Privacy Policy

1. Data Controller Information

Data Controller: Kirkify AI
Contact: [email protected]
Website: https://kirkify.uk

This privacy policy explains how we collect, use, and protect your personal data when you use our AI face transformation service.

2. Information We Collect

2.1 Images You Upload

• What: Images you upload for processing
• Purpose: To provide face transformation services
• Legal Basis: Legitimate interest in providing our service
• Retention: Immediately deleted after processing (within seconds)
• Storage: Temporarily processed in memory only, never saved to disk

2.2 Technical Information

• IP Address: For security and rate limiting
• Browser Information: For compatibility and optimization
• Usage Analytics: Via Google Analytics (anonymized)
• Legal Basis: Legitimate interest in service operation and improvement

2.3 Analytics Data

We may collect anonymous analytics data to improve our service:

• Usage Statistics: Page views, feature usage, performance metrics
• Technical Data: Browser type, device information, IP address (anonymized)
• Legal Basis: Legitimate interests in service improvement

3. How We Use Your Information

• Service Provision: Process your images for face transformation
• Security: Prevent abuse and ensure service security
• Analytics: Understand usage patterns to improve our service
• Legal Compliance: Comply with applicable laws and regulations

4. Data Sharing and Third Parties

We do NOT sell, rent, or share your personal data with third parties, except:

• Google Analytics: For anonymized usage statistics (with consent)
• Legal Requirements: When required by law or legal process
• Service Providers: Cloudflare for CDN and security (data processing agreement in place)

5. Your Rights (GDPR and International)

You have the following rights regarding your personal data:

• Right of Access: Request information about data we hold
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests

To exercise these rights, contact us at: [email protected]

6. Data Security and Retention

Security Measures:

• HTTPS encryption for all data transmission
• Secure server infrastructure with regular security updates
• Access controls and monitoring
• Regular security assessments

Data Retention:

• Images: Deleted immediately after processing (within seconds)
• Analytics Data: Retained for 26 months (Google Analytics default)
• Server Logs: Retained for 30 days for security purposes

7. International Data Transfers

Our services may involve data processing in different countries. When we transfer data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by law

8. Children's Privacy (COPPA Compliance)

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For users aged 13-16: Parental consent may be required in some jurisdictions. Please check your local laws.

9. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights

10. Contact Information and Complaints

Data Protection Contact:

• Email: [email protected]
• Subject Line: "Privacy Rights Request" or "Data Protection Inquiry"

Supervisory Authority:

If you're not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• For significant changes, providing additional notice as required by law