Privacy & Data Use

Privacy Policy

Last updated: July 21, 2026

This Privacy Policy explains how CatooAI ("CatooAI", "Catoo", "we", "us", or "our") collects, uses, discloses, stores, and protects personal information when you use our mobile app, websites, AI creation tools, subscription features, payment flows, and related services.

We designed this policy to clearly explain what data we collect, how we collect it, why we use it, which third parties may receive it, how long we keep it, and how you can request access, deletion, or withdrawal of consent.

Account and Data Deletion

CatooAI users can request deletion of their account and associated eligible data either in the CatooAI app or by email. You do not need to reinstall the app to submit an email request.

Request deletion in the CatooAI app

  1. Sign in and open User Center.
  2. Open Account Security, then select Delete Account.
  3. Confirm the account, review the deletion terms, and submit the request.

Request deletion by email

Email support@catoo.ai from the address registered to your CatooAI account. Use the subject “CatooAI account deletion request” and include the registered email address. We may request reasonable information to verify account ownership before processing the request.

Deletion scope and retention

  • The account enters a three-day cancellation period after a verified request. Signing in and restoring the account during this period cancels the request.
  • If the request is not canceled, we delete or de-identify eligible profile data, sign-in identifiers, avatars, prompts, AI chat and creation history, uploaded content, generated outputs, and unused virtual credits associated with the account.
  • You may delete individual generated items from your history without deleting your account.
  • We may retain limited purchase, invoice, tax, refund, chargeback, fraud-prevention, security, and legal-compliance records for the period required by applicable law or until the related dispute or investigation is resolved. Retained records are restricted to those purposes.

1. How We Collect Information

We collect information in three main ways:

  • Directly from you when you create an account, sign in, upload content, make a purchase, contact support, or manage your preferences.
  • Automatically from your device, browser, or app usage, such as device type, app version, IP address, crash logs, and security events.
  • From authorized third parties or partners, such as Apple, Google, app stores, payment processors, or other providers you choose to use with CatooAI.

2. Information We May Collect

  • Account and profile information, including email address, display name, avatar, account preferences, and login provider identifiers.
  • Sign-in information shared by providers such as Sign in with Apple or Google Sign-In, limited to the information you authorize them to share.
  • Purchase, subscription, and billing data, including plan details, order records, invoices, app store receipts, purchase confirmation tokens, and payment status. We do not receive your full payment card number from our processors.
  • Creative content, such as prompts, reference images, uploaded files, edits, and generated outputs that are necessary to provide AI features you request.
  • Diagnostics and service data, such as device model, operating system, browser type, app version, log records, crash reports, and fraud prevention signals.
  • Location or map-related information only if you choose a feature that requires it and grant the necessary permission.
  • Permission-based data, such as camera, photo library, files, or notifications, only when you choose a feature that needs those capabilities.

3. Photos, Face Data, and AI Inputs

Some CatooAI features allow you to upload portraits, ID photos, selfies, or other images that may contain faces or other biometric-like visual information. We process that content only when you choose those features.

  • We use uploaded photos, prompts, and reference files only to deliver the AI generation, editing, restoration, or enhancement you request.
  • We do not use uploaded photos or generated outputs to identify you, infer sensitive traits, or build advertising profiles.
  • We do not use your uploaded photos, prompts, or generated content to train our models unless we separately request and receive your explicit permission.
  • Original uploads are retained only for as long as needed to complete the requested task, troubleshoot a failed request, prevent abuse, or comply with legal obligations. Generated outputs may remain in your account until you delete them or your account is deleted.

4. How We Use Information

  • Provide, operate, and improve account, generation, editing, sharing, and subscription features.
  • Authenticate users, maintain account security, prevent fraud, detect abuse, and enforce our terms.
  • Process purchases, verify subscriptions, maintain financial records, and handle refunds or disputes.
  • Respond to support requests, send service notices, and communicate important updates such as policy or purchase status changes.
  • Analyze reliability, fix bugs, improve performance, and maintain safe operation of our apps and websites.
  • Comply with applicable law, lawful requests, and our regulatory or contractual obligations.

5. Sharing and Third-Party Services

We do not sell personal information. We may share limited data with trusted service providers only where necessary to operate the service or comply with law.

  • Authentication providers such as Apple or Google when you use those sign-in options.
  • Payment and billing providers, app stores, or processors such as Apple, Stripe, PayPal, or equivalent providers used on your platform or in your region.
  • AI infrastructure and model providers, including Google Gemini, OpenAI GPT models, and Seedance services provided through Volcengine or BytePlus, that process prompts and uploaded content solely to generate or edit the outputs you request. For transparency, current provider terms are available from Gemini API Terms, OpenAI Services Agreement, and BytePlus Video Generation Model Services Terms.
  • Cloud hosting, storage, content delivery, security, logging, email, mapping, or customer support providers that help us operate CatooAI.
  • Courts, regulators, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the service.
Any third party that processes user data on our behalf is required to protect that data with the same or an equivalent level of protection described in this Privacy Policy and required by applicable law.

6. Data Retention, Deletion, and Security

  • We keep account records, subscription history, and generated content for as long as your account remains active and the data is needed to provide the service.
  • Temporary uploads and processing artifacts are deleted or de-linked when they are no longer required for generation, support, security, or legal compliance.
  • You can delete generated content from your history or follow the Account and Data Deletion steps above to request deletion of your account and eligible personal data.
  • We may retain specific records longer when necessary for tax, accounting, dispute resolution, chargeback defense, fraud prevention, or other legal obligations.
  • We use reasonable administrative, technical, and organizational safeguards to protect personal information from unauthorized access, loss, misuse, or disclosure.

7. International Transfers and Your Rights

Depending on where you live, you may have the right to access, correct, delete, or request a copy of your personal information, or to object to or restrict certain processing. You may also withdraw consent for optional processing and manage device permissions such as camera, photos, notifications, or location in your device settings.

Because our service may rely on global infrastructure providers, your information may be processed in countries other than your own. When this happens, we use appropriate contractual, technical, and organizational safeguards required by applicable law.

8. Children, Changes, and Contact

CatooAI is not directed to children under the age allowed by applicable law to consent to data processing on their own. We do not knowingly collect personal information from children without proper authorization. If you believe this has happened, please contact us so we can review and delete the data where required.

We may update this Privacy Policy from time to time. When required, we will notify you of material changes through the app, website, email, or other reasonable means before the changes take effect.

For privacy requests, consent withdrawal, or deletion requests, contact us at support@catoo.ai.