Privacy Policy

1. What We Access

• Activity data: activity name, start time, duration, distance, and (where available) route, elevation, pace, and other workout statistics from a connected activity source or a FIT activity file you explicitly select. Used only to identify the time window for photo matching and to render in-app statistics and videos on your device. FIT files and imported activity values are processed and stored locally on your device and are not uploaded to ActivArt.
• Device photo gallery: photos whose capture timestamp falls within an activity's time window, plus any photo you add to an activity yourself, by importing it from your gallery, taking it in the app, or sharing it into ActivArt from another app. The app reads pixels only when you explicitly trigger photo processing.
• Account authentication: when you sign in with Google or Apple, we receive your email address. This is stored in our VPS database (encrypted with AES-256-GCM; a keyed hash is used as the lookup key so the plaintext is never exposed to SQL queries) and is used to identify your account for quota management and account deletion.
• Usage tracking: local and cloud-synced usage counts for AI image generations, AI video generations, stats overlays, custom logos, and on-device video generations, used to enforce free-tier allowances and Premium quotas. Linked to your account email but contains no other personal data.
• Activity source status: which kind of activity source you have connected, if any, and how many activities the app has received from it. No activity details are included. Used only to send you a reminder when no activities have come through, so you can check your connection.
• Subscription identifier: to manage ActivArt Premium and Custom Logos purchases, we use a randomly generated anonymous identifier (a UUID) as your purchase account ID. This identifier is never your Firebase UID or your email address.
• Promotional codes: an offer link may carry a plaintext code in its URL fragment. Browser fragments are not sent to our server, and the Redeem page removes the fragment from the address bar after reading it. When you apply the code from your signed-in account, we send it in an authenticated request, then store only a one-way keyed hash and a redemption record linked to your keyed email hash and anonymous purchase account ID. We retain the campaign benefit, status, timestamps, and expiry so we can enforce redemption limits, restore access classification, and prevent repeat use. The plaintext code is not stored.
• Logo overlays: custom logo images and their positions, stored securely in the app's local private storage. Never transmitted to our servers.
• Support inquiries: when you use our contact form, we collect your name, email address, and message content to respond to your request. This data is used solely for support.

2. What We Do NOT Collect

• We do not collect your name or any personal identifiers beyond your email address (required for account authentication) and what you explicitly provide via the support form.
• We do not keep your photos as a permanent ActivArt library. Image-generation inputs are discarded after processing. For AI video generation, the selected original or generated photo is held temporarily in private object storage while a durable job runs, then deleted when the job reaches a final state. When ActivArt creates automatic art for a new activity, the generated image is held in private storage on our server until your device downloads it. It is deleted as soon as your device has saved it, and after 24 hours at most.
• We do not store your account credentials, only short-lived OAuth tokens or platform-provided health access.
• We do not use advertising SDKs or track your location.

3. Third-Party Services

ActivArt integrates with official APIs from Intervals.icu, Strava, Apple (Apple Health, sign-in with Apple), and Google (Health Connect, Firebase, sign-in with Google). Subscription and one-time-purchase management and requested AI processing are handled by specialist service providers and ActivArt-operated processing infrastructure. The minimum source image and server-owned prompt needed for a requested generation are sent to the selected processor; routing is based on verified account access and is not chosen by the app. Usage data collected by third-party services is handled in accordance with their respective privacy policies.

4. AI Photo Processing

When you apply an AI effect to an existing photo (image-to-image), your photo is transmitted securely for processing. The image is used solely to generate the result and is not retained or stored after generation completes. When generating a brand-new image from your activity type (text-to-image), no photo data is sent at all, only a text prompt describing your activity and style preferences. If you enable the statistics overlay, selected activity figures (such as distance and time) are included as text in that prompt so the AI can render them into the image.

Your photos and your activity data are used only to produce the specific result you request. They are never used to train, fine-tune, or otherwise improve any artificial intelligence or machine learning model, ours or a third party's. In particular, we do not use data obtained through the Strava API to train AI or ML models.

Finished AI images include machine-readable XMP provenance metadata identifying the AI origin category and ActivArt as the creating tool. This marker is not drawn visibly into the image pixels. It does not contain your name, email address, prompt, activity statistics, location, or other account identifiers. Location and capture-time EXIF data are handled separately as described above.

4a. Video Generation (On-Device)

GPS-route and elevation-profile videos are rendered entirely on your device. No video data, and no constituent photos used in the video, is uploaded during video generation. The finished MP4 lives only on your device until you choose to share it.

To draw the map and the terrain, your device downloads map, satellite and elevation data from map data services. For the 3D Map Video and 3D Elevation Video, it requests map tiles that cover the area around your route; the route itself is not sent. For the Map Video, it sends a simplified line of the route and the points where markers are drawn, so the map service can draw them onto the map image. All GPS videos leave out the start and end of the route set by your Map privacy zone. These requests carry no name, email address or account identifier, and the map data services handle them under their own privacy policies.

If a workout was recorded without altitude (some apps save routes to Health Connect without it), your device sends up to about 100 points sampled along the route to an elevation data service to look up their heights. Like the map requests, these points leave out the start and end set by your Map privacy zone, and the lookup carries no name, email address or account identifier.

4b. AI Video Generation

When you choose to animate a selected original or generated photo, the image and a description of your selected style, effects, activity controls, and statistics are securely uploaded to create a short video using hosted or ActivArt-operated AI processing. The model may generate audio. ActivArt validates and post-processes the result, adds signed provenance metadata, and makes the private result available to your authenticated account for up to 24 hours so an interrupted download can resume.

The temporary source is deleted after the job finishes. Final private media and expired job media are deleted after the recovery period, with object-storage lifecycle rules as a backstop. Account deletion also removes your linked job records and media keys. AI video inputs and outputs are not used to train models by ActivArt.

5. Data Retention

All core app data (tokens, style preferences, custom logos) is stored locally on your device. Deleting the app removes this data. Subscription usage counts, durable AI-video job status, and promotional-code redemption records sync to our VPS and are retained while your account is active. AI-video media is temporary as described in Section 4b. When you delete your account, your user-linked job, redemption, and other account data are permanently removed from our servers after a 30-day grace period (see Section 6). Aggregate campaign configuration remains but no longer identifies your account.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right to erasure (Art. 17 GDPR): You can delete your account at any time via Settings → Account → Delete Account in the app, or via activart.app/account on the web. You will be signed out immediately. Your data is permanently deleted from our servers after a 30-day grace period. Signing back in within 30 days cancels the deletion and fully restores your account and quota.
• Email security: Your email address is stored encrypted (AES-256-GCM) on our servers. It is never stored in readable form in the database. A keyed HMAC-SHA256 hash is used for all lookups.
• Right to access / data portability: To request a copy of the data we hold about you, contact us through the contact form.
• Lawful basis: We process your email address on the basis of legitimate interest, specifically to enforce per-account AI generation quotas and prevent abuse.

7. Product emails

If you opt in to ActivArt product emails, we store your encrypted email address, language, and the source and date of your consent. This also applies to subscribers who do not have an app account. We use an email delivery service to send these messages. You can unsubscribe through the link in any marketing email without signing in. We retain a one-way keyed identifier and the reason for suppression after unsubscribe, a permanent delivery failure or a complaint, so later imports do not restart marketing emails. Unsubscribing does not stop essential account messages. We check address format and domain mail routing using domain-only lookups to reduce invalid sends. These checks do not verify that a mailbox exists. We store the check result and reason. We keep delivery-status history linked to sent messages, without retaining raw delivery reports. Confirmed invalid marketing contacts can be reviewed and removed. Contacts removed through reversible archiving are kept encrypted for restoration, while marketing suppressions remain active. A separate permanent cleanup removes invalid live contact payloads without creating a restoration copy; one-way suppression identifiers, opt-outs and message history remain. Some product emails use tracking images and rewritten links through our email delivery service to measure opens and link clicks. These measurements are approximate, not unique people or proof that a message was read. Our database retains only sanitized message identifiers, event types and times, not raw tracking reports, IP addresses, user agents or clicked URLs.