Privacy Policy

QYQO is operated by Monsieur Mohamed Djennan, a sole proprietor registered in France under SIREN 839658465. Contact: contact@qyqo.ai

QYQO is the data controller for personal data processed to operate the Services. For privacy questions or requests, contact us at contact@qyqo.ai.

Depending on how you use QYQO, we may collect:

• Account data: your email address, phone number, account identifier, profile details and authentication status.
• Authentication data: information returned by Google Sign-In, such as your name, email address and profile image, and records needed to send and verify phone authentication codes. We do not receive your Google password or store the SMS verification code itself.
• Creative content: photos, videos, prompts, voice transcriptions, instructions, project information, generated or transformed content and associated metadata that you submit or create.
• Usage and transaction data: generation history, selected tools and models, project and library activity, credit balances and credit transaction history.
• Technical data: IP address, device and browser type, operating system, language, approximate location inferred from IP, timestamps, diagnostic events and security logs.
• Communications: information you provide when contacting support or making a privacy request.

We use personal data to:

• create and secure your account and authenticate sign-ins;
• process your prompts and media and provide AI generation or transformation services;
• store your private creations, projects and generation history when you are signed in;
• manage credits, service limits, failed-job refunds and future paid services;
• operate, maintain, troubleshoot and improve performance and reliability;
• prevent fraud, abuse, security incidents and prohibited content or activity;
• respond to support, legal and privacy requests; and
• comply with legal obligations and enforce our Terms of Service.

Under the GDPR, our legal bases may include performing our contract with you, our legitimate interests in operating and protecting QYQO, compliance with legal obligations and, where required, your consent. You may withdraw consent at any time without affecting earlier processing.

QYQO processes uploaded photos, videos, audio, prompts and reference materials to perform the action you request. This can include preparing the file, transmitting it to an AI model or media processor, generating or transforming content, checking job status and returning the result to you.

Signed-in users’ source files and results may be stored in private cloud storage so they remain available in their library and history. Some tools, including certain local editing or export functions, may process media on your device. Unless we clearly tell you otherwise and obtain any consent required by law, QYQO does not use private uploaded or generated content to train QYQO’s own general-purpose AI models.

We use carefully selected providers to operate QYQO. They may process data only as necessary to provide their services, subject to contractual and security obligations. Categories include:

• cloud hosting, databases, private file storage and content delivery;
• AI model, image, video, audio and transcription providers;
• Google for Google Sign-In and Twilio for phone-number verification by SMS;
• security, fraud prevention, monitoring, diagnostics and customer support; and
• payment processors if paid services are introduced.

We may also disclose information where required by law, to protect users or the Services, in connection with a business reorganisation, or when you direct or consent to the disclosure. We do not sell your personal data.

QYQO uses cookies, browser storage and similar technologies that are necessary to keep you signed in, preserve authentication state, protect accounts, remember essential preferences and maintain the Services. We may use limited measurement or diagnostic technologies to understand reliability and usage. Where applicable law requires consent for non-essential cookies, we will request it before using them.

We retain account information while your account remains active and as reasonably necessary to provide the Services. Uploaded and generated content remains available until you delete it, close your account, or the applicable storage period expires. Operational logs, security records and credit or transaction records may be retained for a limited period after deletion where needed for fraud prevention, dispute resolution, accounting or legal compliance.

Deleting content from your library removes it from active use, although encrypted backups may retain a copy for a limited period before automatic deletion. To request account or personal-data deletion, email contact@qyqo.ai. We may retain information where the law requires or permits us to do so.

We use technical and organisational measures designed to protect personal data, including access controls, private-by-default storage, encrypted connections, server-side credentials, authentication safeguards and monitoring. No online service is completely secure, so we cannot guarantee absolute security. You are responsible for protecting access to your account and devices and should contact us promptly if you suspect unauthorised access.

Some service providers or AI processing infrastructure may be located outside France or the European Economic Area. Where personal data is transferred internationally, we use appropriate safeguards as required by law, such as an adequacy decision, the European Commission’s Standard Contractual Clauses and supplementary security measures where appropriate.

Subject to applicable law, including the GDPR, you may have the right to access, correct, delete or receive a copy of your personal data; restrict or object to processing; withdraw consent; and request data portability. You may also object to processing based on legitimate interests and lodge a complaint with the French data protection authority, the CNIL, or your local supervisory authority.

Send requests to contact@qyqo.ai. We may need to verify your identity before completing a request. We will respond within the time required by applicable law and will explain if an exception applies.

QYQO is not directed to children under 16 and they may not create an account or use the Services without authorisation from a parent or legal guardian where permitted by law. We do not knowingly collect personal data from children contrary to applicable law. If you believe a child has provided personal data without appropriate authorisation, contact us so we can investigate and delete it.

We may update this Privacy Policy as QYQO evolves or legal requirements change. We will post the revised version here and update the effective date. If a change materially affects your rights, we will provide additional notice where required.

Privacy questions and requests can be sent to contact@qyqo.ai. QYQO is operated in France.