Privacy Policy

Effective October 7, 2026

Viral Shots is an AI photo and video creation app operated by Chic Apps. This policy explains what happens to your information when you use the app. Contact us at chic.message@gmail.com with privacy questions or requests.

Photos, videos, references, and prompts

You choose the photos, videos, reference images, links, and text prompts used by a feature. Selecting or capturing media does not by itself authorize AI processing. Before AI analysis or generation, the app asks you to agree to sharing the selected content with its AI providers. Declining cancels that action.

When you agree and use an AI feature, the app sends the content needed for that request through our Firebase backend to Kie.ai and, depending on the feature, Google Gemini or Replicate. Some Gemini analysis is provided through Kie.ai; other Gemini analysis uses Google's Firebase AI services. These services process the content to analyze a reference, adapt a selected effect, generate a prompt, or create your requested photo or video. Kie.ai also hosts uploaded input files and generated results so the app and the selected model can retrieve them.

Photo analysis may infer visible characteristics, such as apparent gender, to adapt a preset, or describe a reference image's style. Those descriptions can be inaccurate. Do not upload photos of other people without appropriate permission, or confidential or sensitive information that you do not want processed by these services.

The providers' own terms and policies govern their processing and retention, including any handling by the model services they use. We do not promise that input or output is deleted immediately after a generation. You can read Kie.ai's privacy policy, Google's privacy policy, and Replicate's privacy policy.

App identity, credits, and purchases

Firebase Authentication creates an anonymous app identity. We use that identifier to authenticate requests, maintain your credits and subscription status, prevent abuse, and reconcile generation charges and refunds. Anonymous means you do not need to provide an email to sign in; it does not mean all activity is unlinked.

Apple or Google handles store payments. RevenueCat and our Firebase services process app user identifiers, product and transaction identifiers, purchase history, subscription status, and receipt or transaction verification data to deliver and restore purchases. We do not receive your complete payment card details. See RevenueCat's privacy policy.

Usage, diagnostics, and notifications

Firebase Analytics, Crashlytics, and other Firebase infrastructure process information such as app interactions, installation or device identifiers, app version, device and operating system information, error reports, and service logs. We use this information to measure app performance, fix failures, deliver configuration, and protect the service. Notification services may process a push token and notification delivery information when notifications are enabled. See Firebase's privacy information.

Installation source and campaign measurement (Android)

On Android, the app measures which of our own campaign links brought an installation and the purchases linked to it. This is our own analytics, operated through a Chic Apps backend hosted on Firebase; it is not shared with advertising networks or data brokers and is not used to show you ads. When the app starts, it sends to that backend:

• From the Google Play install referrer: only the campaign parameters (utm_*) and the signed click receipt of the link, if the installation came from one of our links, together with the installation time, app version, and the installer package.
• The build type (debug, profile or release). Links marked as tests are excluded from production campaign figures, including when used with a release build.
• A random installation key generated on the device. The backend derives an installation identifier from it; it is not a hardware or advertising identifier.
• The Firebase app instance identifier and your anonymous app identifier, which the backend stores only as salted hashes, plus the product identifier of each purchase or restore attempt so the backend can link later store purchases to the installation.

iOS does not send any of this: campaign results on iPhone come only as aggregate reports from Apple. You can turn this measurement off together with usage analytics in Settings → Usage analytics. Turning it off asks the backend to delete the links between your installation and your app identifier and stops linking future purchases to it; aggregate figures already counted do not change. Clicks are kept for 35 days, click receipts for 120 days, and purchase events for 400 days; installation records and hashed identifiers are kept while the service operates or until you request deletion.

The app includes Google AdMob. When ads are available, Google's advertising services may process device or advertising identifiers, app interactions, IP address, and advertising or diagnostic information to deliver and measure ads and prevent fraud. Ad personalization and tracking depend on the consent and platform permissions applicable to you. See Google's advertising privacy information. TikTok and Facebook event tracking are disabled in the current app configuration.

Content reports and support

If you submit a content report, we receive the reported content identifier, a preview image or image/video URL when available, the relevant prompt or description, your selected reason, your anonymous app identifier, and submission time. Reports, including an image preview when submitted, are stored privately in Firebase and queued for moderation and abuse prevention. The report confirmation means the report reached our service; it does not guarantee a particular moderation outcome.

If you email support, we receive your email address and the information you choose to include. We use it to respond and investigate your request. Never send passwords, full payment card details, or unnecessary private photos.

Local storage and sharing

The app keeps preferences, selected or saved photos, creation history, downloaded results, and cached media on your device. The app, share extension, and home screen widgets use an App Group on iOS to share the local information needed for those features. Saving to your photo library or sharing to another app occurs when you request it. The destination app's handling is governed by its own policies.

If you paste a supported media link, the app or our backend may contact that website to retrieve the media you requested. The website receives ordinary network request information. Only use media you have permission to access and process.

Retention and deletion

Local items remain until you delete them, the app's retention or cache cleanup removes them, or app data is removed by the operating system. Exported copies in your photo library or another app remain there until you remove them separately.

Server records may remain while needed to complete a generation, deliver and reconcile purchases and credits, operate the service, review reports, investigate failures or abuse, or meet applicable recordkeeping obligations. Provider-hosted uploads, results, and logs follow the relevant provider's retention practices. There is no single deletion deadline for all these different records.

You may request deletion of information held by Chic Apps by emailing chic.message@gmail.com. State that your request concerns Viral Shots and describe the data or creation involved. If the request concerns a purchase, a store order identifier can help us identify the records. We may need enough information to verify your request before acting, and some transaction or security records may need to be retained. We will explain any limits that apply. Deleting a local creation or uninstalling the app does not automatically delete copies already processed by a provider.

Your choices

• Decline the AI sharing prompt to keep the requested AI processing from starting.
• Open Settings → AI data sharing to withdraw consent for future AI requests. Withdrawal cannot undo content already transmitted or an in-progress request.
• Open Settings → Usage analytics to stop Firebase Analytics collection and, on Android, the installation-source and campaign measurement described above. Turning it back on resumes collection from that moment.
• Where required, open Settings → Advertising privacy to review or change Google's advertising consent choices.
• Remove selected or saved media and local creations using the app's delete controls.
• Manage photo, camera, notification, and tracking permissions in your device settings. The Android system picker gives access to the items you choose, rather than your entire photo library.
• Cancel a subscription in the App Store or Google Play subscription settings. Deleting the app does not cancel it.
• Contact us about access, correction, deletion, or other privacy choices that may apply where you live.

Transfers, security, and changes

Our service providers may process data in countries other than yours. We use authenticated service requests and platform security features to protect the service, but no system can guarantee absolute security. The app is not intended for use by children who cannot lawfully provide the necessary consent; parents or guardians can contact us about a child's information.

We may update this policy as the app changes. The effective date identifies the current version. If the AI recipients or purpose of sharing materially changes, the app will request renewed consent before using the changed processing.