Viral AI

Effective date: July 4, 2026 · Last updated: August 18, 2026

This Privacy Policy describes how Viral AI (“we,” “us,” or “our”) handles information when you use our mobile application Viral AI – Video & Avatar (the “App”) and related services (together, the “Services”).

We designed the App so you can create AI face-swap videos from bundled sample clips without creating an account. This policy is written in plain language so you can understand what happens to your information.

1. Who we are

Viral AI is operated by the developer of the App (package name com.sunrise.viralai). If you have questions about this policy or your data, contact us at privacy@viral-ai.app.

2. Information we collect

We collect only what is needed to run and monetize the App. We do not ask you to sign up, log in, or provide your name, email, or phone number to use the App.

2.1 Face Photos you provide

When you choose a face from your camera or photo library (a “Face Photo”), the App may automatically resize it on your device to meet processing limits (“Normalization”) and then upload it to our servers so we can run your Swap. Bundled sample faces included in the App stay on your device and are not uploaded unless you select them for a Swap that requires server processing.

Face Photos may contain biometric information (an image of a face). We process them solely to generate your requested video output. Uploading a Face Photo is optional: you can browse the App without providing one. A Swap cannot be created without a Face Photo.

2.2 Hashed device identifier (for jobs and queue)

We receive a hashed device identifier derived from your phone’s operating-system ID (for example, Android ID on Android). We use it to associate Swap Jobs with your installation and to enforce the in-progress job queue (how many Swaps can run at once). It is not an advertising ID and is not used to show or target ads.

2.3 Advertising ID, ads, and related data

The App is ad-supported. We use Google AdMob (the Google Mobile Ads SDK) to show banner, interstitial, native, and rewarded ads. To serve, measure, and (where allowed) personalize ads, Google and its partners may collect:

• Your device’s Advertising ID (a resettable identifier provided by Google Play services).
• App interactions related to ads (for example, that an ad was shown or a reward was earned).
• Approximate location inferred from IP address (we do not request GPS permission for ads).
• Device and app technical information needed to fill and render ads.

This advertising data is collected automatically when you use the App. There is no in-app switch to turn ads off. You can reset or delete your Advertising ID in Android settings (Google → Ads). Rewarded ads are shown only when you choose “Watch ad to continue” to unlock a Swap.

2.4 Analytics

We use Google Firebase Analytics to understand App use and ad performance. Events we record include when a Swap completes (generate), when a rewarded ad is earned, when an interstitial is shown, and paid ad impressions. Firebase may also collect an installation identifier and Advertising ID. Analytics collection is automatic; there is no in-app opt-out.

2.5 Push notification token

We do not currently collect push tokens. If we later enable background alerts when a Swap finishes, we will update this policy and only send a token if you allow notifications.

2.6 Information stored only on your device

The following stays on your phone and is not uploaded to our servers:

• My Swaps — completed videos saved locally for preview and export.
• Recent Face Photos — faces you previously picked for quick reuse.
• Sample Catalog cache — the list of available sample videos, cached for offline browsing.
• Onboarding hints — which coachmarks you have already seen.
• Swap credits — a local count used after you watch a rewarded ad.

Local data is removed when you uninstall the App. It is not synced across devices.

2.7 What we do not collect

• We do not upload videos from your personal library as source material. Swaps use our hosted sample clips only.
• We do not require or store account credentials in the current version of the App.
• We do not sell your personal information for money. Advertising partners may receive identifiers and interaction data as described in Sections 2.3 and 8.

3. How we use information

We use the information described above to:

• Process your Swap requests and deliver Swapped Videos to your device.
• Enforce the Swap queue per device.
• Show ads, measure ad performance, and (where allowed) personalize ads.
• Analyze product use (including successful Swaps and ad events) so we can operate and improve the App.
• Comply with applicable law and respond to lawful requests.

4. How Swaps are processed

When you start a Swap:

• Your normalized Face Photo is sent to our servers.
• We reference the selected sample video from our catalog (identified by a stable sample ID; the video file is hosted on our infrastructure).
• Our systems and selected third-party providers process the Face Photo and sample video to produce your output.

Face Photos are stored on our staging storage while the job runs, sent to our AI processing provider, and deleted from staging after the job succeeds or fails. Job records (including a storage key, sample ID, and hashed device identifier) may remain in our database for operations. This is not in-memory-only processing. Generated videos are delivered to your device; we do not keep them as a long-term cloud library.

5. Third-party service providers

We use third parties to operate the App:

• Google AdMob — advertising. Google may use data as described in Google’s Privacy Policy and How Google uses information from sites or apps that use our services.
• Google Firebase Analytics — usage and ad-performance analytics. See Firebase Privacy.
• Hosting, storage, and content delivery — to run the API, stage Face Photos, and host sample videos.
• AI inference providers — to generate the swapped video from your Face Photo and our sample clip, on our behalf.

Hosting and AI providers process Face Photos only to complete your Swap. Advertising and analytics providers (Google) receive device identifiers and interaction data for their advertising and measurement products, not solely as our processors.

6. Legal bases (EEA, UK, and similar regions)

Where applicable, we rely on:

• Performance of a contract — to provide the Swap you request (including Face Photo processing and the hashed device identifier for the job queue).
• Legitimate interests — to secure the Services, prevent abuse, enforce the queue, and understand App reliability, balanced against your rights.
• Consent — device permissions you grant (camera, photos) and, where required by law, storage of or access to information on your device for advertising and analytics (for example Advertising ID). Personalized ads in the EEA/UK are intended to run only with a valid legal basis under applicable ads rules.

7. Data retention

• Face Photos on our staging storage — deleted after the Swap job succeeds or fails.
• Job records — hashed device identifier, sample ID, status, and related keys; retained as needed to operate the queue and support the App.
• On-device data — kept until you delete it or uninstall the App.
• Advertising and analytics data — retained by Google according to their policies.

8. Sharing of information

We do not sell personal information for money. We share information:

• With Google for advertising and analytics (Advertising ID, app interactions, approximate location via IP, and technical device data), as described in Sections 2.3 and 2.4.
• With hosting and AI inference providers, to process Face Photos and produce Swapped Videos.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, safety, and security of users, the public, or our Services.
• In connection with a merger, acquisition, or sale of assets, with notice where required by law.

9. International transfers

Our servers and third-party providers may process data in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

10. Security

We use technical and organizational measures designed to protect information in transit and at rest on our systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. Your choices and rights

Depending on where you live, you may have rights to:

• Access, correct, or delete certain information we hold.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based (without affecting prior processing).
• Lodge a complaint with a supervisory authority.

Because we do not operate user accounts, many requests can be satisfied by uninstalling the App (which removes on-device data) and contacting us at privacy@viral-ai.app. Include your device type and a description of your request. We may need to verify your request as permitted by law.

You can reset or delete your Advertising ID in your device settings. That does not stop ads; it may make them less personalized.

California residents: We do not sell personal information for money. We may share identifiers and activity data with Google for advertising. You may have additional rights under the CCPA/CPRA; contact us to exercise them.

12. Children’s privacy

The App is not directed to children under 13 (or the minimum digital-consent age in your country). Because the App shows ads and processes Face Photos, it is not intended for child-directed use. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

13. Permissions on your device

The App may ask for:

• Camera — to capture a Face Photo.
• Photos / media — to pick a Face Photo or save an exported video.
• Internet / network — to load the catalog, run Swaps, show ads, and send analytics.

You can revoke camera and photo permissions in your device settings. Some features may not work without them. Ads and analytics use the Advertising ID permission provided by Google Play services.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated in the App where appropriate. Continued use after changes take effect means you accept the updated policy.