Privacy Policy

Choosing what to upload

Photos and videos are chosen through Android's system Photo Picker, so Evora only receives the items you select for a request, never your whole gallery. Each selected item is uploaded for the task you start.

Where the AI runs

Generations run on servers we operate, using models we host ourselves. Generation content is not passed to any third-party AI provider. “Self-hosted” describes our servers — it does not mean the processing happens on your phone.

Faces and identity

Evora does not perform facial recognition, measure facial geometry to identify anyone, create biometric identifiers or use a face to find out who someone is. A photo of a recognisable person is nonetheless personal information and receives every protection in this notice.

No training

We do not train AI models on user information of any kind — not prompts, uploads, results, identifiers, diagnostics or support messages. Handling content to complete a request, return its result, look into an error or respond to abuse never turns it into training material.

Using it responsibly

Generation content is erased within 36 hours of the start of its upload (see “How long we keep things”), so save a result you want to keep. Upload only material you have the right to use, leave out sensitive or confidential details the request does not need, and check what the AI produced — including whether it reveals something about another person — before using or sharing it.

Generation content

As described in the previous section. We use it to carry out the request and return its result to you, and for nothing else beyond support, safety and the error investigation that request requires.

App records — even without an account

Evora has no registration, no Evora username or password and no social sign-in. Where the app, this notice or our deletion page refers to a user, a user record or account deletion, it means the records linked to your use of the app, not a login profile.

Those records include an app-user or installation reference, your preferences and the purchase entitlements that let the app work. We use them to keep settings, connect activity to the right record, manage access and tell you whether a feature is available or a task has finished. Anything linking such a record to a specific generation is treated as generation content and is erased with it.

Your Google account is not an Evora account. A Google Play purchase does not create one, and deleting your Evora data does not close your Google account or erase records Google keeps for itself. Never send us your Google password or verification codes.

Purchases

Order and transaction references, the item bought, payment, renewal and refund status, dates, receipt or verification data and the subscription benefits or credits that result. We use them to verify transactions, deliver what you bought, check renewals and reconcile refunds, chargebacks and disputes. Google Play processes the payment itself under its own terms.

Messages and reports

Whatever you write to us or submit in a content report, any reference you mention and any screenshot or attachment you decide to add; writing by email also gives us your address. A video or image can be reported from its detail page in the app. We use this to answer you, investigate failed tasks and bugs, handle privacy and deletion requests and tell you about changes that affect you.

Technical and install-source signals

IP address, device model and characteristics, operating-system and app version, request times, feature interactions, crash and error details and service logs, used to deliver the service, keep it secure and stop abuse. Separately, Adjust receives device or advertising identifiers where available and permitted, referrer and campaign details and install, first-open or session signals to identify where an installation came from — not to analyse your generations, feature use or purchases.

Protection and legal duties

We also use relevant information to investigate faults, fraud, misuse, content reports and security incidents, enforce our terms, improve reliability, establish or defend legal claims, keep the transaction and accounting records the law requires and answer valid requests from public authorities.

Adjust

Evora uses Adjust for one thing: identifying the source of an installation, such as a referral, campaign or channel. Adjust takes no part in generation. Attribution still uses technical information — depending on availability, consent and your settings, device or advertising identifiers, referrer and channel details, IP address, operating-system, app or SDK version and install, first-open or session signals.

Adjust never receives generation content — no prompts, photos, videos, results or task details — and no support messages or reports. We do not use it to analyse generations or to track purchase events. Where an advertising channel is connected, the attribution data and result that integration needs may be exchanged with it, subject to consent and the privacy choices that apply. Attribution records follow their own retention arrangements.

You can use your device's privacy settings, or write to us to ask for access, deletion, an objection or an advertising opt-out. Resetting or limiting an advertising identifier does not by itself delete records already collected; we pass requests about processing done for Evora on to the relevant provider when needed.

This website

The website sets no analytics or advertising cookies and stores nothing about your visit in your browser. Its feature illustrations upload nothing and start no AI task. Your browser may cache pages, fonts and images to load them faster.

The app and your device

The app keeps local and server-side records to function, and the Adjust SDK works as described above; browser cookie settings do not switch off an SDK inside an installed app. Photos and video come through the system Photo Picker rather than broad media access. If another feature ever needs a device permission, the app asks when you use it; you can refuse or later withdraw it in your settings, though the feature may then stop working. Changing a permission or clearing a local cache does not delete anything we or a provider already hold.

Outside services

Google Play, Adjust and other outside services have their own terms and privacy notices. We explain our own disclosures here; what an independent service collects when you use it directly is governed by its notice.

Keeping information secure

We use technical, organisational and administrative safeguards suited to the information and its risks. Traffic between the app or website and our servers is encrypted in transit with HTTPS (TLS), and access is restricted to people and systems with an operational need. We investigate faults and suspicious activity, respond to reported incidents and check how providers treat information — but no internet-connected system can promise that loss, misuse or unauthorised access will never happen.

Please keep your device and store account secure. If you suspect a privacy or security problem, tell us briefly what happened and give any app or order reference, without passwords, card numbers or verification codes. We assess incidents and notify people where the law requires it.

International transfers

The developer is based in Bangladesh, but information may also be processed wherever our servers, Google Play, Adjust or other providers operate, and privacy protections differ between countries; our address is not a promise that records stay in Bangladesh. We protect transfers as the applicable law requires — for example through an adequacy decision, approved contractual clauses or another lawful mechanism — and can tell you which safeguards apply or give you a copy or summary, subject to protecting confidential material. A transfer never changes the purposes here or the generation-content deadline.

Rights you may have

• Access: learn whether we process information about you, get a copy and find out how it is used and disclosed.
• Correction: have inaccurate information corrected or incomplete information completed.
• Deletion and restriction: have information deleted or its use limited, subject to exceptions such as a legal duty to keep records or the need to handle a legal claim.
• Portability: where it applies, receive information you provided in a usable format, or have it sent to another provider where technically possible.
• Withdrawing consent at any time, without affecting earlier lawful processing.
• Objecting: where we rely on legitimate interests, object on grounds relating to your situation; objections to direct marketing need no reason.
• Advertising and profiling: opt out of a sale, advertising-related sharing, targeted advertising or qualifying profiling where that right applies.

Deleting your Evora data

Open Personal Settings in the app, choose the deletion option, read what it explains and confirm — the option may be labelled account deletion, but it removes your app-user data rather than a login. Save the results you want first.

Or email contact@neptune-ai.net asking us to delete your Evora user data, with an app-user or generation reference or a Google Play order number if you have one. If you can no longer open the app, say so and we will explain the limited verification needed.

Deletion covers your app-user record, non-essential settings and associated personal information, including any generation content still held. Separate transaction, tax, refund, security, support or attribution records may remain only for their purpose and never with generation content. We tell you about any such retention, pass the instruction to our processors and cannot reach copies you saved or shared yourself. Clearing the app cache on your phone does not delete server records, and deleting your data does not cancel a Google Play subscription or request a refund.

Preference signals

We do not treat a browser's legacy Do Not Track setting as an instruction to delete records, disable every SDK or withdraw every consent, because services interpret it inconsistently. A legally recognised opt-out signal such as Global Privacy Control is different: where the law requires it to be honoured for particular processing, we follow that, for the browser, device or processing it comes from. You can also email an opt-out and tell us which service or device record it concerns.

How we handle requests

We may ask for a little information to match your request to the right app-user, device, purchase or support record, but never ask you to create an account. Someone authorised to act for you can make a request where the law allows, with suitable proof and any required verification. We answer within the legal period, explain any refusal, limitation, extension or permitted fee and what you can do next, and never treat you less favourably for using a right.

You may also complain to the data protection or consumer protection authority available where you live. Talking to us first often resolves things quickly, but it does not take away your right to go to an authority directly.

California

Relevant categories can include identifiers such as app or device references and support email addresses; commercial information such as purchases, subscriptions and credits; internet or app activity and technical information; and photos, videos, prompts or messages you choose to provide, which may reveal more depending on what they show. We use and disclose them as described above.

California residents may request to know and access the personal information we hold, request correction and deletion subject to statutory exceptions, opt out of a sale or sharing for cross-context behavioural advertising, limit qualifying uses of sensitive personal information where that right applies, use an authorised agent subject to verification, and exercise these rights without unlawful discrimination.

We do not sell personal information for money. If attribution information exchanged with a connected advertising channel falls within California's definitions of selling or sharing, you can opt out by email or with a recognised preference signal. Verification is proportionate to the request, and we explain any exception that stops us completing it; you need not resend sensitive material unless that is the only way to identify the issue.

Virginia

Where the Virginia Consumer Data Protection Act applies, eligible residents may confirm whether we process their personal data and access it; correct it, request deletion and obtain a portable copy; opt out of targeted advertising, a sale of personal data or profiling with legal or similarly significant effects where applicable; and do so without unlawful discrimination.

To appeal a decision, reply to our response or write to contact@neptune-ai.net with “Privacy appeal” in the subject and explain what you think we missed. We decide appeals within the legal period and explain the outcome and how to complain if you remain unhappy.