Privacy Policy

Last updated: 21 Jan 2026

Welcome to "SteadyDancer" ("the Service"). This Policy explains how HAWAR AI PTE. LTD ("Company", "we") collects, uses, shares, and protects information when you use our AI-powered dance video generation platform.

I. Data Controller

II. Data We Collect

We collect and process the following categories of information to provide our AI video generation service:

1. Account Information (Firebase Authentication)

• Email address
• Display name (if provided)
• Profile photo URL (if using Google Sign-In)
• Unique user identifier (UID)
• Authentication provider (email or Google)

Purpose: Account creation, authentication, and communication.

2. User-Uploaded Content

• Portrait Images: Photos you upload as the source for video generation
• Dance Reference Videos: Videos you upload as motion references
• Text Prompts: Descriptions and instructions you provide for generation

Purpose: To process and generate AI dance videos according to your specifications.

3. Generated Content

• AI-generated dance videos created by our Service
• Generation parameters and settings
• Processing history and status

Purpose: To deliver the requested service and maintain your generation history.

4. Payment Information (Stripe)

• Transaction identifiers
• Purchase amounts and timestamps
• Credit balance changes
• Payment method type (not full card details)

Note: Full payment card information is processed directly by Stripe and never reaches our servers.

5. Device & Usage Analytics (Firebase Analytics)

• Device model, OS version, browser type
• Language, region, time zone
• App/website version
• Session duration and engagement metrics
• Feature usage patterns
• Error logs and performance data

Purpose: Product improvement, debugging, and user experience optimization.

6. Technical Data

• IP address (used for geolocation and security)
• Browser fingerprint data
• Access timestamps
• Referral sources

Purpose: Security, fraud prevention, and service optimization.

7. Support Communications

If you contact us, we collect the information you provide (email content, attachments, screenshots) solely to resolve your request.

III. Legal Bases & Purposes (Art. 6 GDPR)

IV. How We Use Your Content

Portrait Images and Videos

1. Processing: Your uploaded images and videos are processed by our AI systems to generate dance videos.
2. Storage: Content is stored on secure cloud servers (Cloudflare R2) during processing and for your access.
3. AI Training: We may use anonymized and aggregated data to improve our AI models. Individual identifiable content is not used for training without explicit consent.
4. No Sale: We do not sell your personal content to third parties.

Generated Content

1. Generated videos are stored in your account for your access and download.
2. You may delete your generated content at any time through your account settings.
3. We may retain anonymized technical data about the generation process for service improvement.

V. Data Retention

You can request deletion of your data at any time by contacting [email protected].

VI. Storage & Cross-border Transfers

Your data may be processed and stored in the following locations:

For transfers outside the EEA, we rely on Standard Contractual Clauses (SCC 2021/914/EU) or equivalent safeguards provided by each processor.

VII. Third-party Processors

Each partner processes data strictly under our instructions and data processing agreements.

VIII. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Data in transit is protected using TLS/SSL. Data at rest is encrypted.
• Access Controls: Strict access controls limit who can access your data.
• Monitoring: We monitor for unauthorized access and security threats.
• Secure Processing: AI processing occurs in isolated, secure environments.

While we strive to protect your data, no system is completely secure. Please use strong passwords and protect your account credentials.

IX. Your Rights

Where applicable (GDPR / UK GDPR / CCPA / LGPD / etc.), you have the following rights:

1. Access: Request a copy of personal data we hold about you.
2. Rectification: Request correction of inaccurate data.
3. Deletion: Request deletion of your personal data (subject to legal retention requirements).
4. Portability: Request transfer of your data in a machine-readable format.
5. Restriction: Request limitation of processing in certain circumstances.
6. Objection: Object to processing based on legitimate interests.
7. Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, email [email protected] with your account email and specific request.

X. Data Deletion

To delete your data:

1. Account Deletion: Request account deletion by emailing [email protected]. We will delete your account and associated data within 30 days.
2. Content Deletion: Delete individual uploads or generated videos through your account dashboard.
3. Complete Erasure: Upon account deletion, your uploaded content and generated videos will be permanently removed within 30 days, except where retention is required by law.

XI. Children's Privacy

SteadyDancer is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact [email protected].

XII. Cookies and Tracking Technologies

Our website uses the following technologies:

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

XIII. Marketing Communications

We may send you service-related communications (e.g., account updates, security alerts) as part of our service. For promotional communications, we will obtain your consent and provide an easy opt-out mechanism in every message.

XIV. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable laws. Material changes will be announced via email or in-app notification at least 30 days before taking effect. Continued use of the Service after the effective date constitutes acceptance.

XV. Contact Us

For privacy inquiries, data requests, or complaints:

• Email: [email protected]
• Address: 230 COMMONWEALTH AVENUE, #18-18, COMMONWEALTH TOWERS, SINGAPORE 149739

If you are dissatisfied with our response, you may contact your local data protection authority.

XVI. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

1. Right to Know: What personal information we collect and how it's used.
2. Right to Delete: Request deletion of personal information.
3. Right to Opt-Out: We do not sell personal information.
4. Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact [email protected].

Thank you for trusting SteadyDancer with your data.