Updated: September 5, 2026
Effective: September 6, 2026
Welcome to "Nara Studio: AI Image Editor" (hereinafter "Nara AI").
The operator of Nara AI (hereinafter "we" or "us") attaches great importance to the protection of your personal information and privacy. We will process your personal information in accordance with applicable laws and regulations, following the principles of legality, legitimacy, necessity, good faith and data minimization, and will adopt reasonable security measures.
This Nara AI Privacy Policy (hereinafter this "Policy") explains:
Please read and understand this Policy carefully before using Nara AI.
Where a feature requires your authorization or separate consent, we will explain this to you before the relevant information is actually processed, by means of a pop-up, an on-page notice, a system permission request or other appropriate means.
This Policy applies to the Nara AI iOS application and the related services provided to you through that application.
Nara AI is currently an artificial intelligence creation tool whose core features are AI image generation, image editing and AI video generation.
1.1 No Registration, No Sign-In
Nara AI does not currently provide a conventional user account registration or sign-in system.
You may use the features currently made available to you without providing a mobile phone number, user name, password or other account information.
We will not require you to create a Nara AI account in order to use the basic AI creation features.
1.2 Independent Third-Party Services
Where you navigate to a website, service or system independently provided by a third party, the information processing that takes place there may be governed by that third party's own terms of service and privacy policy.
Where a third party receives data from us in order to deliver a Nara AI feature, the provisions of this Policy on third-party data processing apply.
We process information only to the extent necessary to deliver specific product features.
This includes the following circumstances.
2.1 AI Image Generation and Image Editing
When you actively use the AI image generation or image editing feature, we may process:
Such information is used to:
The AI image generation and image editing capabilities are currently provided primarily through Volcengine Ark (Seedream).
2.2 AI Video Generation
When you actively use the AI video feature, we may process:
Such information is used to:
The AI video generation capability is currently provided primarily through Volcengine Ark (Seedance).
If a future version allows users to actively upload video, audio or other types of reference material, we will update this Policy in line with the actual processing before the corresponding feature goes live, and will carry out the notification or authorization procedures required by law.
2.3 Images You Actively Upload
Where you need to upload images as material for AI creation, we process only the images you actively select and submit.
We will not read, scan or upload private photos unrelated to your current action merely because you have granted photo-related permissions.
Where the system and product features allow, we will give priority to the photo picker provided by iOS so that you select only the images you currently need to use.
2.4 Images of People and Processing of Personal Features
When you actively upload an image containing a real person for AI image generation, image editing or AI video generation, the AI model may need to analyse and process visual information such as the person's appearance, facial features and posture in order to complete the task you initiated.
Such processing is used solely to complete the corresponding AI task and the necessary content safety screening.
Unless a specific feature expressly states otherwise and the corresponding authorization has been lawfully obtained, we will not use images of people uploaded by users to:
If the material you upload contains the likeness, face or other personal information of another natural person, please ensure that you are entitled to use that material and that you have obtained the authorization or consent required from the relevant individuals under laws and regulations.
For features that significantly edit biometric information such as faces, please notify the individuals being edited as required by law and, where laws and regulations so require, obtain their separate consent.
2.5 Content Safety Review
In order to fulfil our obligations regarding the safety management of online information content, and to ensure that the AI services are not used to generate, edit or disseminate content that is unlawful, harmful or infringes the lawful rights and interests of others, we may carry out necessary content safety screening on the following:
Content safety screening may be carried out by us or by a third-party content safety technology service.
We currently use Alibaba Cloud Content Moderation to provide part of our content safety review capability.
The above information is used solely to:
We will not use the above content safety screening data for advertising, marketing or user profiling unrelated to content safety.
2.6 AI Tasks, Temporary Storage and Result Handling
In order to invoke AI models, forward tasks, query task status, return results, retry failures and carry out necessary troubleshooting, we may temporarily process the following through cloud servers or cloud storage services:
The relevant cloud storage and task services currently rely primarily on Alibaba Cloud services.
For specific retention periods, please see the "Retention and Deletion of Information" section of this Policy.
2.7 In-App Purchases and Subscriptions
When you purchase a subscription, AI creation entitlements or other in-app items through the App Store, the payment process is completed by the in-app purchase service provided by Apple.
Apple may process payment-related information.
We do not obtain:
In order to confirm transaction status, restore purchases and grant the corresponding entitlements, we may process the necessary transaction information provided by Apple, such as:
The above information is used solely to:
2.8 User Feedback
When you actively contact us through the in-app user feedback feature or by email, we may process the information you actively provide, including:
Such information is used solely to:
Unless necessary to resolve the issue, please do not volunteer sensitive personal information such as ID card numbers or bank card details in your feedback.
2.9 Service Operation and Security Logs
While you use the online services, in order to keep AI tasks running properly, safeguard network and service security and identify service anomalies, our servers may generate necessary technical logs, for example:
Such information is used solely to:
We will not use the above information to profile you for purposes unrelated to the services.
Nara AI may request iOS system permissions according to the features you actively use.
3.1 Photo Permission
Purposes:
We invoke photo-related capabilities only when you actively use the relevant features.
If you decline to grant this permission, you will not be able to use the features that require access to photos, but other features that do not require photo permission will not be affected.
3.2 Camera Permission
If the current or a future version offers the ability to shoot reference material directly, we will request camera permission when you actively use the shooting feature.
We will not access the camera without your authorization.
3.3 Managing Permissions
At any time you may go to:
iOS Settings → Nara AI
to review, adjust or revoke the system permissions granted to Nara AI.
After a permission is revoked, the features that depend on it may no longer be usable, but unrelated features will not be affected.
Some of Nara AI's core features rely on third-party artificial intelligence services.
4.1 Third-Party AI Processing
When you actively tap to generate and submit an AI task, we may need to transmit the information necessary to complete that task to the corresponding AI technology service through secure measures.
This may include:
We will not automatically send your private images to third-party AI services merely because you have installed or opened Nara AI.
Processing takes place only when you actively select the relevant material and initiate an AI task, and only as actually required by that task.
4.2 Authorization for AI Data Processing
Where user permission is required by law or by Apple platform rules, we will explain the following to you through the AI Service Data Processing Notice or by other clear means before the relevant data is first sent to a third-party AI service:
We will carry out data processing that requires such authorization only after you have given your consent.
If you do not consent, you may be unable to use the AI generation or editing features that rely on the corresponding third-party AI services, but other features that do not rely on such data processing will not be affected.
In order to deliver AI image generation, AI video generation, content safety review, in-app purchases and cloud-based task processing, we may integrate third-party technology services as required by specific features.
Integrating a third-party service does not mean that we provide all of your information to that third party unconditionally.
We provide such information only where it is necessary to:
and only to the extent necessary for those purposes.
In accordance with applicable laws and regulations and our contractual relationships, we exercise necessary oversight of third-party service providers' data processing and require them to adopt security measures commensurate with the risks involved.
The principal third-party services currently in use are as follows:
| Service type | Third-party service and provider | Information involved | Purpose of processing | Data processing region | Used for model training? | Retention period and processing rules |
|---|---|---|---|---|---|---|
| AI image generation and editing | Volcengine Ark (Seedream) / Beijing Volcano Engine Technology Co., Ltd. | Prompts entered by the user, images actively uploaded, generation parameters, task information and AI-generated results | To carry out AI image generation, image editing, task processing and the return of results in accordance with the user's instructions | Within China; subject to the actual service deployment and the applicable data processing rules | Under our current integration, not used for model training; if the applicable processing rules change materially, we will give separate notice and obtain the necessary authorization as required by law | The information is processed only for the period necessary to complete image generation, editing, task processing and the return of results. The retention period applied by Volcengine Ark is governed by the service agreement and data processing rules that actually apply |
| AI video generation | Volcengine Ark (Seedance) / Beijing Volcano Engine Technology Co., Ltd. | Prompts entered by the user, images actively uploaded, video generation parameters, task information and AI-generated video results | To carry out AI video generation, task status queries, task processing and the return of results in accordance with the user's instructions | Within China; subject to the actual service deployment and the applicable data processing rules | Under our current integration, not used for model training; if the applicable processing rules change materially, we will give separate notice and obtain the necessary authorization as required by law | The information is processed only for the period necessary to complete video generation, task status queries, the return of results and other necessary service processing. The retention period applied by Volcengine Ark is governed by the service agreement and data processing rules that actually apply |
| Content safety review | Alibaba Cloud Content Moderation / Alibaba Cloud Computing Ltd. | Text entered by the user, materials actively uploaded, AI-generated content and the parameters necessary to complete the safety review | To identify unlawful, harmful or infringing content and content that otherwise breaches the service rules, and to fulfil the necessary content safety management obligations | Within China; subject to the actual service deployment and data processing rules | No | The information is processed and retained only for the period required to complete safety screening and risk identification and to fulfil safety management obligations under the law. The specific period is governed by the Alibaba Cloud service agreement and data processing rules that actually apply |
| Cloud storage and AI task services | Alibaba Cloud storage and server services / Alibaba Cloud Computing Ltd. | Temporary AI task materials, generated results, task status and necessary system logs | AI task forwarding, temporary storage, return and download of results, status queries, failure retries and necessary troubleshooting | Within China; subject to the actual cloud service deployment | No | AI task inputs, uploaded materials, task status and temporary generated results are retained only for the period required to complete model invocation, the return of results, failure retries and necessary troubleshooting, and in principle for no longer than 14 days. Once that period expires they are deleted or anonymized, unless laws and regulations provide otherwise |
| In-app purchases | Apple Inc. and related Apple entities | App Store transaction identifiers, product identifiers, subscription status, purchase time, refund status, renewal status and the transaction information necessary to restore purchases | To complete App Store in-app purchases, subscription verification, renewals, refund status handling and the restoration of purchases | Processed by Apple in accordance with its service architecture and applicable rules | Not applicable | Transaction and subscription information is processed and retained by Apple in accordance with its terms of service, privacy policy and applicable law. We retain transaction information only within the scope and for the period necessary to verify transactions, grant entitlements, handle refunds, reconcile orders and resolve disputes |
The product names, service entities or specific capabilities of third-party service providers may change reasonably as the product evolves.
Where such a change would materially alter the purposes or means of personal information processing or the categories of personal information involved, we will give notice as required by law and, where necessary, obtain your authorization or consent again.
We will not ourselves use the private images, prompts or AI task materials that you actively submit through Nara AI to train Nara AI's own artificial intelligence models, unless we have separately given you a clear explanation and lawfully obtained your authorization.
As regards data processed through third-party AI technology services:
under our current integration with Volcengine Ark's Seedream and Seedance services, user data submitted through Nara AI is not used as model training data.
If the data processing purposes of those services change in future so as to involve using user data for model training, model optimization or other purposes different from the original ones, we will update this Policy accordingly and, where required by law, obtain your authorization or consent in advance.
7.1 Sharing
Apart from the necessary third-party processing already described in this Policy, we do not sell your personal information to unrelated third parties.
We may lawfully provide necessary information in the following circumstances:
7.2 Transfer
In principle, we will not transfer your personal information to another personal information handler.
Where personal information must be transferred as a result of a merger, division, reorganization, asset transfer or similar event, we will inform you of the recipient's details in accordance with applicable laws and regulations and will require the recipient to continue to perform the corresponding personal information protection obligations.
If the recipient changes the original purposes or means of processing, the necessary authorization will be obtained again in accordance with applicable laws and regulations.
7.3 Public Disclosure
We will not publicly disclose your personal information unless:
8.1 Retention Principles
We retain information only for the shortest reasonable period necessary to achieve the processing purposes described in this Policy, unless laws and regulations provide otherwise.
Retention periods differ from one type of information to another depending on the purpose for which it is used.
8.2 Temporary AI Task Materials
AI task inputs, uploaded materials, task status and temporary generated results under our control are retained only for the period necessary for the following purposes:
As a general rule, such temporary information is retained for no longer than 14 days.
Once that period expires, we will delete or anonymize the information as far as technically practicable, unless laws and regulations require it to be retained.
8.3 Data Held by Third-Party AI Services
For data processed by third-party technology services such as Volcengine Ark's Seedream and Seedance, the specific caching, task status and server-side retention periods are governed by the third-party service agreements, product rules and data processing arrangements that actually apply to us.
Within reasonable limits, we require the relevant service providers to process the data only for the period necessary to provide the corresponding service.
8.4 AI-Generated Results
If the product offers a creation history, a record of generated results or another feature that displays results on an ongoing basis, the relevant results may be retained for the period necessary to deliver that feature.
Where generated results are provided only as temporary tasks, they are handled under the corresponding AI task data retention rules.
8.5 Transaction Information
Transaction and subscription information is retained for the necessary period, having regard to:
It is retained only for the period necessary.
8.6 Security Logs
As required by cybersecurity rules, content safety rules and applicable laws and regulations, we may retain the corresponding system logs and security records for the necessary period.
Where laws and regulations prescribe an explicit retention period for particular logs, we will comply with those provisions.
In order to comply with the requirements of applicable laws and regulations on the governance of AI-generated and synthetic content, we may, in respect of images, videos and other content generated or significantly edited through Nara AI:
The above processing is used mainly to:
The specific AI content labelling rules are also governed by the Nara AI User Agreement and by what the product actually displays.
At present, Nara AI's core AI image, AI video, content safety and cloud task services are, in principle, processed using services located within China.
If, in future, changes to product features, third-party service architecture or service regions make it necessary to provide your personal information outside the People's Republic of China, we will, in accordance with applicable laws and regulations:
We will not transfer personal information subject to Chinese personal information protection law across borders without first completing the procedures required by law.
We take the security of your information seriously and will adopt reasonable technical and organizational measures commensurate with the actual business risks, including but not limited to:
We also select third-party service providers with due care and impose corresponding data security and privacy protection requirements on third parties involved in processing user information.
However, no internet environment is absolutely secure, and no network, server or information system can guarantee the absence of all security risks.
If a security incident occurs that may affect your rights and interests in your personal information, we will take the necessary remedial measures in accordance with applicable laws and regulations and will perform our notification and reporting obligations as required by law.
Within the scope provided by applicable laws and regulations, you are entitled to exercise the corresponding rights in respect of your personal information.
12.1 Access and Information
You have the right to know how we process your personal information.
If you have questions about any data processing not expressly described in this Policy, you may contact us using the contact details provided in this Policy.
12.2 Correction and Supplementation
If the personal information we process is inaccurate or incomplete, you may request its correction or supplementation in accordance with the law.
12.3 Deletion
Where permitted by applicable laws and regulations, you may ask us to delete the relevant personal information in any of the following circumstances:
Where the retention period prescribed by laws and regulations has not yet expired, or immediate deletion is temporarily not technically feasible, we will cease processing other than storage and the adoption of necessary security measures, as required by law.
12.4 Withdrawal of Consent
Where personal information is processed on the basis of your consent, you have the right to withdraw that consent in accordance with the law.
You may:
Withdrawing consent does not affect the processing of personal information already carried out on the basis of your valid consent before the withdrawal.
After a necessary authorization is withdrawn, the features that depend on the corresponding processing may no longer be usable.
12.5 Requests for Explanation
If you have questions about this Privacy Policy or about our personal information processing rules, you may contact us to request a further explanation.
12.6 Handling Requests Where There Is No Account
Because Nara AI does not currently provide a conventional account system, we may be unable to locate the relevant historical data directly through a user account.
When you submit a request to access, delete or otherwise exercise rights over personal information, in order to prevent others from impersonating you and manipulating data, we may ask you to provide the information necessary to link the request to the relevant task, order or device, so that we can verify the relationship between the request and the data concerned.
We will not use this as a reason to ask you for additional personal information unrelated to handling the request.
Nara AI is not a product designed specifically for children.
Minors should use Nara AI under the guidance and with the consent of a parent or other guardian.
If you are a minor under the age of fourteen, your parent or other guardian should read and agree to the applicable privacy rules before you use features that involve the processing of personal information.
Where the relevant services involve processing the personal information of a minor under the age of fourteen, we will handle it in accordance with the requirements of applicable laws and regulations.
If a guardian discovers that a minor has provided personal information to Nara AI without appropriate authorization, the guardian may contact us using the means set out in this Policy, and we will verify the situation and deal with it in accordance with the law.
We may update this Privacy Policy in response to:
Any of the above may lead us to update this Privacy Policy.
If an update materially changes the purposes or means of personal information processing, the categories of personal information involved or the scope of third-party sharing, we will explain this to you by means of:
or other appropriate means.
Where laws and regulations require consent to be obtained again for particular processing, we will obtain your consent again before that processing takes place.
The "Updated" date shown at the top of this Policy indicates the date of the most recent revision.
If you have any questions, complaints, comments or suggestions regarding this Privacy Policy, AI service data processing, personal information protection or deletion requests, you may contact us as follows:
In the app: [Profile] — [Settings] — [Feedback]
Email: lilrolston1993@gmail.com
Upon receiving your request, we will verify and handle it according to the nature of the issue and applicable laws and regulations.
This Privacy Policy forms part of the Nara AI User Agreement.
If this Privacy Policy is inconsistent with a privacy notice or authorization page shown to you separately for a specific feature, the specific rules that were clearly notified to you and for which authorization was lawfully obtained prevail in respect of that feature's data processing.
Matters not covered by this Policy are governed by applicable laws and regulations.