Privacy Policy

Last updated: October 3, 2026

1. Who We Are

Ottoman Studio (the "App") creates short Ottoman-themed videos from a user's photo. The App is published by Vildan Ekşi. Contact: yds5000kelime@gmail.com.

2. Data We Process

2.1. The photo you choose

To create a video you pick a photo from your camera or library. It is processed only with your consent and only to create your video (see Section 3).

2.2. An app-generated device ID

On first launch the App creates a random ID (UUID) stored on your device. We use it to keep your credit balance, purchases and in-progress video jobs. It is not the advertising identifier (IDFA), does not identify you personally and is not linked across apps.

2.3. Purchase information

Credit packs are sold through the Apple App Store. Your payment details never reach us. Which pack was bought is sent to our server through Apple and RevenueCat so the credits can be added.

2.4. Device check for the free video

New users get one free video. To prevent the same phone from claiming it repeatedly we use Apple's DeviceCheck service: Apple stores only two yes/no flags per device. These flags contain no personal data.

2.5. Notifications

If you allow notifications, we store the push token provided by Apple so we can tell you when your video is ready. You can turn this off at any time in iOS Settings.

2.6. Technical records

Your IP address is used in short-lived counters to prevent abuse. Job records (job ID, status, video link) are deleted after 24 hours. Daily totals (e.g. how many videos were made) are kept without being linked to a person.

2.7. Data we do not collect

• Name, email, phone, date of birth — there is no account.
• Location, contacts, microphone recordings.
• Advertising ID (IDFA), cookies, tracking.
• Third-party analytics (Firebase, Google Analytics, etc.).

3. Your Photo and Face Data

3.1. How it is processed

1. Your photo is uploaded through our server (Cloudflare Workers) to fal.ai storage as a temporary file.
2. To use the right version of the scene (e.g. bearded or clean-shaven), the facial hair of the person in the photo is classified automatically by an image-understanding model (Google Gemini) running via fal.ai. The result is only "none / light / full" and is not stored.
3. Face-swap software on a RunPod GPU server finds the face in your photo and places it on the character in the scene. A mathematical representation of the face is created in memory only for the duration of this processing and is not stored.
4. The finished video is uploaded to fal.ai storage; the App downloads it immediately and saves it on your device.

3.2. Retention

• Ottoman Studio servers: the photo is not stored.
• fal.ai: the photo and the generated video are uploaded as temporary files with a 24-hour deletion setting.
• RunPod: the photo exists only in the server's temporary memory during processing.
• Your device: generated videos stay in the App's gallery and in Photos until you delete them.

3.3. What we do NOT do with face data

• No identification, person recognition or matching against any database.
• No emotion, age, ethnicity analysis or profiling.
• No model training on your photos.
• No selling, advertising use or sharing with anyone else.

3.4. Your consent

Before your photo is sent for the first time, the App shows a screen naming the service providers and the points above and asks for your explicit consent. If you decline, no video is created.

4. Service Providers

• Cloudflare — server infrastructure ( privacy).
• RunPod — face-swap processing on GPUs ( privacy).
• fal.ai — temporary file storage, the image-understanding model, and photo portraits in older versions ( privacy).
• Apple — App Store purchases, DeviceCheck, notifications.
• RevenueCat — purchase validation and the purchase screen ( privacy).

These providers process your data only to provide the service. We do not sell your data or share it with advertisers.

5. Security

• All communication is encrypted over HTTPS.
• Service-provider keys are kept only on our server, never in the App.
• Files are not publicly listed; they are reachable only through unguessable random links.

6. Children's Privacy

The App is not designed for children under 13. If you believe we have processed data of a child under 13, write to yds5000kelime@gmail.com.

7. Your Rights

For access, correction or deletion requests under GDPR or Turkish KVKK, write to yds5000kelime@gmail.com. If you made a purchase, include the order ID from Apple's receipt so we can find and delete your records. Deleting the App removes all App data from your device.

8. Changes to This Policy

We may update this policy; the date is shown at the top.

9. Contact

yds5000kelime@gmail.com