Privacy Policy
Vora AI · Effective October 14, 2026
Vora AI (“the app,” “we,” “us”) is built by bunchofapps, an independent app studio. Vora AI turns the photos, videos and prompts you provide into AI-generated results, which means some of your content does leave your device. This policy explains exactly what we collect, why, who processes it, and the choices you have.
No account, no email
The app never asks you to create an account or give us your name, email address or phone number. It signs you in anonymously (Google Firebase Authentication) so your credits, purchases and creations stay with your device. The identifier it creates is random and is not linked to your identity.
What we collect
- Content you submit — the photos and videos you select, and the text prompts and settings (for example resolution or duration) you enter. The app only accesses the photos and videos you choose through the system picker; it does not read your library in the background.
- Generated results — the images and videos created for you and the history of your creations (which effect or model was used, status and credit cost).
- Face-related content. Your photos may contain faces. Basic face detection runs on your device (Google ML Kit) to help frame and crop images. We do not create biometric templates or face-recognition databases, we do not use faces to identify you or anyone else, and we do not use your photos or videos to train AI models.
- Credits, purchases and subscription status — via Apple and RevenueCat. We never see or store your payment-card details.
- Referral and rewards activity — referral codes you share or enter and the credits granted for them.
- Push notification token — only if you allow notifications, so we can tell you when a creation is ready.
- Usage and diagnostics — anonymous product-analytics events (screens viewed, effects opened, generations started) through Amplitude, keyed to the random identifier above, plus basic device, OS and app-version information and error logs needed to keep the service running.
How we use it
To generate and deliver your results; to charge and refund credits correctly; to provide subscriptions, rewards and notifications; to prevent abuse and keep the service secure; and to understand which features are used so we can improve them.
Who processes your content
To generate a result, your media and prompt are uploaded to our cloud storage and sent to the AI providers that run the models: our model gateway (eachlabs) and, for some features, Higgsfield, together with the model vendors they operate. These providers process your content only to produce your result, under their own terms and privacy policies. We also use Google Firebase / Google Cloud (authentication, database, file storage, cloud functions, push messaging and remote configuration), Apple (in-app purchases), RevenueCat (subscription and credit-purchase management) and Amplitude (anonymous analytics). We do not sell your data, share it for advertising, or track you across other companies’ apps or websites, and the app does not show the App Tracking Transparency prompt.
Storage, visibility and retention
The photos and videos you upload are stored in private storage that only your device can read. Generated results are stored in cloud storage and shown to you in the app; the links to them are long and unguessable but are not password-protected, so please treat a result link like a photo you could share with anyone who has it.
Uploads are deleted after 30 days. The photos and videos you upload as inputs are deleted from our servers automatically 30 days after you upload them. Your generated results, prompts and creation history stay in your account so you can find them again, until you delete them (see below).
We keep your credit balance, credit ledger and purchase and subscription records for as long as needed for accounting, to prevent fraud and so that credits you paid for are never lost. These contain no photos, videos or prompts. AI providers may keep inputs and outputs for a short period to complete and deliver a request, according to their own policies, and anonymous analytics events are retained in aggregate form.
Legal bases (UK / EU GDPR)
We process data to perform our contract with you (providing the features and purchases you request), for our legitimate interests (security, fraud prevention, fixing problems and improving the app), to comply with legal obligations, and with your consent where required (for example push notifications, which you can switch off in iOS Settings at any time).
International transfers
Our providers operate globally, so your data may be processed outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses or the UK International Data Transfer Addendum.
Security
Data is encrypted in transit (TLS), uploads are access-controlled to their owner, and administrative access is restricted. No system is perfectly secure; if a breach affecting you occurs we will notify you and the authorities as the law requires.
Children
Vora AI is not directed to children under 13 and we do not knowingly collect their data. Users under 18 should use the app with a parent or guardian’s permission. If you believe a child has provided data, contact us and we will delete it.
Deleting your data
You can erase everything you uploaded or generated at any time in the app: open Settings → Delete My Data. This permanently removes your uploaded photos and videos, generated results, prompts, creation history and saved faces from our servers (it does not remove your credit balance or purchase records, described above). Deleting the app alone does not delete cloud data. You can also email support@bunchofapps.co and we will do it for you.
Your rights
You can ask us to give you a copy of, correct, or delete the data associated with you, to restrict or object to certain processing, or to withdraw consent, and you may complain to the UK Information Commissioner’s Office or your local data-protection authority. Email support@bunchofapps.co — we may ask for details, such as a purchase receipt, to locate your anonymous account. You can also revoke photo access or notifications at any time in iOS Settings.
Changes
We may update this policy. Material changes will be reflected by a new effective date above and, where appropriate, in the app.
Contact
bunchofapps · support@bunchofapps.co