Super AI Video Generator

Privacy Policy

Northloop AI LLC

Effective Date: February 10, 2026
Last Updated: September 29, 2026

Northloop AI LLC ("Northloop AI," "we," "us," or "our"), an Illinois Limited Liability Company, operates the Super AI Video Generator mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

Subscription Information: When you subscribe or buy credits, your purchase is processed by Apple and RevenueCat, which provide us with an anonymous subscription identifier, your subscription status, and a record of the App Store transaction. Our servers verify that record and store it under your anonymous account ID (see Section 1.2). We do not collect your name, email address, or Apple ID through purchases.

User-Generated Content: Text prompts you enter for AI video generation, storyboard concepts, and photos you upload for image-to-video generation. These are sent through our servers to our AI providers to generate your videos. For each generation, our servers store the prompt, a record of any photo you uploaded (including a link to the copy held by our video provider), and the link to the generated video, under your anonymous account ID (see Section 4).

Support Messages: Messages you write in the in-app support chat are sent through our servers to Anthropic to generate a reply. We do not save the conversation on our servers; we keep only a daily message count to enforce usage limits. If you email us, we keep your email, including your email address and any Support ID you include, in our support mailbox so we can answer you.

Payment Information: When you purchase a subscription, payment processing is handled entirely by Apple through the App Store and RevenueCat. We do not collect, store, or have access to your credit card numbers, bank account details, or other financial account information.

1.2 Information Collected Automatically

Anonymous Account ID: The App does not require you to create an account or sign in. Instead, it creates an anonymous account ID for your installation (using Firebase Anonymous Authentication). Your credits, generations and verified purchases are kept on our servers under this ID, not under your name or email address.

Device Information: Device type, operating system version, unique device identifiers (such as a random installation ID, the identifier for vendor, and Firebase installation identifiers), and general device settings.

Credits Carried Over or Moved: If you used an earlier version of the App, the App sends your earlier credit balance to our servers once, so it can be carried over, together with a random ID for your installation, the App version, your purchase account ID at our subscription provider (RevenueCat), and the list of purchases the earlier version had already credited (so none is counted twice). Our servers keep that request, including the ID, under your anonymous account ID. When your credits move from one device or installation to another (for example, when you restore purchases on a new device), our servers keep a record of the move: the anonymous account IDs involved, the credits moved, the purchase that confirmed it, and when it happened. We keep it to prevent fraud and to resolve questions about credits.

Approximate Location: The App does not use GPS or Location Services. Our servers' hosting provider and our analytics and advertising partners (Google/Firebase, and TikTok if you allow tracking) receive your IP address and may infer an approximate location from it, such as your country or city.

Advertising Identifier (IDFA): If, and only if, you grant permission through the App Tracking Transparency prompt, we collect your device's Advertising Identifier (IDFA). This is used to measure the effectiveness of our advertising and to attribute app installs to the campaigns that led to them. If you decline the prompt, we do not access your IDFA and this tracking does not occur. You can change this choice at any time in Settings → Privacy & Security → Tracking.

Usage Data: App features accessed, generation history, credits used, subscription status, and interaction patterns within the App. Your generation history, credit balance and purchase records are also kept on our servers under your anonymous account ID.

Crash and Performance Data: Technical logs, crash reports, and performance metrics to improve App stability.

1.3 Information We Do NOT Collect

We do NOT collect biometric data
We do NOT access your contacts, calendar, or messages
We do NOT collect your precise (GPS) location or use Location Services (see "Approximate Location" above)
We do NOT access your microphone or camera beyond explicit image uploads you initiate
We do NOT collect data from other apps on your device

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

Provide Services: Process your text prompts and images through AI models to generate videos
Manage Subscriptions: Verify subscription status, track credit usage, and provide appropriate access levels
Keep Your Generations and Credits: Store your generations, credits and verified purchases under your anonymous account ID so we can deliver your videos, recover interrupted generations, return credits for failed ones, and resolve disputes
Improve the App: Analyze usage patterns to enhance features, fix bugs, and optimize performance
Communicate: Send service-related notifications, respond to inquiries, and provide customer support
Ensure Security: Detect, prevent, and address technical issues, fraud, and unauthorized access
Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. THIRD-PARTY SERVICES

We use the following third-party services to operate the App. Each receives only the data it needs for its function:

3.1 RevenueCat

Purpose: Subscription management and in-app purchase processing
Data Shared: Anonymous user identifiers, subscription status, purchase history, and an Apple Search Ads attribution token that identifies the Apple Search Ads campaign, if any, that led to your install. Our servers link your RevenueCat customer record to your anonymous account ID so your purchases stay with your credits.
Privacy Policy: https://www.revenuecat.com/privacy

3.2 Kie AI

Purpose: AI video generation processing (text-to-video and image-to-video), and optional Director storyboard planning
Data Shared: Text prompts, storyboard concepts, and photos you submit for generation, sent through our servers. Kie AI creates and hosts the resulting videos; the App downloads them from links Kie AI provides.
Privacy Policy: https://kie.ai/privacy-policy

3.3 Anthropic

Purpose: Standard storyboard planning and in-app support chat
Data Shared: Storyboard concepts and support messages you enter, sent through our servers. With each support message, our servers also send your subscription plan and credit balance, so the assistant can answer questions about your account.
Note: Text is processed to generate scene descriptions and support replies; we do not save it on our servers. Anthropic may keep API data for a limited period under its own policies. Anthropic does not train its models on data submitted through its API.
Privacy Policy: https://www.anthropic.com/legal/privacy

3.4 Apple

Purpose: App distribution and payment processing
Data Shared: As per Apple's standard App Store practices
Privacy Policy: https://www.apple.com/legal/privacy

3.5 Google (Firebase and Google Cloud)

Purpose: Hosting our servers and database (Google Cloud / Firebase, in the United States), the anonymous account ID and checks that requests come from a genuine copy of the App (Firebase Authentication and App Check), product analytics (which features are used, where generations succeed or fail) and crash reporting, so we can run the service, fix bugs and improve the app
Data Shared: Our servers store the data described in Section 4 (your anonymous account ID, generation prompts, photo and video links, credits and purchase records), and our hosting provider keeps technical request logs, including IP addresses. Analytics and crash reporting receive app usage events, a Firebase app-instance identifier, and crash diagnostics (device model, OS version, stack traces). We never send your prompts, your photos, or your generated videos to Firebase Analytics or Crashlytics.
Privacy Policy: https://firebase.google.com/support/privacy

3.6 Advertising and Measurement Partners

Purpose: Attributing app installs to advertising campaigns and measuring advertising performance
Data Shared: The Advertising Identifier (IDFA), other device identifiers, device information (such as device model, operating system version and IP address), and related install/event data (including app installs, app launches, first video generation, and purchase events) — only when you consent through the App Tracking Transparency prompt. Apple's privacy-preserving SKAdNetwork attribution may occur without the IDFA even if you decline.
TikTok: We use the TikTok Business SDK (TikTok Pte. Ltd.) to attribute installs from, and measure the performance of, our TikTok advertising. The App starts the TikTok Business SDK only after you allow tracking in the App Tracking Transparency prompt. Until you answer, and if you decline, the SDK is not started and the App sends nothing to TikTok. Privacy Policy: https://www.tiktok.com/legal/privacy-policy
Note: IDFA-based sharing does not occur if you decline tracking.

We do not sell your personal information for money. When you consent to tracking, we may share your Advertising Identifier with the advertising partners above to attribute installs and measure campaign performance; depending on your jurisdiction (e.g. California), this activity may be considered "sharing" for cross-context behavioral advertising. See Section 6.5 for your opt-out rights.

4. DATA RETENTION

Where We Store Data: Our servers run on Google Cloud / Firebase in the United States. What we store there is kept under your anonymous account ID, not under your name or email address.
Generated Videos: Saved on your device in your History. The video files are created and hosted by our video provider (Kie AI). Our servers store the link to each generated video, together with its prompt and settings, so we can deliver it, recover an interrupted generation, and resolve questions about credits. We do not keep our own copies of the video files.
Prompts and Photos: Our servers store the prompt of each generation and a record of each photo you upload (including a link to the copy held by our video provider). Prompts and photos are also sent to the selected AI provider for video generation or storyboard planning; provider-side retention follows that provider's policies. Deleting a video from your History removes it from your device only; it does not delete our server records or provider-side processing records.
Storyboard Concepts and Support Chats: Passed through our servers to the AI provider to generate a response, and not saved on our servers. We keep only daily usage counts, which are deleted automatically. Emails you send to support are kept in our support mailbox.
Purchase Records: Verified App Store transaction records (transaction and product identifiers, dates, and the credits granted) are stored on our servers under your anonymous account ID.
Subscription Data: Anonymous subscription identifiers and status are retained by our subscription processor (RevenueCat) while your subscription is active.
How Long We Keep It: We keep the server data described above for as long as needed to provide the service and resolve disputes (for example, about credits, refunds, or purchases). You may request deletion at any time (see Section 6.3).
Usage Analytics: Aggregated, anonymized data may be retained indefinitely for service improvement.

5. DATA SECURITY

We implement robust security measures to protect your information:

Encryption in Transit: All data transmitted between the App, our servers, and third-party services uses TLS/SSL (HTTPS) encryption
Encryption at Rest: Sensitive data stored on your device uses iOS Keychain with AES-256-GCM encryption
Access Controls: API communications are authenticated and validated. Our database cannot be read or written by the App directly; only our servers can access it. Every request from the App must carry its anonymous account sign-in and pass Firebase App Check, which confirms it comes from a genuine copy of the App
Integrity Verification: We employ data integrity checks to protect against tampering
Security Monitoring: Runtime security measures detect compromised environments

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. YOUR RIGHTS AND CHOICES

6.1 Access and Portability

You may request access to the personal information we hold about you.

6.2 Correction

You may request correction of inaccurate personal information.

6.3 Deletion

You may request deletion of your personal information by emailing us at privacy@northloopai.com or through Account → Contact Support in the App. Because the App has no login, please include the Support ID shown on the App's Account screen (below Contact Support): it is how we find the data stored under your anonymous account ID. Using that Support ID, we delete what our servers keep under the account: your generation records (prompts, photo records and video links), upload records, any request to carry over an earlier balance, and usage counters. Your credit balance is set to zero, and deleted credits cannot be restored. We keep only the records we need for fraud prevention and accounting: purchase and refund records, records of credits moved between devices, account review decisions (which include a copy of any carry-over request that was reviewed), and a record that the deletion took place with the reason for it; free-text notes about you in the records of credits moved and of account reviews are removed. The emptied account keeps only what stops credits from being claimed twice (for example an unpaid refund balance and the waiting period between device moves), and the anonymous sign-in itself remains until you delete the App. If a generation is still in progress, we complete the deletion once it has finished. Deleting the App removes your History from your device but does not delete data on our servers. Data held by our providers follows their own policies (see Section 3).

6.4 Opt-Out

You may opt out of promotional communications by following unsubscribe instructions or contacting us.

6.5 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of the sale or sharing of personal information. We do not sell personal information for money. We may share your Advertising Identifier for advertising attribution only with your consent — you can opt out at any time by declining the App Tracking Transparency prompt or turning off tracking in Settings → Privacy & Security → Tracking.
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit use of sensitive personal information

To exercise these rights, contact us using the information below. We will respond within 45 days.

6.6 European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Rights related to automated decision-making

Legal Basis for Processing: We process your data based on:

Contract performance (providing our services)
Legitimate interests (improving our services, security)
Consent (where required)

To exercise any of these rights, contact us at the address below.

6.7 Illinois Residents (BIPA)

We do not collect biometric identifiers or biometric information as defined under the Illinois Biometric Information Privacy Act.

7. CHILDREN'S PRIVACY

The App is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn we have collected personal information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers (Google Cloud / Firebase) are located and where data protection laws may differ. By using the App, you consent to such transfers.

For EEA users, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

9. TRACKING AND ADVERTISING

With your consent through Apple's App Tracking Transparency (ATT) framework, we use your device's Advertising Identifier (IDFA) to measure advertising performance and attribute app installs to the advertising campaigns that drove them. This may involve sharing the IDFA and related install/event data with advertising networks and measurement partners for these purposes.

This tracking occurs only if you allow it when prompted. The App starts the TikTok Business SDK only after you allow tracking; until you answer the prompt, and if you decline, it is not started and nothing is sent to TikTok. If you decline, or later disable tracking in Settings → Privacy & Security → Tracking, we do not access your IDFA and we do not perform this attribution. Declining does not limit your access to any App feature.

Because standardized browser "Do Not Track" signals are not uniformly recognized, the App does not respond to them; your ATT choice above is the controlling setting for advertising tracking in the App.

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the new Privacy Policy in the App
Updating the "Last Updated" date
Sending a notification through the App for significant changes

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

11. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Northloop AI LLC
Email: privacy@northloopai.com
Illinois, United States

For data protection inquiries, please include "Privacy Request" in the subject line.

For GDPR-related inquiries, you may also contact our Data Protection contact at the email above.

12. DISPUTE RESOLUTION

Any disputes arising from this Privacy Policy shall be resolved in accordance with our Terms of Service. You may also file a complaint with your local data protection authority.

13. GOVERNING LAW

This Privacy Policy is governed by the laws of the State of Illinois, United States, without regard to its conflict of law provisions.

By using Super AI Video Generator, you acknowledge that you have read and understood this Privacy Policy.

Questions about this document? info@northloopai.com