Privacy Policy

Last updated: March 12, 2026

This Privacy Policy (“Policy”) describes how EmoGen (“EmoGen”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information when you access or use the EmoGen application, website, and related services (collectively, the “Service”). It also explains your privacy rights and the choices available to you regarding the use of your information.

When you use the Service, we may collect and process certain information relating to you, including information that identifies or can reasonably be linked to an individual (“Personal Data”). We use this information to operate, maintain, and improve the Service, including providing AI-powered content generation, enhancement, and transformation features, as well as supporting the overall functionality and performance of the Service.

This Policy forms part of and is incorporated into our Term of Service (“Terms”), which are available at https://www.kacha.ai/useragreement.html. By accessing or using the Service, you acknowledge that your information may be collected and used in accordance with this Policy.

What Personal Information We Collect

We collect several types of information in order to provide, operate, and improve the Service. The types of information we collect depend on how you interact with the Service and the features you use.
1. Information You Provide to Us
  
  We collect information that you voluntarily provide when using the Service, including:
  1. User Content. During the use of the Service, When you use the AI-powered features of the Service, you may provide content such as prompts, text inputs, images, videos, or other materials (collectively, “User Content”). This content is processed in order to generate the outputs you request and to enable the functionality of the Service. User Content may include images or videos that contain identifiable individuals, including facial features (“Facial Data”). You are responsible for ensuring that you have the necessary rights, permissions, or consents to upload and use such content through the Services. Such content is processed solely for the purpose of responding to your request and generating AI-powered results , and enabling the functionality of the Service.
  2. Registered information. In order to register and create an account on the Service, we may collect your email address or third-party platform account information. When creating an account, we may request personal information from you, including but not limited to your username, password, email address, and phone number.
  3. Communication information. When contacting us for customer or technical support, or to express your opinions about our service via our feedback channel, we may collect the information contained in your message, such as your name, contact details, and any other personal information you choose to provide. This may include personal information, such as your email address and other information provided by you when communicating with us.
  4. Billing Information, such as billing address, subscription plan, or transaction identifiers associated with your purchases made through the Services.
2. Information Collected Automatically
  
  When you access or use the Service, we may automatically collect certain technical and usage information, including:
  1. Usage Details. This encompasses information pertaining to the resources accessed and utilized by the user on or through the Service, including but not limited to IP address and logs.
  2. Device Information. We may obtain information regarding your mobile device and internet connection, such as the unique device identifier, operating system, browser type, and mobile network information.
  3. Cookies and Similar Technologies. We may utilize cookies to gather information regarding your interactions with our Service For more information about how we use cookies and similar technologies, please refer to the Section 6 (Cookies and Similar Technologies).
3. Information from Third Parties
  
  We may receive certain information about you from third parties in connection with the operation of the Service, including:
  1. Third-Party Login Services. If you choose to register or log in through a third-party account, we may receive limited profile information associated with that account, such as your user name or email address.
  2. Payment Processors. If you make purchases through the Service, payment transactions may be processed by third-party payment providers. These providers may share limited information with us, such as payment confirmation, transaction identifiers, or subscription status. We do not store full payment card numbers or other sensitive financial information.
  3. Service Providers and Partners. We may receive information from service providers that support the operation of the Service, such as analytics providers, infrastructure providers, or other technical partners.
  The information we receive from third parties may be combined with other information we collect about you in order to operate and improve the Services.
How We Use Information
1. Purpose of Processing
  
  We use the Personal Data we collect to operate and improve the Services, provide requested features, ensure security and compliance, and fulfill our legal and contractual obligations. Depending on your jurisdiction, we may rely on your consent, contractual necessity, legitimate interests, or other lawful grounds to process your Personal Data as described below.
  1. To Provide and Operate the Service. To create and manage user accounts, authenticate users, process payments or subscriptions, maintain platform functionality, and enable access to the features and services we provide. We process User Content in order to generate, enhance, transform, or otherwise produce AI-generated outputs based on your request. To enable these features, our systems may analyze visual or textual elements contained in the submitted content, including Facial Data where applicable. Processing of Facial Data is strictly limited to the purpose of generating the requested AI outputs and supporting the functionality of the Service. We do not use Facial Data to identify individuals, create biometric templates, or for any other purposes unrelated to fulfilling your requests.
  2. To Improve and Develop the Service. We may use information to analyze usage patterns, monitor system performance, troubleshoot technical issues, and develop new features or improvements to the Service.
  3. To Communicate with You. We may use your information to respond to customer support inquiries, provide service-related notifications, or send important administrative communications.
  4. To Maintain Security and Prevent Misuse. We may use information to detect, investigate, and prevent fraud, abuse, unauthorized access, or other harmful activities affecting the Service.
  5. To Comply with Legal Obligations and Enforce Our Policies. We may process Personal Data where necessary to comply with applicable laws, regulations, legal processes, or governmental requests, and to enforce our Terms of Service, the Policy, or other agreements.
2. Legal Purpose
  
  Depending on your jurisdiction, we may process your Personal Data based on legal obligations, contractual necessity, your consent, or our legitimate interests in operating, maintaining, and improving the Service. This includes processing information to provide AI-powered content generation, enhancement, and transformation features, maintain functionality, prevent abuse or fraud, and comply with applicable laws and regulations.
  
  We process Personal Data solely for the purposes described in the Policy and take reasonable steps to ensure that such processing is proportionate, necessary, and aligned with your rights and expectations.
3. Permissions You May Be Asked to Authorize
  
  To provide you with enhanced and efficient Services, we may request your authorization to access certain device capabilities or information. Your consent allows us to collect and use such information based on principles of minimal data collection necessary to provide the requested features. These permissions may include, for example, access to your camera or microphone for content creation, storage for reading or saving images and videos, network status to enable connectivity, notifications for service messages, device identifiers for feature optimization, and location information to improve service relevance.
  
  You can manage, enable, or disable these permissions in your device or application settings at any time. Disabling a permission may limit your ability to use certain features of the Service, but will not affect any data you have previously provided. All data collected through such permissions is handled in accordance with the Policy and applicable laws.

How We Share Information

We may share information we collect in the following circumstances:

Third-Party Service Providers

EmoGen may share information with third-party vendors and service providers that perform services on our behalf, such as cloud hosting, storage, infrastructure services, analytics, payment processing, and AI-powered feature support. The specific purposes and restrictions for sharing information with key categories of providers are summarized in the table below:

Provider Type	Provider	Purpose	Processing & Restrictions
Cloud / Storage / Infrastructure	Amazon Web Services, Inc., Alibaba Group Holding Limited	Provide cloud hosting, data storage, and infrastructure services for the operation of the Service	Process data only to provide infrastructure services; cannot use data for independent purposes
Payment Processors	Stripe, Inc., Alibaba Group Holding Limited, Google Pay, Apple Pay	Process payments, manage subscriptions	Limited payment information shared; no storage of full card numbers; subject to provider privacy policies
AI Model Providers	OpenAI, L.L.C., Google LLC, Kuaishou Technology, ByteDance Ltd., Midjourney, Inc., Anthropic PBC, MiniMax Group Inc., AIsphere (Hong Kong) Limited	Process User Content to generate requested outputs	To generate outputs or support functionality of AI-powered Services. Providers act only on our instructions, cannot retain Facial Data beyond processing duration, and may not use it for independent purposes such as model training, analytics, profiling, marketing, or product development
Media	VideoLAN (libmpv)	Support high-performance playback and rendering of local and network video streams, including complex encoding formats	Used solely for media playback functionality and does not collect, store, or process any Personal Data.

All third-party providers act exclusively on our behalf as data processors. Any processing they perform is strictly limited to what is necessary to provide the requested services or outputs. Providers are not permitted to retain Personal Data, including Facial Data, beyond the period required to deliver the services, nor may they use such data for their own purposes. Temporary caching that occurs during processing is controlled, time-bound, and automatically deleted once processing is complete.

From time to time, we may engage additional service providers in different jurisdictions to support new features, optimizations, or operational needs. All such future providers will act solely on our behalf as data processors under written agreements requiring them to follow our instructions, implement adequate safeguards, and ensure lawful cross-border transfers. These future providers are subject to the same restrictions described above, and we may update the Policy to reflect any new service providers as necessary.

Affiliates, subsidiaries, and Social Media Sharing

We may share certain information with our affiliates and subsidiaries for the purposes of operating, maintaining, and improving the Services, and to support the functionality of the platform. These internal entities are required to handle your information in accordance with this Policy and applicable law.

If you choose to share content on social media platforms, or use a third-party login to access the Services, the corresponding third parties may receive the information you provide or generate. Any information shared in this manner is governed by the privacy policies of those third parties, and we are not responsible for how they handle such data.
Business Transfers

In connection with a merger, acquisition, sale of assets, reorganization, or similar business transaction, we may transfer your information to the acquiring entity or successor organization. Any transferred information will remain subject to contractual confidentiality obligations and the Policy to the extent legally required.
Legal Compliance and Protection

We may disclose information when we believe it is necessary to comply with applicable laws, regulations, or legal obligations, or in response to lawful requests from government authorities, regulators, or law enforcement. Such disclosures may also be made to protect the rights, property, safety, or security of EmoGen, our users, or others, or to prevent fraud, abuse, or other unlawful activities.
With Your Consent or Direction

We may share information with third parties when you explicitly request or direct us to do so, or when you otherwise provide your consent.

We may share aggregated, de-identified, or anonymized information with third parties for research, analytics, or other legitimate business purposes. Such information cannot be used to identify any individual and is separate from the sharing of Personal Data with service providers described above.

Data Retention

We retain Personal Data and other information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to enforce our agreements and policies, to resolve disputes, or as otherwise permitted or required by law. Retention periods may vary depending on the type of data and applicable jurisdiction.
1. Marketing Data
  
  Information collected for marketing purposes, such as email addresses or communication preferences, is retained until you unsubscribe. Once you unsubscribe, your contact information is added to a suppression list to ensure that we respect your request.
2. User Interactions and Content
  
  We may retain information about your interactions with the Services, including content you upload, generate, post, or share (e.g., images, videos, text prompts, comments, and support tickets) to support legal claims, audits, or crime prevention.
  
  Facial Data and associated uploaded content are retained only for the minimum time necessary to process your request and generate AI-powered outputs. AI-generated results themselves are not stored beyond what is required to provide the Service. To perform this processing, your content may be transmitted to trusted third-party AI providers who act strictly as data processors under written agreements. These providers are contractually prohibited from retaining Facial Data beyond the duration required to complete your request and from using it for any other purposes, including model training, analytics, profiling, or marketing. Once the requested output has been delivered, uploaded content and Facial Data are automatically deleted from our systems and any third-party processors within a short retention window, generally no later than thirty (30) days. Notwithstanding the foregoing, if retention is required to comply with legal obligations, we will retain the data only for the period strictly necessary to meet that obligation.
3. Web and Behavioral Data
  
  Data collected via cookies, analytics, or other technical tools is generally retained for up to one year from the date of collection or the expiration of the cookie, unless a longer period is required by law.
4. Payment Information
  
  Limited payment information may be retained to complete transactions, comply with legal obligations, or resolve disputes. Full card numbers and sensitive payment credentials are never stored.
5. Support Records
  
  Support recordings may be retained for up to six (6) years if required by applicable law.
We periodically review our retention practices to ensure compliance with applicable laws, minimize data storage, and protect your information. For questions regarding retention periods or how long specific data is held, please contact us using the methods provided in Section 11 (Contact Us).
Your Rights

Depending on your jurisdiction, you may have certain rights regarding your Personal Data, including the right to access, correct, delete, or restrict the processing of your information. These rights are intended to give you greater control over your Personal Data and how it is used.
1. Access and Data Portability
  
  You may request access to the Personal Data we hold about you and obtain a copy of such data in a structured, commonly used, machine-readable format. This includes information you provide, data generated through your use of the Services, and related account information.
2. Correction
  
  You have the right to request correction or updating of your Personal Data if it is inaccurate, incomplete, or outdated. This includes information associated with your account and any User Content you have uploaded or generated.
3. Deletion
  
  You may request the deletion of Personal Data that we hold, including any information you provide or generate through the Services. You can submit such requests directly within the Services through your account settings, or by contacting us using the methods provided in Section 11 (Contact Us). We may require verification of your identity before processing your request. While we will take reasonable steps to comply with your deletion request, please note that we may retain certain Personal Data to the extent necessary to:
  - Comply with applicable legal obligations;
  - Resolve disputes, enforce agreements, or protect our legal rights;
  - Maintain anonymized or aggregated data that cannot be linked to you personally;
  - Support legitimate operational or security purposes of the Services.
4. Restriction of Processing
  
  You may request that we temporarily restrict the processing of your Personal Data, for example while we verify a deletion or correction request or to comply with legal requirements.
5. Objection
  
  You have the right to object to certain types of processing, including processing for direct marketing purposes or automated decision-making where applicable. Upon receiving a valid objection, we will cease the specified processing unless otherwise required by law.
6. Withdraw Consent
  
  Where you have provided consent for certain processing activities, including use of Facial Data for optional features, you may withdraw your consent at any time. Withdrawal of consent does not affect processing performed prior to the withdrawal.
7. Complaints
  
  You have the right to lodge a complaint with a competent data protection authority if you believe that our processing of your Personal Data violates applicable law.
Please note that your ability to exercise these rights may be subject to limitations under applicable law. Even when you exercise your rights, certain data may need to be retained for legal, regulatory, or legitimate business purposes as described above.

To exercise any of the rights described above, please contact us using the methods set out in Section 11 (Contact Us). We may require verification of your identity to ensure that your Personal Data is protected and that requests are fulfilled appropriately. Upon verification, we will respond to your request without undue delay and in accordance with applicable law.
Cookies and Similar Technologies

We use cookies and similar technologies, such as web beacons, pixels, and local storage, to collect certain information automatically when you access or interact with the Services. These technologies help us recognize your device, maintain secure sessions, remember your preferences, and better understand how users interact with the Services.

Cookies may be used to support the core functionality of the Services, improve performance and reliability, and analyze usage patterns so that we can enhance the user experience and continue to develop and improve our products. You can control or disable cookies through your browser or device settings. Please note that if you choose to block or disable certain cookies, some features or functionality of the Services may not operate properly.
Data Security

We take the protection of your Personal Data seriously and implement appropriate technical, administrative, and organizational measures to safeguard it against unauthorized access, use, disclosure, alteration, or destruction. These measures are designed to protect data both in transit and at rest, and are regularly reviewed and updated in line with industry best practices.

Despite these safeguards, no method of transmission over the Internet or method of electronic storage is completely secure. Therefore, while we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account. In the event of a data security incident that affects your Personal Data, we will take reasonable steps to investigate the matter, mitigate potential risks, and comply with applicable legal obligations regarding breach notification.
International Data Transfers

The Personal Data we collect is stored and processed on our servers, or on the servers of our partners, affiliates, and third-party service providers. Your information may be processed or stored in jurisdictions outside your country of residence, including locations where the laws may not provide the same level of protection as in your home jurisdiction. When Personal Data is transferred across borders, we implement appropriate safeguards to ensure that your information is protected in accordance with applicable data protection requirements. These safeguards may include, but are not limited to, contractual agreements with third-party processors, adherence to recognized data transfer frameworks, or other legally recognized mechanisms to ensure an adequate level of protection.

By using the Services, you acknowledge and agree that your information may be transferred, stored, and processed in countries other than your country of residence, in accordance with the Policy and applicable law.
Children's Privacy

EmoGen is not intended for or directed at children under 13, and we do not knowingly collect personal information from children under the age of 13. If you are under the age of 13, please do not submit any personal information through the Services. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Policy by instructing their children never to provide Personal Data on the Services without their permission. If you are aware of anyone younger than 13 using our Services, or if you have reason to believe that a child under the age of 13 has provided personal information to EmoGen through the Services, please contact us at support@emogen.ai, and we will endeavor to delete that information from our databases.
Changes to This Policy

EmoGen may update our Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new privacy policy on this page. Your continued use of the Services after any updates to the Policy constitutes your acknowledgment of the revised Policy, to the extent permitted by applicable law.
Contact Us

If you have any questions, concerns, or requests regarding the Policy or our processing of Personal Data, please contact us at support@emogen.ai.