Profile Picture/URL, and (4) list of Facebook friends. Your Account may be used to publicly identify you as part of social features of the Services, which may include user-to-user interaction, chat or messaging functionality, public leaderboards, head-to-head competition, and other similar features. Your username associated with your Account will be public and will be shown to other users.  In addition, your username will allow others to access information on your user profile that is considered public or that you have designated as public in your user profile settings.

Address Book Information

We may also offer you the ability to choose to import your contacts or manually enter e-mail addresses so that you can locate your contacts on Studio and invite your contacts to join you in the Services. This information is typically collected through the use of third-party mobile device software development kits. If you choose to import your contacts or manually enter e-mail addresses, we will store those contacts for purposes of helping you and your contacts make connections through our Services. You are responsible for ensuring your sharing of this information with us is compliant with applicable laws. In some countries, this may require you to get permission from the people you invite before you share their information.

Technical and Usage Information

When you access our Services, we may use cookies and other similar technologies to collect (i) certain technical information about your mobile device or computer system, including IP Address, mobile device ID (IDFA, Google Advertising ID or other identifiers), and the version of your operating system; and (ii) usage statistics about your interactions with the Services, including the links, objects, products and benefits you view, click or otherwise interact with (also known as “Clickstream Data”). Our emails may also contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it and whether you have clicked on any links in that email. In connection with your use of certain Services, we will create and assign to your device an identifier that is similar to an account number. In addition, in certain circumstances, we may collect the name you have associated with your device, device type, telephone number, country, and any other information you choose to provide, such as username, character name, or e-mail address. We may also infer your approximate geographic location based on your IP address.

Payment Information

When you order any good or service through the Services, including any virtual currency or virtual good, we collect certain non-financial transaction information related to these purchases, including what you purchased, the price, and the date.  Your in-app purchase transactions are processed by third-party payment processors, such as Apple (for purchases on iOS devices), Google (for purchases on Android devices), or Amazon (for purchases on Kindle devices). The third-party payment processors will collect your name, phone number, e-mail address, mailing address, billing address, and complete credit card information to enable them to process your payment.  The third-party payment processors may also retain this information to enable you to purchase additional items through our Services without having to re-enter your payment information each time. Please note third-party payment processors do not share your financial information, like credit card numbers, with us. In addition, please note that the third-party payment processors’ processing of transactions and collection and use of your personal information is governed by their terms of service and privacy policy, and purchases through these third parties may also be subject to additional policies.  We encourage you to review the terms of service and privacy policies of those third parties to learn more about how they handle your personal information.

Information Collected by or Provided to Customer Support

When you ask for assistance from our Customer Support team, we will collect and store the contact information you provide (generally your name and e-mail address), information about your App-play or activity on the Services, and your username or ID number. We will also store the correspondence and information within the correspondence that you choose to share with us.

Communication Preferences

We may collect information about your interests and communication preferences that you choose to provide, such as when subscribing to news or alerts.  

Surveys, User Research Projects, Competitions and Promotional Events

If you choose to participate in, or fill out any forms relating to, Studio surveys, user research projects, competitions (contests/sweepstakes), promotional events, or similar activities, we will collect your contact information (such as your name, email, and phone number, address and postal code) to enable you to participate in the activity and to allow us to communicate with you, as well as any other information that we request that you provide for purposes of the activities, including audio or video recordings, photos, and/or screen captures.  In connection with Studio surveys and user research projects, we may also collect your age, gender, opinions, responses to certain research questions, prompts, or surveys, and other personal information, consistent with the purposes of the Studio survey or user research project.

On occasion, we may also collect your shipping and billing information to send you certain rewards or incentives, such as if you are a participant in a Studio survey or user research project, a competition winner, or if you purchase our products or services.   In addition, if you are a part of our event or promotion partner, we may also collect your personal information including your name, company email, and company address.

Please note that your participation in any Studio surveys, user research projects, competitions (contests/sweepstakes), promotional events, or similar activities, is completely voluntary.  

Interact content with our AI service

Our AI service app collects your conversations, your feedback, and usage information. That data helps us provide, improve and develop products, services, and machine-learning technologie. And these contents are encrypted, not associated with any personal identity. We use the API powered by OpenAI and Stable Diffusion. you can check the Privacy policy on this website: https://openai.com/policies/privacy-policy and https://stability.ai/privacy-policy 

Our service will delete all the pictures you provide for using the app function after 48 hours. Please save and back up locally all pictures both your own and those generated by the app function.

We may collect or receive information from the following other sources (i) other Service users who choose to upload their email contacts; (ii) third party information providers, such as digital advertising companies; and (iii) social networking sites. We may combine this information with the information we collect from an individual directly.

We typically do not request or seek to elicit sensitive or special categories of information, but you may choose to provide this information to us in connection with certain of the interactions described above, including when you ask for assistance from our Customer Support team. The meaning of sensitive or special categories of information varies by jurisdiction and it could include, for example, health, genetic or biometric data, or precise location information.

2. HOW WE USE YOUR INFORMATION

We use information collected through our Service for purposes described in this Policy or disclosed to you in connection with our Service. For example, we may use your information for:

Service Delivery

Marketing and Advertising

Research and Development

Compliance and Protection

Push Notifications

We may occasionally send you push notifications through our Service to send you App updates, high scores and other service-related notifications that may be of importance to you.  You may at any time opt-out from receiving these types of communications by turning them off at the device level through your settings.

2.1 Policy description regarding facial data and personal information in AI image processing functions

- Which face data do we collect?

For the Photo and Avatar functions, we trained a Lora Model file using images uploaded by users to generate photos for users. We only store Lora files and not user photos.

For the Couple and Enhance functions, we only generate and enhance user photos, and will not store the photos uploaded by users.

- How do you use the collected face data?

Please check the flowed table

- Will the data be shared with any third parties? Where will this information be stored?

The data is not shared with any third parties and is stored in Firebase Storage dedicated to our project.

- How long will face data be retained?

Images uploaded by users will be automatically deleted within 24 hours (Firebase Storage sets the file survival period). Lora files trained by users will always be retained. Users can Delete AI Model in the app to delete content at any time. If the user does not log in again to view the generated image results, the user-generated images will be retained for up to 1 month.

Policy description regarding facial data and personal information in AI image processing functions

DATA SET

PURPOSE AND OPERATIONS

LAWFUL BASIS

Registration,    Account   Data    & Information:(for web users)

After you install the App, you will log in and create your account (now not for iOS users).

You may choose to login using your Apple, Facebook or Google account or otherwise by entering your email address.

If you login through Facebook, Google or Apple, we will receive information connected to such account (depending on the privacy settings you chose) such as your name, profile picture, friends list, demographic data and location. (collectively “Registration Data”).

You may further voluntarily choose to add or provide certain information about you under your account or bio page, such as certain preferences, characteristics, demographic data, etc. In addition, for certain Apps and Services, you may choose to upload photos to label and associate with each profile you create and wish to include under your account (i.e., a thumbnail image).

(collectively “Account Data”)

We use the Registration Data to create an account, and for authentication and identification purposes. If you use several Apps and you have signed in, we will be able to identify you across those various Apps and share the information processed in each of the Apps.

We will use your email address to send you operational messages such as invoices and services related messages.

We may further send you other materials and content, including marketing materials (“Direct Marketing”).

Additional Personal Data you voluntarily provide as part of the Account Data will be used to provide the Services for which such information was provided, as well as for Services improvement and customization, as further detailed under this Privacy Policy.

Registration Data and Account Data are processed for the purpose of performing our contract with you, meaning, to designate your account and provide with requested Services.

Processing for Direct Marketing is subject to our legitimate interest, you may opt-out at any time by unsubscribing. Note, even if you unsubscribe operational and service-related messages will still be sent.

Online    Identifiers    and    Usage Data:

When you use the Apps (including tools and features made available

through our website or Third- Party Platforms), we, or our third-

Online Identifiers and Usage Data are used for analytics and operational purposes, correcting errors and bugs, adjust language preference, if applicable, to enable you to use

When the processing is for marketing or tracking purposes, we will process the Personal Data based on consent.

party partners, identify you through Online Identifiers. “Online Identifiers” are unique identifiers associated with your account, device or browser, which are either designated by us or transmitted from your device, and may include identifiers known as “IDFA” or “AAID”, IP address, cookie ID, agent, etc.

We further process, directly or indirectly through our third-party partners and service providers, usage data, which may or may not be associated with the Online Identifiers or your account. When associated with an Online Identifier or your account it will be treated as Personal Data, otherwise, if the usage data is aggregated, anonymized or de- identified, it will not be considered as Personal Data.

The usage data includes information regarding your interaction with the App and Services, features used, time stamp and duration of use, click stream data, errors that occurred, as well as your interaction with the content or ads displayed, records of advertising and content displayed on pages or App screens displayed to you, and any interaction you may have had with such content or advertising (collectively “Usage Data”).

the Services and to provide you with its functionalities.

Some of the Apps further display interest-based ads or other marketing and promotions which are based on the Usage Data.

We may further use the Usage Data to customize our Services and offer you and our users’ content or other Services based on their Usage Data or statistics and our analyze of Usage Data, meaning that we can assume you will be interested in based on other features you have used, etc.

When the processing of Personal Data is for operations and providing the Services’ functionalities, the lawful basis is be contract necessity.

Last, the Personal Data may be processed subject to our legitimate interest of understanding how our Services are used, correcting errors and enhancing experience, including by personalizing our offers, content and promotions.

Image Editing   Tools   :

To enable the Services, you will either provide us access to your photo gallery or import photos or videos from your gallery.

Images, photos and videos are processed on your device for the

We process the data to enable the use of the features available within the Services (Apps and other editing tools), including the ability to edit your images, videos and media, and to further improve the results of the created artwork.

We process the images, video and photos, including Face Data, demographic, and characteristics related data (inferred or provided by you), for the purpose of providing the Services and performing our contract with you.

purpose of determining the estimated location of parts of faces (such as the eyes, nose or mouth) and points on the face and eyes, which are applied to a generic model of a face that is used to help you edit images and videos in real time (“Face Data”).

Face Data is processed on your device. We do not collect or store Face Data on our servers or share it with third parties.

If you choose to store projects that use Face Data, the data will be stored on your device until you delete the project, the project is deleted automatically due to storage limits, or you delete the App. Depending on the App and Service you use, we also process demographic data, such as age (or age group) and gender and other characteristics such as skin tone, which are either inferred from your images, photos and videos or otherwise provided by you (as part of your Account Data), as well as additional information you voluntarily choose to provide us.

When photos, videos and images are used for creating artwork or adding effects to your creations, the selected content is uploaded to the Firebase Cloud. The photos, videos and images you upload are stored for up to 30 days and the output image will be stored on our Firebase Cloud until you request us to delete your Personal Data and your account, in order to make such output image accessible to you, provided that we may earlier delete such outputs according to our internal retention policies.

We will further process demographic data, and other characteristics (inferred or provided by you as part of your Account Data), as well as the features or affects you use through our Services in order to:

(i) market personalized offers by Firebase, and for example, to offer you features which are similar to the features you use or popular among users with similar characteristics. We do not use your actual photos, videos or Face Data for marketing purposes and this information is not shared with any third parties; and (ii) for AI machine learning and internal development (as further described in Table B, below).

If you granted access to your photo gallery, you can revoke the permission at any time.

We will further process demographic or otherwise any characteristics related data (inferred or provided by you), as well as data related to the features or effects used, subject to our legitimate interest, to improve, enhance and customize our offers and Services.

AI Tools and Features:

Certain Services accessible through the Apps, our website or Third-Party Platforms include artificial intelligence (“AI”) technology for creating and

editing images, photos, videos,

We process the data, including Inputs, Voice Models, Face Models, and inferred demographic data or other information you voluntarily choose to provide, for the purpose of providing the

We process the Inputs, and inferred demographic data or other information you voluntarily choose to provide, to generate the Voice Models, Face Models, and create (including to improve) the AI

and audio files. This AI technology allows you to use various features, including, among others, personalized magical avatars (“Avatars”), motions and effects, art styles, text to image, and synthetic voice speech, “swap” features (for example to “swap” voices or face image) (collectively “AI Tools Outputs”). To make these features work, we process the original images, videos, or audio recordings that you upload (“Inputs”).

To create the AI Tools Outputs, as well as to generate the Face Models (defined below), and as applicable, our AI technology uses face detection to analyze Inputs (images and videos) in order to determine the posture, location and other non-identifying characteristics of faces that appear in frame.

In addition, our AI technology may process demographic data such as age (or age group), gender and skin tone, either inferred from your Inputs, or otherwise voluntarily provided by you (as part of your Account Data).

We may further process Non-User Personal Data (as defined and described in the section below), including for the purpose of generating Voice Models and Face Models (defined below) in the event your Inputs include any third party’s image or voice.

- Voice Models:

To provide certain voice AI Tools Outputs, our AI technology uses voice recordings that you upload to create a voice sample and

generate a model of the voice that

Services and generating the AI Tools Outputs.

Note that, this data might be processed on your device or otherwise uploaded and processed on the Firebase Cloud – depending on the specific App, feature or Service you use.

Inputs are usually retained for a short-term period of up to 30 days after the AI Tools Outputs were generated.

In the event that AI Tools Outputs are processed and stored on the Firebase Cloud, such will be retained to remain accessible for you through the App at any time and from any device until you decide to delete them by requesting us to delete all your information and your account, provided that we may earlier delete such AI Tools Outputs according to our internal retention policies.

In the event that the Voice Models or Face Models created from your Inputs are processed and stored on the Firebase Cloud, they will be permanently deleted within up to 3 years after the last time you have used them, or earlier if you ask us to delete all your information and your account or otherwise according to our retention policies.

Voice Models and Face Models, if retained and stored by us, are retained and used solely to provide you with additional AI Tools Outputs you request to

Tools Outputs, meaning, for the purpose of providing the Services and performing our contract with you.

Where required under applicable laws, we will obtain your consent for the processing of such data sets.

We will further process demographic or otherwise any characteristics related data, as well as data related to the features or effects used, subject to our legitimate interest to improve, enhance and customize our offers and Services, and for example, to offer you features which are similar to the features you use or popular among users with similar characteristics.

appears in your recording Input (“Voice Model”). Voice Models are not used to identify you or anyone else. However, Voice Models may be deemed “biometric identifiers” according to the laws of your jurisdiction, and will only be processed with your consent, subject to the terms of such laws and this Policy.

- Face Models:

To provide certain visual AI Tools Outputs, our AI technology uses images and video Inputs to create a model of the face that appears in your Input (“Face Model”). Face Models are not used to identify you or anyone else. However, Face Models may be deemed “biometric identifiers” according to the laws of your jurisdiction, and will only be processed with your consent, subject to the terms of such laws and this Policy.

- Use of AI  Tools through Third Party Platforms:

Our AI technology may be further accessible through Third Party Platforms, which enable you to generate and receive the AI Tools Outputs within such Third-Party Platforms. Please note that, any information that you upload to, or obtain through, Third Party Platforms (even if using our pages and bots), shall be further subject to such Third-Party Platforms’ terms and policies that apply to you as their user and we do not have control nor responsibility in this regard.

generate through your use of the App and Services.

We do not share Face Models or Voice Models with third parties except in the limited circumstances described under this Policy (see Section 7 – Data Sharing, below).

Inputs, AI Tools Outputs, Face Model and Voice Model will be further used for AI machine learning and internal development (as further described in Table B, below).

Our AI technology may, through the process of generating the AI Tools Output, further take in consideration some statistic assumptions indicating the image or voice is estimated to be of a certain gender or age group, to improve and optimize the results of the AI Tools Outputs.

Specifically, to create the Avatars, we process 10-25 images as Inputs and we are currently using the neural network model Stable Diffusion that allows Users to generate personalized Avatars.

We will further process the demographic or otherwise any characteristics related data, as well as data related to the features or effects used, to improve, enhance and customize our offers and Services.

Note that, within the parameters set forth above, we may retain, store or delete Inputs and AI Tools Outputs at

our discretion and the above

shall not be considered as any obligation on behalf of Firebase to store or retain any information.

Non-User Personal Data:

You may only provide Inputs that include Personal Data of others (“Non-Users”) if you are authorized to consent and have consented (or otherwise acknowledge or approve, as required under applicable laws) to the terms of this Privacy Policy on their behalf.

For certain Services, where we are able to determine that you have shared Non-User Personal Data with us, such as the images or videos that you submit in connection with our “couples’ avatars” feature, we will use the images or videos to generate the Avatar, or other Output and delete the Inputs permanently from the Firebase Cloud.

In addition, you may invite friends to use our Apps. By doing that you will be requested to share the contact details of your friend(s) (such as email address or phone number).

We process the Input you upload (i.e., photo, video or audio recording) for the purpose of providing the Services and the additional purposes described under this Privacy Policy.

We will process your friend contact details only for the purpose of sending them an invite to use the Services, we will not use this data for any other purpose.

Non-User data is processed based on our legitimate interest in providing the Services to our User.

Support:

When you contact us for customer support, we will process your contact information, as well as any information you choose to provide as part as our communications and correspondence.

We will use the contact information to provide the customer support and communicate with you. We will retain such communications to have records of the support that was provided, for any future needs as well as to further improve our Services and support.

We process such information, for the purpose of providing the support services and performing our contract with you.

We will further retain our communications for records keeping and services improvement, including to train our customer support team, based on our legitimate interest.

        

3. SHARING OF YOUR INFORMATION

We may share information we collect for the following purposes:

4. ONLINE ADVERTISING and SDK

Interest-Based Advertising and Third-party Sdk

To the extent we display advertising in our Services, with your consent as may be required by applicable law, we may share or we may allow online advertising networks, social media companies, and other third-party services to collect information about your use of our Services over time to enable them to play or display ads on our Services, on other devices you may use, and on other websites, apps, or services.  Typically, though not always, the information we share is provided through cookies, software integrations, or similar tracking technologies, which recognize the device you are using.  We and our third-party partners use this information to try to make the advertisements you see online more relevant and tailored to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.   Such information includes the following:

A list of these advertising partners and their privacy policies is available at this

Third-Party Data Recipients

Advertising or SDK

Link to Privacy Policy

Ad4Game

Privacy Policy 

AdColony

Privacy Policy

Adjoe

Privacy Policy

Amazon

Privacy Policy

AppLovin

Privacy Policy

AppsFlyer

Privacy Policy

Apple

Privacy Policy

Blindferret

Privacy Policy

Chartboost

Privacy Policy 

Facebook

Privacy Policy

Digital Turbine

Privacy Policy 

Google

Privacy Policy

InMobi

Privacy Policy

ironSource

Privacy Policy

Liftoff

Privacy Policy

Mintegral

Privacy Policy

Mistplay

Privacy Policy

Moloco

Privacy Policy

Prodege

Privacy Policy

Smaato

Privacy Policy 

Tapjoy

Privacy Policy

TikTok

Privacy Policy

TVScientific

Privacy Policy

Unity

Privacy Policy

Yahoo

Privacy Policy

Verve

Privacy Policy

Vibe

Privacy Policy

Vungle

Privacy Policy

The privacy policies of our partners may include additional terms and disclosures regarding their data collection and use practices. We encourage you to review those privacy policies to learn more about their data collection and use practices.

Social Media Widgets

Our Service may include social media features, such as the Facebook button, Google, Instagram, Twitter, or other widgets.  These social media companies may recognize you and collect information about your visit to our Services, and they may set a cookie or employ other tracking technologies.  These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our Services while those users are on the social media platform or to groups of other users who share similar traits, such as likely commercial interests and demographics.  Your interactions with those features are governed by the Privacy Policys of those companies.

Cross-Device Linking

We, or our third-party partners, may link your various devices so that content you see on one device can result in relevant advertising on another device.  We do this by collecting information about each device you use when you are logged in to our Service.  We may also work with third-parties who employ tracking technologies or the application of statistical modeling tools to determine if two or more devices are linked to a single user or household.  We may share a common account identifier (such as an email address or user ID) with third-party advertising partners to help recognize you across devices.  We, and our partners, can use this cross-device linkage to serve interest-based advertising and other personalized content to you across your devices, to perform analytics, and to measure the performance of our advertising campaigns.

Google Analytics and Advertising

We utilize certain forms of display advertising and other advanced features through Google Analytics, including, but not limited to, Remarketing with Google Analytics, the DoubleClick Campaign Manager Integration, Google Ads, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to the Service and to tailor our advertisements and content to you.  You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences.  To learn how you can opt-out of data collection by Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

Opting-Out of Interest-Based Advertising

You may visit www.aboutads.info/choices or www.youronlinechoices.eu (for individuals in the EU) to learn more about interest-based advertising and how to opt-out of this form of advertising on your web browser by companies participating in the Digital Advertising Alliance (“DAA”) self-regulatory program.  If you wish to opt-out of interest-based advertising in mobile apps on your device by companies that participate in the DAA’s AppChoices app, you may download that app onto your device and exercise your choice.  AppChoices is available at the links below:

You may also limit data collection by third parties by visiting your mobile device settings and adjusting the device’s ad tracking settings (such as turning off the feature to “Allow Apps to Request to Track”) or by exercising other privacy options in your device’s settings.  

Please note that electing to opt-out will not stop advertising from appearing in your browser or applications or reduce the number of ads that you receive.  You will still receive ads, but those ads may be less relevant to your interests.  In addition, if you use a different browser or erase cookies from your browser, or use a different mobile device, you may need to apply your opt-out choices to that particular browser or device.

Please note that the opt-out tools described in this section are provided by third parties, not by us.  We do not control and are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit.  We currently do not respond to “Do Not Track” or similar signals.  To find out more about “Do Not Track,” please visit https://www.allaboutdnt.com.

5. SECURITY OF YOUR INFORMATION

We implement reasonable and appropriate technical and organizational measures to protect the security of your personal information against accidental or unlawful destruction, loss, change or damage.

However, no security system is impenetrable, and we cannot guarantee the security of your personal information.  Any transmission is at your own risk.

6. DATA RETENTION

We store data on servers in the U.S. or any other country in which the Studio or its affiliates, subsidiaries, agents or contractors or service providers maintain facilities. We retain your personal information for as long as needed to provide you Services, unless we are required by law to delete or if we accept your request to delete the information pursuant to applicable law. We will also retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When we no longer require your personal information, we will look to delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will apply security measures to your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.

7. CHILDREN’S PRIVACY

The Services are not intended for use by children (aged 16 or such higher age as required by applicable law). We do not knowingly collect personal information from children through the Services or knowingly allow them to use our Services.   If we learn that we have unintentionally collected personal information from a child, we will delete that information.  If you believe that we might have collected personal information from or about a child, please contact us at support@zenepic.net.

8. THIRD-PARTY WEBSITES AND SERVICES

The Services may contain integrations or links to third-party websites or services, including those of our business partners.  By interacting with these third parties, you are providing information directly to the third party.  Please note that the Studio is not responsible for the privacy practices of these third parties or any entity that it does not own or control.  We encourage you to review the privacy policies and online terms of those third parties to learn more about how they handle your personal information.

9. TRANSFER OF PERSONAL INFORMATION OUTSIDE YOUR COUNTRY

We may transfer information that we collect about you to affiliated entities, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located in the European Economic Area, United Kingdom or Switzerland, your personal information may be processed outside of those regions, including in the United States.

10. MANAGING YOUR INFORMATION

Subject to certain exemptions, you can manage information we receive about you. 

If you would like us to delete your information, you may send an e-mail to support@zenepic.net and place “Delete My Account” in the subject line [or request to delete your information inside the app you are using].   If you proceed with the deletion of your account, you will no longer have access to the App account or services associated with your account.  Other steps you should take should you wish to delete your account include disassociating your Facebook account from our mobile apps, if applicable, and deleting the App from your mobile device.  Please note that if you ask us to delete your account, all your progress in the App and any unused virtual items will be lost and we may not be able to restore them in the future.  Please note that your information, for example records pertaining to payments or customer service matters, may be retained for legal and accounting purposes. If you have sent or posted content on the Service, we may not be able to delete it.

If you wish to review, change or correct the information we have about you, you may send an e-mail to support@zenepic.net making this request.

For all of the above requests, we will need to verify your identity before processing your request. In order to verify your identity, we will generally require the matching of sufficient information you provide us to the information we maintain about you in our systems.

11. SPECIFIC PROVISIONS FOR EEA, UK AND SWISS INDIVIDUALS

These additional provisions apply to individuals who are located in European Economic Area (“EEA”), United Kingdom (“UK”) and Switzerland.

Zenepic, is the “data controller” responsible for the processing of personal data in connection with our Services. This means that we determine and are responsible for how your personal information is used.

Your Rights With Respect to Your Personal Information

In accordance with applicable privacy law, you have the following rights in respect of your personal information that we hold:

If you wish to exercise any of your rights detailed above, please contact us at support@zenepic.net or write to us at the address set forth in the “Contact Us” section. If you make a request, we will typically look to respond within one month, although a longer period may be permitted.  

Right to Make a Complaint.  In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at support@zenepic.net and we will endeavor to deal with your request. This is without prejudice to your right to make a complaint with an EU data protection supervisory. If you are based in the European Union, information about how to contact your local data protection authority is available at https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-are-data-protection-authorities-dpas_en. If you are based in the UK or Switzerland, your local data protection authorities are the UK Information Commissioner’s Office (https://ico.org.uk/global/contact-us/) and the Swiss Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/address.html), respectively.

Lawful Basis for Processing

With respect to each of the purposes for which we use your personal information (see Sections 2, 3 and 4 above), the lawful basis that we may rely upon will vary based on the nature of, and reason for, particular use to which we are putting your personal information. However, typically we will use your personal information:

For questions about the lawful basis we rely on for data processing, please contact us at support@zenepic.net.  Visit the “Contact Us” section below for contact information.

Marketing and Advertising

From time to time we may contact you with information about our services, including sending you marketing messages and asking for your feedback on our services. Most marketing messages we send will be by email or push notifications. For some marketing messages, we may use personal information we collect about you to help us determine the most relevant marketing information to share with you.

Where we rely on consent to send you marketing communications, we will only send you such messages if you have given us your consent to do so. You can withdraw your consent at a later date by clicking on the “unsubscribe” link at the bottom of our marketing emails or by updating your preferences in the settings page of the App or Service.

Data Transfers and Processing Outside Europe

If you are located in the EEA, UK or Switzerland, your personal information may be processed outside of those regions, including in the United States. In the event of such a transfer, we typically try to ensure a degree of protection similar to that applied in your home country is afforded to it by employing one of the following mechanisms:

In limited circumstances, we may rely on an exception, or ‘derogation’, which permits us to transfer your personal information to recipients in such countries despite the absence of an ‘adequacy decision’ or ‘appropriate safeguards’ – for example, reliance on your explicit consent to that transfer.  

If you want further information on the specific mechanism(s) used by us when transferring your personal information, please contact us at support@zenepic.net.  Visit the “Contact Us” section below for contact information.

12. SPECIFIC PROVISIONS FOR CALIFORNIA CONSUMERS

These additional provisions for California consumers apply only to individuals who reside in California.  The California Consumer Privacy Act of 2018 (“CCPA”) and California Privacy Rights Act of 2020 (“CPRA”) provide additional rights to know, access, correct, delete, and opt out, and requires “businesses” collecting or disclosing personal information to provide notice and a means to exercise those rights.

Your California Privacy Rights. California residents have the rights listed below under the CCPA. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Right to Opt Out of Information Sales

We do not “sell” information about our users as most people would commonly understand that term.  However, consistent with common practice among companies that operate online, we do “share” information in the sense that we allow certain third-party advertising networks and other third-party businesses to collect and disclose your personal information directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us. These third parties use your personal information for purposes of analyzing and optimizing our Service and advertisements on our websites, on other websites or mobile apps, or on other devices you may use, to personalize content or to serve ads that may be more relevant to your interests, and to perform other advertising-related services such as reporting, attribution, analytics and market research.  To learn more about how third parties collect information automatically on our Site and the choices you may have in relation to those activities, please see our Online Advertising section, above.

How to Exercise Your Rights

To exercise your right to know, right to access, right to correct, right to delete, right to opt out of information sales, or any other right you may have under applicable law, please submit a request by emailing support@zenepic.net or by writing to us at the physical address in the “Contacts” section below, with the subject line “California Rights Request” and specifying which right(s) you would like to exercise (for example, your right to delete).  We will need to verify your identity before processing your request. In order to verify your identity, we will generally require the matching of sufficient information you provide us to the information we maintain about you in our systems. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us.

We aim to respond to a consumer request within 45 days of receiving that request. If we require more time, we will inform you of the reason and extension period in writing.

Personal Information That We Collect, Use and Disclose. The chart below summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA, and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. See Sections 1-3 of our Privacy Policy for additional details. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below. We do not intentionally collect or seek to elicit “sensitive personal information” under the CPRA.

Category of Personal Information Collected

Source(s) of Personal Information

Business Purpose(s) for Collection

Categories of Third Parties to Whom We Disclose the PI for a Business Purpose

Identifiers, such as name, user name, email address and other contact information, IP address, and online identifiers (like advertising IDs and cookies)

You or your device(s) Advertising partners Affiliates

• Service delivery

• Delivery of advertisements

• Technical support

• Customer support

• Processing payments

• Analytics

• Business research & development

• Marketing & promotions

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Your specified recipient(s)

• Government entities/law enforcement

• Advertising partners shared* for interest based advertising

Additional California Customer Records, such as address book information

You or your device(s)

• Service delivery

• Analytics

• Business research & development

• Marketing & advertising

• Affiliates

• Your specified recipients

Characteristics of Protected Classifications, such as age or gender

You or your device(s)

• Service Delivery

• Delivery of advertisements

• Analytics

• Business research & development

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Your specified recipient(s)

• Government entities/law enforcement

• Advertising partners shared* for interest based advertising

Commercial Information, such as purchase history, in-app purchases, or other purchasing or consuming histories or tendencies  

You or your device(s)

• Service Delivery

• Delivery of advertisements

• Analytics

• Business research & development

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Your specified recipients

• Payment processors

• Advertising partners shared* for interest based advertising 

Internet or Network Information, such as information regarding interactions with a website, application, or advertisement

You or your device(s)

• Service delivery

• Delivery of advertisements

• Analytics

• Business research & development

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Your specified recipients

• Government entities/law enforcement

• Advertising partners shared* for interest based advertising

Geolocation Data, such as city or county-level geolocation information

You or your device(s)

• Service delivery

• Delivery of advertisements

• Analytics

• Business research & development

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Your specified recipients

• Government entities/law enforcement

• Advertising partners shared* for interest based advertising

Inferences, such as the derivation of information, data, or assumptions from the categories of personal information included above

You or your device(s)

• Service delivery

• Delivery of advertisements

• Analytics

• Business research & development

• Platform protection & fraud prevention

• Compliance with legal obligations

• Service providers

• Affiliates

• Advertising partners shared* for interest based advertising 

* Pursuant to the CPRA and as further described above, this information is “shared” with advertising partners for interest-based advertising.

13. CHANGES TO THIS POLICY

We may update this Policy to reflect changes to our data and information privacy practices. If we make any material changes, we will notify you by means of a notice on the Services prior to the change becoming effective. We encourage you to periodically review this Policy for the latest information on our privacy practices. Please note that if we need to adapt the Policy to legal requirements, the new Privacy Policy will become effective immediately or as required.

14. CONTACT US

Our Data Protection Officer

You may contact us at support@zenepic.net