Legal

Privacy Policy

Effective date: June 8, 2026  ·  Last updated: October 11, 2026

1. Who We Are (Data Controller)

The data controller responsible for your personal information is:

• Operator: Katya Apps
• Contact email: support@katyaapps.com
• Address: Amman, Jordan

2. Information We Collect

2.1 Information you provide to us

• Account information. If you sign in with Google, we receive your Google account identifier, display name, email address, and profile photo as permitted by your Google settings.
• Profile information. Display name, biography, profile and cover images, website link, and social or gaming handles you choose to add.
• User-generated content. Wallpapers and live wallpapers you upload, titles, tags, AI prompts associated with an upload, comments, and likes.
• AI generation inputs. The text prompts you enter and any reference images you provide to generate or edit wallpapers.
• Purchases. Records of in-app purchases and subscriptions, including the purchase token and product identifier supplied by Google Play, and your credit balance. We do not receive or store your full payment-card details; payments are processed by Google Play.
• Messages and chat content. If you use the messaging features: the text of your direct and group messages, voice messages you record (microphone access is used only while you hold the record button), wallpapers you share into chats, stories you post, chat customization choices, and related metadata such as delivery/read status and timestamps.
• Communications. Messages you send to us, including their contents.
• Age information. The first time you use chat, an AI feature or a posting feature, the App asks your birth year (and the month only when it decides whether you are 13). We do not ask for your full date of birth. We use your birth year (and the month, if we asked it) only to work out whether you are under 13 or 13 or older, and then we throw them away: we never keep your birth year or month, not on our servers and not on your phone. We keep only “under 13” or “13 or older”. If you say you are under 13, the limits for younger users stay on until you change your answer with “Change my age”; they do not lift by themselves when you turn 13. We keep this with your account and with your device. You can change your answer to a younger age at any time, and to an older age at most twice, the second time at least 24 hours after the first; we store how many times and when you changed it to an older age (see Section 13). We do not verify the answer.
• Girls-only confirmation. From version 5.1.3, the App asks you to confirm: “I’m a girl and I agree to the girls-only rule.” If you are signed in (or sign in later on the same phone), we keep with your account that you confirmed and the date and time we first recorded it. If you are not signed in, or if you choose “I’m not a girl”, your answer stays on your phone and is not sent to us. We do not verify the answer (see Section 13).
• Videos and their sound. If you post a Reel or a video story, we receive the video, including its sound, plus any caption, tags and settings you choose (such as whether comments or downloads are allowed).
• Reports and appeals. When you report something, we receive what you reported, the reason, any note you add, and which screen you reported it from. If you appeal a decision, we receive your appeal and any note.
• Copyright notices and counter-notices. If you file a copyright notice or a counter-notice, we receive the information the form asks for: your full legal name, company (if you act for someone else), email address, phone number, postal address, country, a description of the work, a link or explanation, the items concerned, your typed signature and the statements you confirm.
• Follow requests. When you ask to follow someone, we store the request and whether it was accepted.

2.2 Information collected automatically

• Device and installation identifiers. A device identifier generated by the App, your Android Advertising ID, and Firebase installation/messaging identifiers used for push notifications. Unless you tell us you are under 13, the App also sends a one-way code (a hash) that it makes on your phone from a built-in ID of your phone’s video-protection system (the DRM, or Widevine, ID); we never receive the ID itself. We use this code only to stop a phone whose account was banned from uploading again (see Section 5.2).
• Approximate location. We work out your country to select the appropriate advertising provider, to apply regional settings and to show you more Reels from your country and nearby countries. We normally take it from Cloudflare, our network provider, which attaches the country of your IP address to each request. If that is missing, we look your IP address up in a geolocation database that runs on our own servers, and only if that cannot tell, we ask ipwho.is. In addition, if your phone’s language or region is set to Russian or Russia, or your SIM card or mobile network is Russian, the App tells our server only “Russia” (not the language, SIM or network details themselves) so that the right advertising provider is used. We do not collect precise GPS location.
• Usage and log data. Interactions such as downloads, views, likes, AI generations, credit claims, app version, device model, operating-system version, language, and the date and time of requests. In Reels, this includes which Reels were shown to you, how long you watched each one, and any you marked “Not interested” (see Section 5.1).
• Network information. Your IP address, which we use to deliver content, detect your country, and protect against abuse and rate-limit violations. We do not record it for ordinary requests. It is written to our server logs only when a request looks like abuse (for example, too many claims from one network) or comes from the deletion-request form on our website, which also stores it with your request to stop abuse of the form. With reports in the new reporting system and with copyright notices we keep only a keyed, one-way code made from part of it, deleted after 30 days (see Section 5.2).

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the App and deliver wallpapers and features you request;
• Generate, edit, and upscale AI images based on your prompts and reference images;
• Operate the community feed, profiles, comments, follows, and leaderboards;
• Translate comments and post descriptions (and, where this is available, messages) into your language when you tap Translate;
• Apply the girls-only rule, including reviewing “Not a girl” reports (see Section 13);
• Choose the order of Reels in For You (see Section 5.1);
• Deliver the messaging features — direct messages, group chats, voice messages, stories, presence (online/last seen), and search across your own conversations;
• Screen content for safety and legal compliance, and moderate user-generated content, including translating reported content for our moderation team and suspending accounts that break our rules (see Section 5);
• Process purchases, manage credit balances, and prevent fraudulent or duplicate transactions;
• Send push notifications you have not disabled (for example, social activity and daily credits);
• Select and display advertising, including determining the appropriate ad provider for your region;
• Detect, prevent, and respond to abuse, spam, security incidents, and policy violations;
• Respond to your requests, reports, and legal notices; and
• Comply with applicable laws and enforce our Terms of Use.

4. Legal Bases for Processing (EEA / UK)

If you are in the EEA or the UK, we process your personal information under the following legal bases of the GDPR / UK GDPR:

Purpose	Legal basis
Providing the App and the features you request	Performance of a contract (Art. 6(1)(b))
AI generation and content delivery	Performance of a contract (Art. 6(1)(b))
Choosing the order of Reels in For You	Legitimate interests (Art. 6(1)(f))
Content moderation, safety, and abuse prevention	Legitimate interests, and compliance with legal obligations (Art. 6(1)(f), 6(1)(c))
Automatic bans (Section 5.2)	Performance of a contract: our Terms of Use (Art. 6(1)(b) and Art. 22(2)(a)), with review by a person if you ask (see Section 5.2)
The girls-only rule (Section 13)	Legitimate interests (Art. 6(1)(f)): keeping CutePop a space made for girls, for the safety and comfort of the girls who use it (your confirmation, and reviewing “Not a girl” reports)
Personalized advertising	Consent (Art. 6(1)(a)) where required
Non-personalized advertising and analytics	Legitimate interests (Art. 6(1)(f))
Push notifications	Consent / legitimate interests, subject to your device settings
Legal compliance and responding to lawful requests	Compliance with a legal obligation (Art. 6(1)(c))

Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to that processing (see Section 12).

5. AI-Generated Content and Content Moderation

The App offers AI image generation and hosts user-generated content. To provide these features and to keep the community safe, we share certain content with specialized service providers:

• AI image generation. The text prompts and any reference images you submit are sent to our AI generation provider (Runware) to produce or edit an image. Prompts may also be sent to a language-model provider (DeepSeek) to refine your prompt.
• Content safety screening. Text you submit (including prompts, titles, tags, profile names, and biographies) and images you upload or generate are screened for unsafe content using automated content-moderation services (OpenAI and Anthropic). Profile photos, cover images, and the photos you provide to the AI features are checked before they are stored; images you publish to the community feed are screened and may be removed if they violate our rules. Any image that fails review is rejected or removed. Reports you submit may be analyzed by an automated classifier (DeepSeek) to assist our review.
• Translation. When you tap Translate on a comment, a post’s description or (where this is available) a message you received, its text is sent to DeepSeek to translate it into your language. Our moderation team can also have text translated into Arabic by DeepSeek (see Section 5.2).

These checks and translations are automated. We use these providers’ business (API) services, and each provider handles the data under its own terms (see Section 7.1). AI-generated images are produced by a machine-learning model and may not be unique. We strictly prohibit, screen for, and report unlawful content, including any sexual content involving minors.

5.1 Videos, Sound and Music Recognition

When you post a Reel (up to 60 seconds) or a video story (up to 15 seconds):

• Upload. The App compresses the video on your phone and uploads it straight to a private storage area at our storage provider (Cloudflare R2). It is not public at this point.
• Processing. Our servers convert the video to a standard format (up to 720p) and remove embedded file metadata, such as the device or location information some cameras add. They create a cover image and check several still frames with our automated content-safety providers (OpenAI and Anthropic). Videos that fail this check are not published, and may be reviewed by our moderation team.
• Music recognition. We check the sound of every video you post to recognize songs. To do this, our servers take a 12-second sample of the video’s sound (the loudest part; for some longer videos, a second 12-second sample) and send these audio samples only (no picture, and no account details) to our music-recognition provider, AudD. Silent videos are not sent. To avoid checking the same sound twice, we keep a fingerprint (a hash) of the sound and the result.
• If we recognize a song, the Reel or video story usually keeps its sound, and we show the song’s name and artist on it. Please only use music you have the right to use. If a rights holder complains about a Reel or video story, we mute its sound (or remove it), and we may mute that song in every video on CutePop. If the video plays a song we recognized, we mute it as soon as the complaint arrives, while we review the complaint. We may switch to muting every recognized song at any time. When a video is muted because of its music, we tell you which song matched. We keep a private copy with sound for 30 days of every Reel we mute, so the sound can come back if the match was wrong, if the complaint is rejected or after a successful counter-notice. We keep it longer only while a sound restore we granted on your music dispute is still being processed, or while the Reel is part of an open moderation case or under an evidence hold. A muted video story keeps no copy with sound. If the check could not run when you posted a video story, the story is published with sound and checked again later.
• Who can see it. Published Reels and stories are visible to other users. Other users can save your Reels to their device, with sound (if we muted a Reel’s music, a saved copy still has the sound while we keep the copy with sound, up to 30 days), unless you turn this off (“Let others save this reel” when you post a Reel). Other users cannot save your stories.
• Review. Depending on your account, a Reel may be published straight away or reviewed by our moderation team first.
• What you have watched. To avoid showing you the same Reels again in For You and Following, we keep a list of the Reels shown to you, linked to your account (or to your device if you are not signed in). When you tap “Not interested” on a Reel, we keep that choice so that Reel is not shown to you again in those feeds. Both are deleted after 60 days, or earlier when you delete your account. If you tell us you are under 13, we delete both, and from the next time you open the App it no longer sends which Reels were shown to you (see Section 13).
• How Reels are chosen for you. The order of Reels in For You depends on how other users react to each Reel (views, likes, saves, shares, comments, downloads, watch time, and how often it is skipped quickly or marked “Not interested”; these are counted per Reel, not per person: so that one person’s quick skips of a Reel count once a day, each Reel has a daily tally that does not list who skipped it and is deleted within two days), how new it is, and your country: we show more Reels made in your country and nearby countries. If you are 13 or older, it also depends on a taste profile: a short list of the creators and tags you seem to like or not like, worked out from the Reels you like, save, share, watch almost to the end or skip quickly, and the ones you mark “Not interested”. The taste profile is linked to your account (or to your device if you are not signed in), is used only to order your For You feed, and is not shared with anyone. It is deleted 30 days after it last changed, or earlier when you delete your account. Users under 13 have no taste profile: their Reels are not personalized.

5.2 Reports, Moderation and Appeals

• In the current version of the App you need to be signed in to report content, except if you tell us you are under 13: you cannot sign in then, so you report while signed out and the report is stored with your device identifier. Older versions of the App also let you report while signed out; we store those reports too. We are moving all reports to a new reporting system, and once it is on, a signed-out report only starts an automated check. Some of the points below apply only to the new system, as noted.
• What we do with a report. We store your report with your account (or, for a signed-out report, your device identifier), the reason and any note. In the new reporting system we also store a keyed, one-way code made from part of your IP address. The code is used only to spot organized fake reporting and is deleted after 30 days.
• Automated help. Reported images, videos and text may be re-checked automatically. For a report on public content, the reason, your note and the text of the reported content (for example a comment, a caption or tags, a story’s text, an AI prompt, or the reported person’s name, username and bio) may be classified by an automated service (DeepSeek). Reported chat messages are not sent to this classifier. These automated checks help us sort reports, and some reports that look unfounded may be closed automatically.
• Translation for our moderation team. So that our moderators can understand a case in any language, they can have its text translated into Arabic by DeepSeek. We send DeepSeek only the text to translate.
  • On a case, they can translate the reported text (for example a comment, caption, title, story text or AI prompt), the name and bio of the reported person or of the person who posted the reported content, and the note you add to a report.
  • For a reported chat message, they can translate that message and up to 5 messages before it in the same conversation.
  • They can also translate the titles, descriptions and captions of new posts and Reels they check, and the name and bio of the person who posted them, even if nobody reported them.
  • We do not store their translations of chat messages, story text, AI prompts or notes on reports. Translations of other text are kept (see Section 11).
• Your privacy as a reporter. The person you report is not told who reported them.
• Outcome. You may get a short update on the outcome. In the new reporting system you can also see it under My Reports in Settings.
• If your content or account is actioned. When we send you a notice about a decision, it gives the reason category and tells you whether and until when you can ask for a review (never more than 180 days, about 6 months). Some decisions cannot be appealed in the App (for example a copyright removal, which uses the counter-notice process in Section 5.3); you can still contact us.
• Safety reports. A signed-in report about child safety, self-harm or threats of violence is always reviewed by a person. We may report unlawful content, including child sexual abuse material, to the appropriate authorities.
• Evidence copies. When a moderation case is opened about a community post, a Reel, a story, a profile or an AI picture (usually because of a report, but also, for example, when you ask us to review your Reel), we may keep a private copy of its pictures or video (for a profile, its photo and cover image). This lets our moderation team still review it if it is changed or deleted. These copies are not shown to other users.
  • We never copy comments or chat messages. Outside safety cases, we do not copy our own catalog content or items in copyright notices.
  • We delete a copy 90 days after its case is closed.
  • Cases in our safety queue (for example about child safety, self-harm or threats) and cases our moderators pass on to our administrators are put under an evidence hold, together with their copies. They are not deleted on a schedule (see Section 11).
• Repeated abuse. Accounts that file many false reports may have their reports given less weight. Breaking our rules or copyright problems can lead to restrictions on an account, including a ban, sometimes after a single breach.
• Bans. Our moderators can ban (suspend) an account that breaks our rules. Our automated safety checks can also ban an account straight away when a picture or video it uploads, or a chat message it sends, is very likely to be explicit sexual content, severe violence or child sexual content.
  • A banned account cannot sign in or use the features that need an account.
  • On a phone that was signed in to it, the App shows only an “Account suspended” screen with the reason, until we lift the ban.
  • Its public content may be hidden, and the phones it was used on may be stopped from uploading.
  • A ban has no end date: only our administrators can lift it.
  • To ask us to review a ban, email support@katyaapps.com (the “Contact support” button on that screen opens an email to us). If an automatic check banned your account, you can ask in the same way for a person on our team to look at it again.
  • When we ban an account, we keep a ban record (see Section 11).
• “Not a girl” reports. If the report menu shows “Not a girl / pretending to be one”, you can use it to report an account, a chat message, a comment, a story or a Reel. How we handle these reports is described in Section 13.

5.3 Copyright Notices and Counter-Notices

We handle copyright notices under the U.S. Digital Millennium Copyright Act (17 U.S.C. §512). You must be signed in to file a notice in the App; rights holders can also email support@katyaapps.com.

• What a notice contains. A notice includes the information listed in Section 2.1. Nothing is removed automatically; our team reviews each notice.
• What the person who posted the material sees. Before they file a counter-notice, they see only who filed the notice: the company name, or your name if you filed for yourself.
• If they file a counter-notice. We send them the full notice, including your name and contact details. We may also share it where the law requires.
• What we send to the person who filed the notice. If you file a counter-notice, we send it to them, including your name, address, phone number and email.
• Restoring material. It can be restored 10 to 14 business days after a valid counter-notice, unless the person who filed the notice tells us they have filed a court action. Restoring is a manual decision.

6. Messaging, Stories, and Chat

The App includes an optional messaging feature: one-to-one direct messages, invite-only group chats, voice messages, wallpaper sharing, and stories that expire after 24 hours. Messaging requires a signed-in account. This section explains how that data is handled.

• Storage and encryption. Your messages and voice messages are transmitted over encrypted connections (HTTPS/TLS) and the message text and voice-recording links are additionally encrypted at rest (AES-256) on our servers. Messaging is not end-to-end encrypted: we hold the encryption keys and can access message content where necessary to run automated safety screening, review content that is reported to us, enforce our Terms, comply with legal obligations, or protect our users. We designed it this way deliberately so that abuse inside chats can be acted on.
• Automated safety screening. The text of messages is screened by an automated content-moderation service (OpenAI, see Section 7). Content that the screening flags, and messages that other users report, may be reviewed by our moderation team. We strictly screen for and report unlawful content, including any sexual content involving minors.
• Reported messages. When someone reports a message, our moderation team can see that message and up to 5 messages before it in the same conversation, from anyone in it. They can play the reported message if it is a voice message. A moderation case about the message keeps an encrypted copy of these messages (for a voice message, the link to the recording). This copy stays with the case record, even if the messages or an account are deleted later (see Section 11). Our moderators may also have the text translated into Arabic by DeepSeek (see Section 5.2).
• Voice messages. Voice recordings are captured only while you actively record, are limited in length, and are stored on our servers so recipients can play them. Recordings that never become part of a sent message are deleted automatically.
• Stories. Stories are visible to other users while live and expire after 24 hours, after which the media files are deleted from our systems as part of routine housekeeping. Stories can be photos or videos of up to 15 seconds. A story that has been reported may be kept after it expires, while the report about it is being handled or the story is held as evidence, and a private evidence copy of it may be kept (see Sections 5.2 and 11).
• Presence and receipts. People you chat with can see delivery and read indicators, typing/recording activity, and your online / “last seen” status. You can turn off your online status in the App’s settings (“Hide online status”), which hides it everywhere.
• Chat search. When you search your messages, the matching runs on our servers over your own conversations only; your search terms are processed transiently and are not logged.
• Push notifications. New-message notifications are delivered through Firebase, but the notification payload never contains the message text; the App fetches the content over an encrypted connection when you open the conversation.
• Chat customization. Your cosmetic choices (bubble style, font, background selection) are stored with your account. If you set a personal photo as your chat background, that photo stays on your device only — it is never uploaded to our servers and no other user can see it.
• Follow requests and who can message you. We are introducing follow requests. Until they are switched on, following someone is immediate, and a first message from someone you don’t follow arrives as a request that you must accept before the conversation continues. Once they are on, following someone sends them a request and you follow them only after they accept; profiles and posted content stay public; only people who follow you (with your accepted request) can start a new chat with you, and your chat settings let you narrow this further. If someone declines your request, it keeps showing as “Requested” to you; unanswered and declined requests are deleted after 90 days. We store your block list to enforce your choices.
• Deletion. Deleting a conversation removes it from your view; like most messaging services, the other participant keeps their copy of the conversation. Deleting a message hides it from the conversation. Deleting your account permanently deletes the messages, voice recordings, and stories you sent from our systems (see Section 12.1). The exception is what is kept with a moderation case about something that was reported, such as a reported message and the messages before it, or a reported story and its evidence copy (see Section 11).

7. How We Share Your Information

We do not sell your personal information for money. We share information only as described below:

7.1 Service providers (processors)

We use trusted third-party providers to operate the App. They process information on our behalf and under contract:

Provider	Purpose	Data involved
Google Firebase	Push notifications, analytics, app infrastructure	Device/installation identifiers, push token, app interactions
Google Play Billing	In-app purchases and subscriptions	Purchase tokens, product IDs
Google Sign-In	Optional account sign-in	Account ID, name, email, photo
Google AdMob	Advertising (most regions)	Advertising ID, device data, IP
Meta Audience Network, Pangle (ByteDance), Mintegral	Ad mediation partners that AdMob may request ads from (their software is part of the App wherever AdMob is used)	Advertising ID, device data, IP
Yandex Ads	Advertising (certain regions)	Advertising ID, device data, IP
Yandex AppMetrica	Analytics bundled with Yandex Ads (certain regions)	Device identifiers, app interactions
OneSignal	Push notifications	Device / push identifiers
Runware	AI image generation and editing	Prompts, reference/generated images
OpenAI	Text and image content moderation (including chat-message safety screening), including still frames from videos you post	Submitted text and images, message text, video frames
Anthropic	Automated image-safety screening, including still frames from videos you post; designing AI themes and keyboard skins	Uploaded images, video frames; theme and keyboard-skin descriptions and any reference photo you add
DeepSeek	Prompt enhancement, report classification, translation (text you ask to translate, and text our moderation team translates into Arabic), sorting messages sent to our support team	Prompts; report reasons and notes and the text of the reported public content (such as names, usernames, bios, comments, captions); comments, post descriptions and messages you ask to translate; for moderation: the text of reported content and notes on reports, reported chat messages and up to 5 messages before them, and the text of new posts and Reels with the poster’s name and bio; support messages
Cloudflare	Network, security and delivery for all traffic to our servers, from the App and our website (it sees every request and tells us the country it comes from); image, video and media storage (Cloudflare R2)	IP address and request data for all traffic; uploaded and generated media, voice messages, story media, videos and their sound (Reels, video stories)
AudD	Music recognition for videos you post	One or two 12-second audio samples from the video (no picture, no account details)
MaxMind GeoIP database	Country-level geolocation	A copy of the database runs on our own servers; nothing is sent to MaxMind
ipwho.is (run by ipwhois.io)	Country-level geolocation when Cloudflare and our own lookup cannot tell	IP address (to derive country)

Each of these providers processes data under its own privacy policy. We encourage you to review them:

• Google (Firebase, Play Billing, Sign-In, AdMob) — policies.google.com/privacy
• Meta Audience Network — facebook.com/privacy/policy
• Pangle — pangleglobal.com/privacy (choose your region)
• Mintegral — mintegral.com/en/privacy
• Yandex Ads — yandex.com/legal/international_ads_privacy_policy
• Yandex AppMetrica — yandex.com/legal/confidential
• OneSignal — onesignal.com/privacy_policy
• Runware — runware.ai/privacy
• OpenAI — openai.com/policies
• Anthropic — anthropic.com/legal/privacy
• DeepSeek — DeepSeek privacy policy
• Cloudflare — cloudflare.com/privacypolicy
• MaxMind — maxmind.com/en/privacy-policy
• ipwho.is (run by ipwhois.io) — ipwhois.io/privacy
• AudD — audd.io/privacy

7.2 Other disclosures

• Legal and safety. We may disclose information to comply with applicable law, legal process, or enforceable governmental request; to enforce our Terms; to protect the rights, property, or safety of our users, the public, or us; and to report unlawful content (such as child sexual abuse material) to the appropriate authorities.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

8. Advertising and Analytics

The App is supported by advertising. We use Google AdMob in most regions and Yandex Ads in certain regions, selected based on your country. Through AdMob mediation, ads may also come from Meta Audience Network, Pangle and Mintegral. Advertising partners may use your Advertising ID and related device information to deliver and measure ads.

• Consent in the EEA, UK, and Switzerland. Where required, we present a consent prompt (using Google’s User Messaging Platform) before personalized ads are shown. You can change your choice at any time from the App’s privacy settings.
• Your controls. You can reset or delete your Advertising ID, or opt out of ad personalization, in your device settings (Settings → Google → Ads on Android).
• Analytics. We use Google Firebase Analytics to understand how the App is used. Where Yandex Ads is used, the Yandex AppMetrica analytics bundled with it also runs.
• Users under 13. If you tell us you are under 13, you get only non-personalized, child-directed ads and no third-party analytics, in every country, starting from the next time you open the App. The App then does not start the other ad networks that AdMob works with (Meta Audience Network, Pangle and Mintegral) or Yandex Ads, so any ads you see come from Google (see Section 13).
• For more information, see Google’s and Yandex’s respective privacy and advertising policies.

9. Identifiers and Similar Technologies

The App does not use browser cookies in the traditional sense, but it and our partners use device identifiers, advertising identifiers, software development kits (SDKs), local storage, and similar technologies to operate features, remember settings, deliver ads, and analyze usage. You can manage advertising identifiers through your device settings as described in Section 8.

10. International Data Transfers

We and our service providers may process and store your information in countries other than your own, including the United States, China and other jurisdictions that may have data-protection laws different from those in your country. Where we transfer personal information out of the EEA, the UK or Switzerland, we use the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses, or rely on an adequacy decision, where these are available. DeepSeek processes data in the People’s Republic of China, which does not have an EU adequacy decision; it handles the data under its own terms.

11. Data Retention

We retain personal information for as long as necessary to provide the App and for the purposes described in this Policy, unless a longer retention period is required or permitted by law. In particular:

• Account, profile, and community content are retained until you delete them or delete your account, except what is kept with a moderation case (see “Reports and moderation records” below).
• AI prompts and reference images submitted for generation are used to produce your result. If our safety check refuses a prompt, we keep that prompt (never a refused picture) with your account or device for 90 days, or longer while the account is banned or the phone is blocked from uploading, so that our team can spot repeated attempts. Generated images you publish are retained until removed; a reported AI picture may have an evidence copy (below).
• Messages and voice recordings are retained until they are deleted — for example when you delete a message, when your account is deleted, or when the recipient’s copy is removed. Stories expire after 24 hours and their media files are deleted. Unsent voice recordings are purged automatically. Copies of reported messages are kept with the moderation case (below).
• Purchase and transaction records are retained as required for accounting, tax, and fraud-prevention purposes.
• Moderation and safety records may be retained as needed to enforce our policies and to comply with legal obligations.
• Your videos. Reels are kept until you delete them or your account (a reported Reel may also have an evidence copy, below); rejected Reels are deleted after 30 days and failed uploads after 7 days. The private copy with sound of a muted Reel is deleted after 30 days (later only while a sound restore granted on a music dispute is still being processed, or while the Reel is part of an open moderation case or under an evidence hold). Raw uploads are deleted after processing. Video stories expire after 24 hours, like photo stories.
• Reels shown to you and “Not interested” choices: 60 days.
• Your Reels taste profile: 30 days after it last changed.
• Music-recognition records. The log of each check (the result, not the audio) is kept for 13 months.
• Reports and moderation records:
  • the IP-based code on a report: 30 days;
  • notes and device identifiers on reports that were closed without action: 180 days after closing;
  • other report and case records: 2 years after closing;
  • records about content safety: at least 1 year, and normally 2 years after closing, unless they are under an evidence hold (below);
  • feedback you give about your own AI results: 90 days;
  • notices we sent you about a decision: 1 year;
  • evidence copies of pictures and videos (Section 5.2): 90 days after the case is closed, unless the case is under an evidence hold (below).
  A case record includes a copy of what was reported (for a chat message, an encrypted copy of it and of up to 5 messages before it). Case records about reported content are kept for these periods even if the content or the account that posted it is deleted. Reports you filed are kept, but no longer linked to your account, once you delete your account. Evidence holds. Some cases are kept on purpose under an evidence hold: every case in our safety queue (for example about child safety, self-harm or threats), every case our moderators pass on to our administrators, and a child-safety case we report to the authorities. A held case, its evidence copies and its records are not deleted on a schedule: a hold has no fixed end date.
• Copyright notices and counter-notices: kept 3 years after the matter is closed.
• Follow requests: unanswered or declined requests are deleted after 90 days.
• Ban records (the banned account’s ID and Google account ID, the advertising ID, device identifier and DRM-based code of a phone it used, and the reason): kept until we lift the ban, even if the account is deleted.
• Staff action records (for example that an account was banned, warned or given a strike, and the reason): kept in our staff log with no fixed deletion date, also after a ban is lifted or the account is deleted.
• Deletion records. When an account is deleted, we keep a record of the deletion (the account ID, username, email address, display name and Google account ID) so that we can confirm it. It has no fixed deletion date.
• Girls-only confirmation: kept with your account until your account is deleted. An answer kept on your phone stays there until you change it, use “Delete my data”, clear the App’s data or uninstall the App.
• Translations. A translation you ask for of a message is kept, encrypted, for as long as the message. Translations of other text, such as comments, descriptions, names and bios, are kept with the original text in a translation store, so that the same text is not translated twice. This store is not linked to any account. It has no fixed deletion date and is not cleared when you delete your account. Translations our moderation team makes of chat messages, story text, AI prompts and notes on reports are not stored.
• Age answer (only “under 13” or “13 or older”, never your birth year or month; and how many times and when you changed it to an older age): kept with your account and device until you delete them.

When information is no longer needed, we delete or anonymize it.

12. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Rectification — correct inaccurate or incomplete information;
• Deletion — request that we delete your personal information;
• Restriction and objection — restrict or object to certain processing, including processing based on legitimate interests and direct-marketing/advertising;
• Portability — receive your information in a portable format;
• Withdraw consent — where we rely on consent, withdraw it at any time;
• Lodge a complaint — complain to your local data-protection authority.

12.1 How to exercise your rights

• In-app deletion. You can delete your account and associated data from within the App’s settings. You can also remove individual uploads and profile content at any time. Some records are kept after your account is deleted, as described in Sections 6 and 11 (for example moderation case records, evidence copies and ban records).
• Suspended accounts. A suspended (banned) account cannot be deleted in the App or on our data-deletion page. Email us at support@katyaapps.com and we will review the suspension and your deletion request.
• By email. Contact us at support@katyaapps.com to make a request. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by applicable law.

12.2 U.S. state privacy rights

If you are a resident of California or another U.S. state with comprehensive privacy legislation, you may have rights to know, access, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information or “targeted advertising.” We do not sell personal information for money. To the extent the use of advertising identifiers constitutes “sharing” or “targeted advertising” under applicable law, you may opt out via your device’s advertising controls (Section 8) or by contacting us. We will not discriminate against you for exercising your rights.

12.3 California Privacy Rights (CCPA/CPRA)

This section provides the disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). Where another U.S. state grants comparable rights, we honor the equivalent rights for residents of that state.

Categories of personal information we have collected in the preceding 12 months, the sources, the business/commercial purposes, and the categories of third parties to whom each is disclosed:

• Identifiers (device identifiers, Android Advertising ID, Firebase installation ID, account ID, IP address, and a one-way code made from your phone’s DRM ID, which we use only to stop banned phones from uploading and do not disclose) — sources: your device and your use of the App; purposes: operate the service, sign-in, security/anti-fraud, advertising; disclosed to: ad networks (AdMob and its mediation partners Meta Audience Network, Pangle and Mintegral; Yandex), Firebase, our hosting/storage providers. Also the information in copyright notices and counter-notices (name, address, phone, email) — source: you; disclosed to: the other party to the notice, as described in Section 5.3.
• Internet or other network activity (app interactions, generation requests, diagnostics) — sources: your use of the App; purposes: operate and improve the service, safety/moderation, analytics; disclosed to: Firebase Analytics, our service providers.
• Commercial information (purchase/subscription records) — sources: Google Play Billing; purposes: fulfil purchases, entitlement, support; disclosed to: Google Play, our service providers.
• Geolocation data (approximate, country-level, derived from IP, or a “Russia” hint from your phone’s language, SIM or network) — sources: your IP address and your device; purposes: regional ad configuration, showing Reels from your region, and legal compliance; disclosed to: ad networks, geo-IP providers.
• Audio/visual information (images and any reference photos you upload for AI features or community posts; videos and their sound that you post (Reels, video stories), and short audio samples used for music recognition) — sources: you; purposes: provide the requested feature, safety/moderation, music copyright; disclosed to: our AI, storage, content-safety and music-recognition processors (see Section 7).
• Sensitive personal information: the contents of messages you send or receive in chat — sources: you and the people you chat with; purposes: deliver messages, automated safety screening, moderation of reported messages, and translation when you or our moderators ask; disclosed to: OpenAI (safety screening), DeepSeek (translation), our hosting and storage providers.
• Characteristics of protected classifications (age: only “under 13” or “13 or older”, never your birth year or month; and how many times and when you changed it to an older age) — source: you; purpose: apply age-appropriate limits and child-privacy protections; not disclosed to third parties, except that ad requests for users who tell us they are under 13 are marked as child-directed in every country, starting from the next time they open the App (the birth year itself is never sent).
• Sex (only that you confirmed you are a girl under the girls-only rule, and when we first recorded it) — source: you; purpose: apply the girls-only rule; not disclosed to third parties.
• “Not a girl” reports about an account — source: other users; purpose: apply the girls-only rule; disclosed to DeepSeek, which helps sort reports about public content and, when our moderators translate a case, translates report notes and reported text, including reported chat messages (see Section 5.2).
• Inferences (a Reels taste profile: the creators and tags you seem to like, worked out from your likes, saves, shares, watch time and “Not interested” choices in Reels) — source: your use of Reels; purpose: order Reels in For You; kept 30 days after it last changed; not disclosed to third parties; never made for users under 13. We do not build other behavioral profiles beyond what the ad networks derive from the advertising identifier we share with them.

“Sale” and “sharing.” In the preceding 12 months we have not sold personal information for monetary consideration. We do “share” (i.e., disclose for cross-context behavioral advertising) the Advertising ID and related device/approximate-location data with our advertising partners (AdMob and its mediation partners and, in some regions, Yandex). We do not knowingly sell or share the personal information of consumers under 13.

Do Not Sell or Share My Personal Information. You may opt out of this sharing: (a) in the App via the “Your Privacy Choices” control in Settings, which sets your ads to non-personalized; (b) through your device’s advertising controls (Section 8); or (c) by contacting support@katyaapps.com. We honor opt-out preference signals, including the Global Privacy Control (GPC), where technically feasible.

Right to limit the use of sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CPRA (such as providing the service you requested and safety/security). To the extent any such use exists, you may request that we limit it by contacting us.

Authorized agents. You may use an authorized agent to submit a request to know, delete, correct, or opt out. We may require the agent to provide proof of authorization and may require you to verify your identity directly.

How to exercise these rights: use the in-App controls described above, the support@katyaapps.com address, or our data-deletion page. We will not discriminate against you for exercising any of these rights, and we will respond within the timeframe required by law.

13. Girls-Only Rule, Age and Younger Users

CutePop is made for girls. The App is intended for users aged 13 and older and is not directed to children under 13.

The girls-only rule

CutePop is a space made for girls, so that they can post, chat and share with less risk of unwanted contact from boys and men. From version 5.1.3, the App asks you to confirm: “I’m a girl and I agree to the girls-only rule. Accounts that pretend are banned.” You need to confirm before you can use the App. Versions of the App before 5.1.3 do not ask, so we cannot promise that every user has confirmed.

• It is your own answer. We ask only this question. We do not ask for photos, ID or a face scan, and we do not check your answer. Because we do not check, we cannot promise that everyone on CutePop is a girl. Please block and report accounts that pretend.
• What we keep. If you are signed in when you confirm, or you sign in later on the same phone, we keep with your account that you confirmed and the date and time we first recorded it. If you are not signed in, your answer is kept only on your phone. The answer on your phone is not copied to your phone’s backups.
• If you choose “I’m not a girl”. This answer stays on your phone and is not sent to us. The App then shows only a page saying that CutePop is only for girls, with “Change my answer”, “Delete my data” and links to our Terms of Use and this Policy. Each time you open the App, it still connects to our server as described in Section 2.2 (for example, it sends your device identifiers and country) and starts the advertising tools described in Section 8, although it shows no ads on that page.
• Changing your answer. “Change my answer” removes the “I’m not a girl” answer from your phone and asks the question again. Once your confirmation is kept with your account, it stays there until your account is deleted.
• Deleting your data. “Delete my data” on the “CutePop is only for girls” page deletes your account, if one is signed in on the phone (a suspended account cannot be deleted this way, see Section 12.1). It also asks our server to delete this device’s data, such as its credits and its age answer. If this phone was used with an account that is not signed in, use our data-deletion page or email us instead. On the phone, it signs you out and clears your favourites, the App’s saved settings and your answer. Afterwards, the App asks the question again.
• Younger users. Users who tell us they are under 13 see the same question. They cannot sign in, so their answer stays on their phone.
• Why we ask, and our legal basis. We use your answer only to apply the girls-only rule. If you are in the EEA or the UK, we rely on our legitimate interests (Art. 6(1)(f) GDPR / UK GDPR): keeping CutePop a space made for girls, for the safety and comfort of the girls who use it. You can object to this (see Section 12), but confirming is needed to use the App: if you do not confirm, you cannot use it.

“Not a girl” reports and bans

• If the report menu shows “Not a girl / pretending to be one”, you can use it to report an account, a chat message, a comment, a story or a Reel. These reports are handled like other reports (see Section 5.2): our moderation team reviews them, looking at what was reported and at the account’s profile and posts in CutePop (for a reported message, that message and up to 5 messages before it). Automated checks help sort reports and may close some that look unfounded. The person you report is not told who reported them. Please do not report someone only because of how they look or sound, and please don’t add guesses about anyone’s body, health or sexuality to a report note.
• Only a person on our moderation team can ban an account for breaking the girls-only rule, and only when what the account itself says, posts or sends clearly shows that it does not belong to a girl. We do not judge anyone by how they look or sound. The banned account is shown: “This account broke CutePop’s girls-only rule.” Bans work as described in Section 5.2: only our administrators can lift them, and you can ask us to review a ban by emailing support@katyaapps.com.
• “Not a girl” reports and the decisions on them are kept like other moderation records (see Section 11).

The age question

Before you use chat, AI features (including Photo Magic) or any posting feature for the first time, the App asks your birth year (and the month only when it decides whether you are 13). We do not ask for your full date of birth. We use your birth year (and the month, if we asked it) only to work out whether you are under 13 or 13 or older, and then we throw them away: we never keep your birth year or month, not on our servers and not on your phone. We keep only “under 13” or “13 or older”. If you say you are under 13, the limits for younger users stay on until you change your answer with “Change my age”; they do not lift by themselves when you turn 13. We use the answer only to apply the limits below. The answer is self-declared; we do not verify it.

Changing your answer

You can change your answer to a younger age at any time, and to an older age at most twice, the second time at least 24 hours after the first. If you never signed in, the changes are counted for your device. If you were signed in, a change applies to your account and every device signed in to it, and it is counted for the account. If you have been signed out because you said you are under 13, the App may ask you to confirm your Google account before the change; we use that only to check which account is yours and store nothing from it. If you made a mistake and have no changes left, contact us.

If you tell us you are under 13

Your account and device can only browse, download and set wallpapers, watch Reels and report content. You cannot:

• sign in, so the features that need an account (likes, saves, follows and choosing a username) are not available; if you were signed in, the App signs you out the next time you open it;
• post anything (wallpapers, live wallpapers, photo or video stories, Reels, comments), or change your profile photo, cover, display name, bio or website;
• view stories, use chat (except to report a message or leave a group) or play quiz duels;
• use AI features, including Photo Magic.

You can still report content: without signing in, your report is stored with your device identifier. Other users cannot message you directly, invite you to a group chat or challenge you to a quiz duel.

Extra protections for under-13 users

When you tell us you are under 13, wherever you are:

• We delete the advertising ID and the push-notification token we had stored for your devices, the record of when you were last online, and the lists of Reels and posts already shown to you, and we do not store an advertising ID again.
• From the next time you open the App, we collect only what the App needs to work:
  • the App does not send a push-notification token, so you get no push notifications, and push-notification consent through OneSignal is withheld;
  • it does not send which Reels were shown to you or which stories you viewed, and it shows no online or “last seen” status for you.
• You get only non-personalized, child-directed ads and no third-party analytics, in every country, starting from the next time you open the App:
  • the App shows only non-personalized ads, with requests marked as child-directed and limited to content suitable for all ages, and it does not start the other ad networks that AdMob works with (Meta Audience Network, Pangle and Mintegral);
  • Google Firebase Analytics is turned off, and the App does not start the Yandex advertising and AppMetrica analytics services.
• These protections stay on, from each next time you open the App, for as long as the age answer stored for your device or account says you are under 13.
• Reels in For You are not personalized: we keep no taste profile for you, and the order depends only on how other users react to each Reel, how new it is and your country.

Deleting the data, parents and guardians

A user under 13, or their parent or guardian, can delete the data at any time: in the App, with “Delete my data” on the page that explains the age limits (it also deletes the account if one was signed in on the phone), on our data-deletion page, or by contacting us. If you believe a child under 13 has given us personal information, contact us at support@katyaapps.com and we will delete it.

Child safety

We prohibit child sexual abuse and exploitation (CSAE) and screen uploaded images and videos and AI-generated images for such content. See our Child Safety Standards for how we prevent, detect, and report it, and for our child-safety point of contact.

14. Data Security

We use technical and organizational measures designed to protect your personal information, including encryption of data in transit using HTTPS/TLS, encryption of stored chat message content at rest (AES-256), access controls, and rate limiting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

From version 5.1.3, the App also blocks screenshots and screen recordings on most screens that show people, their posts, chats or stories (for example Home, Reels, chats, stories and profiles): such captures are blocked or come out black. This cannot stop someone from photographing a screen with another device, and older versions of the App do not block screenshots.

15. Third-Party Services and Links

The App may contain links to, or integrate, third-party services (such as social platforms you add to your profile, or links opened in your browser). This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use. The privacy policies of the third parties we integrate to operate the App are linked in Section 7.

16. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice within the App. Your continued use of the App after the changes take effect constitutes your acceptance of the revised Policy.

17. Contact Us

If you have any questions, requests, or concerns about this Policy or our privacy practices, please contact us:

• Email: support@katyaapps.com
• Operator: Katya Apps
• Address: Amman, Jordan