Privacy Policy

Last updated: March 29, 2026

Open Lora ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Open Lora. It applies to our mobile application and website (collectively, the "Service"). By accessing or using our Service, you signify that you have read, understood, and agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

1. Definitions and Key Terms

• App / Service — the Open Lora mobile application and associated website.
• We / us / our — Open Lora and the parties responsible for processing your data under this Policy.
• Device — any internet-connected device (phone, tablet, computer) used to access the Service.
• IP address — a unique numeric identifier assigned to your device on the Internet, which may be used to determine approximate location.
• Personal Data — any information that directly or indirectly allows identification of a natural person.
• Third-party service — external providers whose technologies we use to operate the Service (Google Gemini, Replicate, Kling AI, Google Play).
• You — a person or entity registered with Open Lora to use the Service.

2. Information We Collect

2.1 Information you provide

• Email address (upon registration)
• Photos you upload for AI generation
• Generated images and videos stored in your gallery
• Subscription plan and purchase information

2.2 Information collected automatically

When you use the Service, we automatically collect certain technical information that does not directly reveal your identity but is necessary for the security and operation of the Service:

• IP address and approximate location
• Device name and version, operating system
• App version and configuration parameters
• Date and time of Service usage
• Crash and error diagnostics

3. Use of Photos and Face Data

To create personalized AI-generated content, you upload photos to our secure servers. These photos are transmitted to third-party AI services (Google Gemini, Replicate, Kling AI) solely to process your request and deliver the generated result in real time.

Your original photos and generated content are stored in your personal in-app gallery. We do not use your photos to train our own models, for advertising, or to share with third parties outside the direct request-processing chain.

AI-generated content is intended solely for entertainment and creative purposes and should not be relied upon as legal, medical, financial, or other professional advice. Users are responsible for independently evaluating any generated content.

Third-Party Access to Image Data: We do not share your photos with any third parties other than the AI providers (Google Gemini, Replicate, Kling AI) directly involved in fulfilling your generation request.

4. How We Use Your Information

Providing Our Service

• Generating AI photos and videos based on your uploads
• Managing your account, credit balance, and generation history
• Processing payments and subscriptions via Google Play
• Responding to your customer support requests

Administrative Purposes

• Ensuring security and preventing fraud
• Debugging errors and improving app performance
• Internal analytics and quality control
• Complying with applicable legal obligations

5. Third-Party AI Services

The following third-party services power our content generation features:

• Google Gemini API — image analysis and processing
• Replicate — AI photo generation
• Kling AI — AI video generation
• Google Play — payment and subscription processing

When you use a generation feature, image data is shared with the relevant provider solely to process the request. We apply appropriate technical and organizational measures to protect your data during transmission.

6. Data Retention

Your data is stored on secured servers for the duration of your account's existence. Upon account deletion, all your personal data, photos, and generated content are permanently deleted within 60 days, unless a longer retention period is required by applicable law.

7. Security Measures

We take all necessary technical and organizational measures to ensure the confidentiality, integrity, and security of personal data:

• HTTPS encryption for all data transmission
• Firewall and server infrastructure protection
• Database access restricted on a need-to-know basis
• Encryption of sensitive data at rest
• Regular data backups
• Audit logging for sensitive data operations

In the event of a data breach, we will promptly notify affected users and, where required, the relevant supervisory authorities, and take all necessary remediation steps.

8. Push Notifications

We may send you push notifications about app updates, generation status, and other Service-related information. You can disable push notifications at any time through your device settings.

9. Payment Details

We do not store credit card numbers or other payment credentials. All payments are processed through Google Play in accordance with their security policy. We are committed to maintaining the confidentiality of your purchase records.

10. Children's Privacy

We do not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 16 without verification of parental consent, we will take steps to remove that information from our servers.

11. Your Rights and GDPR (EEA Users)

If you are located in the European Economic Area, the GDPR grants you the following rights regarding your personal data:

• Right of Access — request information about data we hold and obtain a copy
• Right to Rectification — request correction of inaccurate or incomplete data
• Right to Erasure — request deletion of your personal data ("right to be forgotten")
• Right to Restriction — restrict the ways in which we use your data
• Right to Data Portability — receive your data in a structured, machine-readable format
• Right to Object — object to processing of your data for certain purposes

To exercise any of these rights, contact us at: support@openlora.ru. We will respond to your request within 30 days.

12. California Residents (CCPA)

California residents have the following rights:

• Right to Know and Access — learn what categories of personal data we collect, the purposes for which we use it, and the sources from which it is collected
• Right to Equal Service — we will not discriminate against you for exercising your privacy rights
• Right to Delete — request deletion of your personal information

We do not sell the personal information of our users. To exercise your rights, contact us at: support@openlora.ru. We will respond within one month.

13. Sharing Personal Data with Third Parties

We may share your personal data in the following circumstances:

• With AI providers (Google Gemini, Replicate, Kling AI) — solely to fulfil your generation request
• With payment processors (Google Play) — to handle transactions
• With government authorities — when required by law
• With new business owners — in the event of a reorganization, merger, or sale (subject to this Policy)

We do not sell, rent, or provide your data to advertising networks or data brokers.

14. Links to Other Websites

Our Service may contain links to third-party websites not operated or controlled by us. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For significant changes, we will notify you through the app or by other available means before the changes take effect. Continued use of the Service after the updated Policy is published constitutes your acceptance of its terms. If you do not agree to the changes, you may delete your account.

16. Your Consent

By using the app, registering an account, or making a purchase, you consent to this Privacy Policy and agree to its terms.

17. Account Deletion

You may request complete deletion of your account and all associated data. To do so, send an email to support@openlora.ru with the subject line "Delete Account". Please include the email address associated with your account in the body of the message.

Upon receiving your request, we will delete the following data:

• Your profile and account credentials
• All uploaded and generated photos
• Generation history
• Subscription and credit balance data

All data will be permanently deleted within 30 days of receiving your request, unless a longer retention period is required by applicable law.

18. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy, please contact us:

By email: support@openlora.ru