Privacy Policy

• Account data — your email and name; which version of our Terms of Service you accepted, and when; and, if you tell us, how you heard about Cinefables. If you sign in with Google, we receive your name and email address from Google and keep only those.
• Content — the ideas, scripts, and generated media for your projects; and, when you upload a picture, a recording or music, that you confirmed it is yours to use, and when.
• Billing — payment records (processed by Razorpay; we never store card details). If a payment is refused we keep the payment provider's code for why, never your card's details.
• Messages you send us — what you write in Write to us, and whether you let us quote it.
• Where you are signed in — for each device signed in to your account we keep the kind of device and browser — for example, a phone with Safari — when it signed in, whether with your password or with Google, and when it was last used. Never its network address, and never anything that tells it apart from others like it. You can see the list in Settings and sign any of them out. A device that has signed out stays on the list we keep for up to 90 days, so that we can tell you when a new one signs in.
• Notifications on a device — if you turn on notifications on a device, we keep the address its browser's notification service gives us for it and the two keys a message to it is sealed with, the sign-in it was turned on from, when it was turned on, and when a notification last went or failed. A notification says that a film of yours is ready, or could not be finished, with the film's title. It travels sealed through the notification service that browser uses — Google's, Apple's, Mozilla's or Microsoft's, which may handle it outside India — and that service can see that we sent the device something and when, never what it says. We keep nothing of what was sent. All of it is removed when you turn notifications off here on that device — or, if you turn them off in the browser's own settings, the next time we would use them; within an hour of that device being signed out; and with your account.
• Security activity — for 90 days we keep a record of sign-ins to your account and of changes to how you sign in: what happened, the kind of device and browser, the country it came from, and when. Never the network address. You can see it in Settings. To slow down guessing, we count wrong sign-in tries for an email address for up to a day, under a scrambled form of the address — whether or not it has an account.
• Emails we send you — for 90 days we keep a record of each email we send to your account: what kind it was, when, and what became of it — sent, delivered, returned undelivered, or marked as spam, as our mail service reports it. Never what it said. If you ask us to email you when your free film is back, we keep when you asked and when we sent that one email.
• Whether email reaches you — if our mail service reports that your address returns our emails, we note it on your account, tell you in the app, and until an email arrives send only what you ask for, such as a password link or a receipt. If an email of ours is marked as spam, we note that and turn off the emails you can switch off; you can turn them on again in Settings. Both notes are deleted with your account.

We keep personal data to a minimum.

To operate the service: generate your videos, maintain your credit balance, and provide support. Your ideas and scripts — and any photos or recordings you upload — are sent to our AI model providers (for text, image, video, and voice generation) only to make your videos, and to check and fix films that fail.

When you choose a password we check it against a public list of passwords found in data breaches (Have I Been Pwned). Only the first five characters of a scrambled form of the password are sent — never the password, and nothing that says whose it is.

We look up which country your internet address belongs to, to show prices in your currency and to keep that country with your account, so we know where the people who use Cinefables are. The lookup runs on our own servers and nothing is sent to anyone else. We keep the country only — never the address, and never anything finer than the country. Country data: IP Geolocation by DB-IP.

How you use the app. We record which pages you open and which links and buttons you press, together with what the app showed you in reply (for example that a video's cost was displayed, or that your credits were not enough), and the kind of device and browser it came from — for example, a phone with Safari — never anything that tells your device apart from others like it. When you are signed in, this is kept with your account; when you are not, under a code that changes every day and cannot be traced back to you. We also count page visits for everyone, without cookies, in the same way. We use this to find where the product is confusing or failing, and — only when you last visited, never what you did — to choose which of our own offers you see, such as one for people coming back after a while. It is never sold or shared, and never used to advertise anything but Cinefables. We do not record what you type, and we do not use third-party analytics or advertising trackers. You can turn this off for your account in Settings, under Usage records: nothing more is recorded for it from then on. From a browser that sends the Global Privacy Control signal we record nothing of what you do. If you are in the European Economic Area, the United Kingdom or Switzerland, we ask first, and record nothing — not even a page visit — until you allow it; your answer is kept in that browser only. These records are deleted after 180 days, and with your account when it is deleted.

When you sign up, we also keep with your account the first page you opened on our site in that browser tab, the name of the website that sent you there (such as google.com, never the full address) and the campaign name in the link, if it had one, so we know which places bring people who go on to make films. It is deleted with your account.

Emails. We email you about your account, your films and your payments. News and offers come only if you ask for them — the box at sign-up, or Emails in Settings — at most one a week, each with a one-click unsubscribe, and you can stop them in Settings at any time. Every one says why you got it and gives our postal address. We never give your address to anyone for their own marketing.

We share data only with the processors needed to run the service (AI providers, Razorpay, hosting, email delivery and error reporting). We do not sell your data.

Your films are private unless you share one. A shared film can be watched by anyone with its link, with the credit you choose and its idea only if you show it; a film you ask us to list appears in our gallery once we approve it. Stop sharing, or take it out of the gallery, at any time.

A few people on our team can open your account's page — your email address, your films, your payments and credits, and what you did on the site — to answer your message or fix a problem. Fewer still can see the idea and the prompts behind a film. Who opened your page, and every change one of us makes to your account, is recorded. Someone on our team who helps you may add a short note to your account — what you asked and what we did. You can ask us for the notes we hold about you, and they are deleted with your account.

Cinefables runs on servers in India. Some of the companies that process data for us — the AI model providers, email delivery and error reporting — do so in other countries, including the United States. They receive only what their part of the work needs.

You can delete your account in Settings. It is closed at once — signed out everywhere, its plan stopped, its shared films no longer open — and deleted seven days later, which removes your media and personal data. Until then, signing in lets you keep it. We keep the record of each payment — its amount, date and invoice number — as tax law requires, without your email address.

To give free credits and first-time offers once per email inbox, and to keep credits owed after a reversed payment, we keep a one-way code made from your email address — never the address itself — with what that inbox has used: free credits, a first purchase, a plan's first month, an offer. It cannot be turned back into your address, it is used for nothing else, and it stays if you delete your account.

What you did on the site is kept for 180 days. A device that has signed out stays on our list for up to 90 days. Messages you sent us are kept until your account is deleted. Our nightly backups are kept for 14 days, so what is deleted is gone from them two weeks later. An account whose email address is never confirmed is removed 30 days after sign-up; we email the address once before that.

Most of this is in your hands, in Settings: change your email address; download a copy of everything we hold for your account (Your data); turn off the record of how you use the app (Usage records); stop news and offers (Emails); see the devices signed in to your account and sign any of them out; and delete your account. For anything else — something we hold that is wrong, a question about how your data is used, or an objection to it — write to us (see Contact) from your account's address, and we will answer within 30 days. Where you live, the law may give you more rights than these, including to complain to your data-protection authority; nothing here takes them away.

Cinefables accounts are for people aged 18 or over. We do not knowingly create an account for anyone under 18, or collect their personal data. If you believe someone under 18 has an account, email cinefablesteam@gmail.com and we will delete it.

For privacy requests, email cinefablesteam@gmail.com, from your account's address so we know it is you. Complaints go to our Grievance Officer at CodezyAI Private Limited, at the same email address. We acknowledge a complaint within 48 hours and answer it within 30 days.