Privacy Policy

1. Who we are

DittoPix (dittopix.ai) is a trading name of Satish Vijayakumar, a sole trader in the United Kingdom, who is the data controller for the purposes of the UK GDPR.

• Contact / data requests: privacy@dittopix.ai (general: support@dittopix.ai)
• Our geographic business address will be published here before paid plans go on sale.

2. What we collect

Account data — your name and email (to create and secure your account), and payment details (handled by our payment processor, Stripe — we never see your full card number).

Face & body data (special-category biometric data) — the face photo or selfie scan you provide to create your avatar, and the physical details you optionally give (e.g. height, weight, age) so your avatar matches your true proportions. We derive a mathematical body descriptor from these to steer generation.

Your creations — the images, short videos, films, animations and other content you generate. These are private to your account unless you choose to share them.

Usage data — standard analytics (pages visited, features used, device/browser info), the campaign link or referring website that brought you to sign up (recorded once, on your account, so we can tell which of our posts and partners actually help people find us — it is never used for advertising), and, when you contact support, your messages.

3. Why we can process your face data (legal basis)

Because your face is special-category data, our legal basis is your explicit consent (UK GDPR Article 9(2)(a)). Before any face data is processed you give a specific, informed, affirmative opt-in — a separate consent from our Terms — and you confirm the face is your own (or that you have the pictured person's permission) and that you are 18 or older. You can withdraw consent at any time by deleting your avatar, which deletes the underlying face data. For account, payment and analytics we rely on contract and legitimate interests respectively.

4. How we use your face data

• To create your DittoAvatar (a digital likeness of you).
• To generate the images, short videos, films and animations you ask for, featuring your likeness.
• To keep your likeness consistent across your creations.

We do not sell your face data. We do not use it to train AI models for other users. We do not use it for identification, surveillance, or advertising. You may only create an avatar of yourself, or of someone who has given you explicit permission — never of a real named person without consent.

5. Who processes your data (sub-processors)

We keep your data lean and use a small set of service providers strictly to run DittoPix. Being straight with you: to generate an image or video, your reference image is sent to our AI-rendering providers, and to the services that check uploads and results for safety and likeness — this is how the product works, and we send it only to produce and check the output you requested. What each provider may then do with it is set by its own terms, summarised on its line below: OpenAI, Anthropic, Supabase and Replicate do not train their models on what we send them, and fal.ai does not train on it itself. Where a model we run through fal.ai or Replicate belongs to another company, your input also goes to that company to make your output, under that company’s terms.

• Cloudflare R2 — encrypted storage of your images, creations and account files.
• Supabase — our application database (EU region).
• Railway — hosts the servers that run DittoPix and its job queue; your requests, and the data they carry, pass through it (a US-based provider; see international transfers).
• Vercel — hosts the DittoPix website; the pages you load, with your IP address and browser details, pass through it. On our current plan, Vercel’s terms let it use that data for its own business purposes (a US-based provider; see international transfers).
• Replicate — runs the AI models that render your creations; receives your reference image at generation time to produce your output, and, if you record your voice, that recording so your lines can be spoken in it; for a film with an on-screen presenter, it also receives the narration audio the presenter speaks. Where a model Replicate runs belongs to another company, such as Black Forest Labs or VEED, your input may also go to that company to make your output (US-based; see international transfers).
• fal.ai — runs further AI image and video models that render your creations; receives your reference image (for example, to paint your avatar from several angles), the prompts and still frames a video is made from, and the images and video it produces. Several models fal.ai runs for us belong to other companies, such as OpenAI and ByteDance, and your input goes to that company to make your output; they may process it outside the UK and the US, including in China (fal.ai is US-based; see international transfers).
• Anthropic — interprets your prompts, helps write your scripts, sorts the messages you send support (with the name and email you send them from), and runs quality checks on what we make. For avatar and likeness checks it receives your reference photo and the generated image; it also describes the visible features in your reference photo (such as face shape and hairstyle) so your avatar keeps them, and checks still frames from your videos (US-based; see international transfers).
• OpenAI — safety-checks content before and after it is made: the images you upload, including your face photo, the images we generate for you, still images from your videos, and your text prompts (US-based; see international transfers).
• ElevenLabs — turns the lines in your scripts into speech, and makes sound effects and music from written descriptions; it receives that text, not your voice recordings. Its terms let it use that text to improve its services unless we opt out (US-based; see international transfers).
• Stripe — payments; for fraud prevention and legal compliance Stripe also acts as an independent controller, under its own privacy policy. Resend — transactional email.

Separately, if you connect a YouTube channel and approve an upload, that video and its details go to Google (YouTube) at your direction. Google is not our processor; it handles them under its own privacy policy. See Publishing to YouTube below.

6. How we protect and store your data

Face data is encrypted in transit (TLS) and at rest. Your uploads and creations are kept in our cloud storage behind long, unguessable links rather than a password, so anyone who is given a file’s link can open that file; your uploaded photos are not listed anywhere public. To make and check your creations, copies are sent to the providers listed in section 5. No one at DittoPix views your face data unless you ask us to help with an issue with your avatar.

7. How long we keep it

• Face & body data: kept while your account is active. Deleted when you delete your avatar or account (the underlying image files are physically removed from our storage). Copies a provider in section 5 made to produce or check your output are held under that provider’s own retention terms.
• Creations: kept while your account is active; removed when you delete them or your account.
• YouTube connection and publish records: see Publishing to YouTube below.
• Consent records: retained (in minimised form) for up to 6 years to evidence lawful processing.

8. International transfers

Several of our providers are based in the United States, and some companies whose models fal.ai or Replicate run for us may process your input elsewhere, including China. Where a provider’s terms with us include them, the transfer is covered by the UK International Data Transfer Agreement or Addendum / EU Standard Contractual Clauses, or by an adequacy decision where one applies; the model companies reached through fal.ai or Replicate are covered only by those platforms’ own terms.

9. Where DittoPix is available

We are launching UK- and EU-first. To respect specific biometric-privacy laws, avatar/face features are not currently offered in certain US states (including Illinois). You can still use non-face features elsewhere.

10. AI-generated content

Everything created on DittoPix is AI-generated. Outputs carry a visible or embedded "Made with AI" indication. When you post creations to platforms such as TikTok, Instagram or YouTube, you're responsible for using their AI-content labels where required.

11. Publishing to YouTube (YouTube API Services)

DittoPix uses YouTube API Services to let you publish the videos you make to your own YouTube channel. Connecting a channel is optional, and nothing in this section happens unless you connect one. When you connect, you agree to be bound by the YouTube Terms of Service, and Google handles your Google and YouTube account data under the Google Privacy Policy.

What DittoPix asks Google for

When you press “Connect your YouTube channel”, Google shows you its own consent screen listing these two permissions, in its own order. “Manage your YouTube videos” is needed to upload; without it nothing is connected. You can untick “See, edit, and permanently delete your YouTube videos, ratings, comments and captions”: uploads still work without it, but captions are not added and DittoPix cannot show your channel’s name.

• “Manage your YouTube videos” — Used to upload a finished video, and its thumbnail, to your channel — and only when you press “Approve & upload to YouTube” for that video. https://www.googleapis.com/auth/youtube.upload · YouTube Data API calls: videos.insert, thumbnails.set
• “See, edit, and permanently delete your YouTube videos, ratings, comments and captions” — Used to read your channel’s name and ID, so DittoPix can show which channel you are publishing to, and to add captions to the videos you publish through DittoPix. DittoPix uses it for nothing else: it never deletes videos, never touches a video it did not publish, and never reads, posts or changes comments or ratings. https://www.googleapis.com/auth/youtube.force-ssl · YouTube Data API calls: channels.list, captions.insert

What DittoPix receives and keeps

• Access and refresh tokens — the keys Google issues so DittoPix can act on your channel when you approve something. They are encrypted (AES-256-GCM) before they are stored in our application database (Supabase, EU region), are decrypted only in memory on our servers (Railway) while a request you made, or the regular check described below, is using them, and are never written to logs.
• Your channel’s ID and name, when Google provides them — so DittoPix can show which channel you are connected to. DittoPix reads them again from Google at least every 7 days, and never keeps them for more than 30 days without doing so.
• The permissions Google actually granted, when you connected, and when DittoPix last confirmed the connection still works — so DittoPix only offers what you allowed (captions, for example, only if you granted the permission they need).
• A record of the most recent video you published from each project, saved on that project — the YouTube video ID, when you published it, the visibility you chose, and how much YouTube API quota the upload used.

DittoPix does not read your other videos, your subscribers, your comments, your watch history or your YouTube analytics.

What DittoPix sends to YouTube, and when

Only when you press “Approve & upload to YouTube” for a finished video. DittoPix never uploads anything automatically. Before you press it, the publish panel lists everything that will be sent, and you can edit the title, description, category, audience setting and visibility. For that video DittoPix sends Google the video file; the title, description, category, audience setting (made for kids or not) and visibility you approved; the video’s language; a flag marking the video as containing altered or synthetic content, because every DittoPix video is AI-generated; the project’s thumbnail, if it has one; and its captions, if it has them and you granted the permission captions need. A video goes up as Private unless you choose otherwise.

How DittoPix uses it, and what it never does

DittoPix’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can read that policy at developers.google.com/terms/api-services-user-data-policy.

• Data from your YouTube connection is used only to provide the YouTube publishing features you use in DittoPix.
• It is never sold, never used for advertising of any kind (including retargeting and personalised or interest-based advertising), never used to train AI models, and never used to assess credit-worthiness or for lending.
• It goes to no one but Google itself, to carry out what you asked for, unless the law requires otherwise — apart from the two hosting providers named in section 5 that store it and run DittoPix on our behalf: Supabase, which holds our database, and Railway, which runs our servers.
• No one at DittoPix reads it unless you ask us to help with a problem, it is needed to investigate abuse or keep the service secure, or the law requires it.

How long DittoPix keeps it, and how to remove it

• Tokens are kept while your channel stays connected and the permission still works. DittoPix checks with Google at least every 7 days that it does, and refreshes your channel’s ID and name at the same check. Publish records are deleted 30 days after you publish, or sooner if you delete that project.
• Disconnect in DittoPix. Press “Disconnect” in Settings → Data & privacy → YouTube channel, or in the Publish to YouTube panel. DittoPix asks Google to revoke its access straight away, and at the same moment deletes the stored connection (tokens, channel ID and name, and the permissions record) and the publish records on all your projects.
• Remove access at Google at any time, on your Google Account’s permissions page (https://security.google.com/settings/security/permissions). The stored tokens stop working at once, so DittoPix can no longer reach your channel, and DittoPix deletes everything it holds from your YouTube connection the next time it uses or checks the connection — in any case within 30 days.
• Deleting your DittoPix account first asks Google to revoke DittoPix’s access, then deletes the connection and every publish record along with everything else.
• Or ask us. Email privacy@dittopix.ai and we will delete your YouTube data within 7 days.

Disconnecting your channel, deleting your DittoPix account, or asking us to delete your YouTube data removes only what DittoPix stores. It does not change or delete anything stored by YouTube: videos you published stay on your channel until you delete them in YouTube (for example in YouTube Studio) or in another app you have authorised to delete them.

Questions or complaints about how DittoPix handles your YouTube data go to privacy@dittopix.ai.

12. Cookies and storage on your device

DittoPix sets no cookies. To keep you signed in and to remember your work in progress, the app keeps a few items in your browser’s local and session storage on your device — your sign-in token, unfinished drafts and the studio choices you made, the referral code you arrived with (until it has been applied to your account), and display preferences such as which guides you have already seen.

In the live app, a service worker also keeps an offline copy of the app’s start-up page, its icons and the images it has shown you in your browser’s cache storage, so DittoPix opens quickly and can say so when you are offline.

All of this is used only to run DittoPix for you — never for advertising or to follow you across other websites — and you can remove it at any time by clearing this site’s data in your browser.

Our pages load their typefaces from Google Fonts, so your browser sends Google its IP address and browser details to fetch them. Google Fonts sets no cookies.

DittoPix shows no advertising and does not let any third party serve advertising in it.

13. Your rights (UK GDPR)

You have the right to access, rectify, erase, and port your data; to withdraw consent at any time (by deleting your avatar); and to object to certain processing. You can do most of this yourself in Settings (download your data, delete your avatar, delete your account) or by emailing privacy@dittopix.ai.

Complaints. You have the right to complain to us about how we use your personal data. Email privacy@dittopix.ai with “Data protection complaint” in the subject line. We acknowledge a complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the UK data protection regulator, the Information Commission, known as the ICO (ico.org.uk).

14. Children

DittoPix is for adults. You must be 18 or older. We do not knowingly collect face data from anyone under 18; if we learn we have, we delete it.

15. Reporting harmful content

If you believe content on DittoPix uses your likeness without consent, or is otherwise harmful, report it at safety@dittopix.ai — you do not need an account. We review reports promptly and remove content that breaches our Terms.

16. Changes to this policy

We'll notify you of material changes by email and/or in-app. Continued use after notice means you accept the updated policy. If DittoPix starts to use data from a service you connect (such as YouTube) in a way this policy does not already describe, we will ask you to agree to that in the app, before it starts.