AniAni Privacy Policy and Privacy Notice
Document version: PP-1.1 Effective date: 2026-09-10 Language: English (Filipino version: privacy-policy.tl.md. Both versions have equal effect. If they conflict, the English version governs, except where the law of your country requires the version in your language to prevail.)
This notice explains what personal information AniAni collects, why, who we share it with, where it goes, how long we keep it, and what you can do about it. It is written to meet the privacy laws of the countries where we offer the Service. In the Philippines, that is the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules, and NPC Circular No. 2025-01 on body-worn cameras and alternative recording devices.
1. Who is responsible for your data
IPSV Studios LLC, a Wyoming, USA limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, operating the AniAni service, is the personal information controller.
- Data Protection Officer: privacy@aniani.app
- General privacy contact: privacy@aniani.app
The privacy law of the country where you live may also apply to us. Nothing in this notice changes the rights you have under that law.
2. What we collect
You give us:
- your mobile number, and the full legal name you sign with;
- your payout account details (account number and account name for the payout channel you choose);
- your delivery address, if we ship you equipment;
- your referral code and who referred you;
- messages you send to support;
- if your cumulative payouts reach the verification threshold published in the app, or we detect a fraud signal: a government-issued ID and a selfie, checked by us or by an identity-verification provider.
Your recordings — the sensitive part:
- video of you performing household tasks from a first-person view, recorded on a phone mounted on your head or chest;
- audio recorded with the video, which captures your voice and household sounds;
- your face, hands, body, and voice, which privacy law treats as sensitive personal information;
- whatever appears in your home or workspace during the recording;
- device motion and sensor data recorded alongside the video.
We collect automatically:
- device model, operating system, app version, storage and battery state, camera capabilities and benchmark results;
- device integrity and attestation signals (Google Play Integrity), and a device fingerprint;
- approximate location and IP address, used to confirm you are in a country where we offer the Service and to detect fraud;
- app usage events: recordings started and submitted, screens viewed, notifications, upload state;
- technical measurements of each recording: duration, frame rate, resolution, sharpness, brightness, shake, and a non-reversible mathematical fingerprint of the recording used to detect duplicates.
We do not ask for or want: financial account passwords, health information, information about your religion, political views, or any special-category information beyond what is unavoidable in the recording itself. Do not record screens, documents, IDs, or bank cards.
3. Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Create and secure your account, send OTP codes | To let you use the Service | Contract |
| Store, check, review, and approve or reject your recordings | To decide what we buy and pay for | Contract; for your face, hands and voice: your explicit consent |
| Build datasets and AI/robotics training material from approved recordings, and sell, license, publish, or openly release them | This is our business, and what your payment is for | Your explicit consent given when you sign the Contributor Content Agreement, together with the transfer of content ownership under that Agreement |
| Pay you, and verify your identity and payout account | To pay you and prevent fraud | Contract; legal obligation for records |
| Detect fraud, duplicates, staged content, multi-accounting | To keep the Service honest and protect other contributors | Legitimate interests |
| Send you service notifications | To tell you about approvals, rejections, payouts, kit shipment | Contract |
| Send you marketing or promotional messages | Growth | Consent, which you can withdraw at any time |
| Keep records of consent, payments, and decisions | To prove what was agreed and to meet legal and tax obligations | Legal obligation and legitimate interests |
You may withdraw consent at any time. Section 8 explains exactly what that does and what it cannot undo.
4. Recording devices
Your phone, worn on your head or chest to record, is a recording device under the privacy rules of the countries where we operate. In the Philippines it is an alternative recording device under NPC Circular No. 2025-01. Because we record for a commercial purpose, exemptions for "personal, family or household affairs" do not apply to us. So:
- The app tells you clearly when recording is active, with an on-screen indicator.
- You must not record any other person unless they are an adult who has signed the household-member consent in the app. Never record anyone under 18.
- If a person under 18 appears in a Submission, we reject it and delete the recording.
- If another adult appears without consent, we reject the Submission; you can re-record.
- Do not record in places where others have a reasonable expectation of privacy and have not agreed, and do not record in public or shared spaces where bystanders will be captured.
- We store recordings encrypted, restrict who can view them, and log every access.
5. Who we share it with
We do not sell your account information, phone number, address, or ID documents to anyone.
We do sell, license, publish, and openly release the approved recordings themselves and datasets built from them — that is what you are paid for under the Contributor Content Agreement, and those recordings contain your image, hands, and voice. Before a dataset leaves our systems we make a best effort to blur faces and to remove location metadata. That is a best effort, not a promise. The recordings still contain your hands, your body, your voice, and the inside of your home, and buyers may be anywhere in the world.
We share personal information with these categories of recipients:
| Recipient | What they get | Where |
|---|---|---|
| Amazon Web Services — hosting, storage, and email support | Everything: recordings, account data, database, and whatever you send us by email | Singapore (ap-southeast-1) and AWS regions |
| Google (Gemini API) — automated quality checks | Frames and short segments of your recordings are sent to Google's Gemini service for automated review. On the paid tier Google states this data is not used to train Google's models, and uploads auto-expire | Google processing regions |
| Google (Play Integrity) — anti-fraud | Device integrity signals | |
| An SMS delivery provider — OTP delivery | Your mobile number | Your country / provider regions |
| Our payout providers — payouts | Your name, payout account, amounts | Provider regions |
| An identity-verification provider, only if we require an ID check | Your ID document and selfie | Provider regions |
| Local couriers — equipment delivery | Your name, address, phone number | Your country |
| Our reviewers and staff | Recordings and account data, on a need-to-know basis, every access logged | Various countries |
| Buyers, licensees, and the public | Approved recordings and derived datasets, faces blurred on a best-effort basis, no contact details | Worldwide |
| Authorities, or a buyer of our business | Where required by law, or on a sale or transfer of the business | As applicable |
6. Sending data outside your country
Your recordings and account data may leave your country. They are stored in Singapore, processed by services in other countries, and approved recordings may be sold, licensed, or published to recipients anywhere in the world. Some of those countries have weaker data protection laws than your own.
By signing the Contributor Content Agreement you consent to this transfer. We remain accountable for the personal information we transfer, and we require our processors to protect it by contract.
7. How long we keep it
| Data | Retention |
|---|---|
| Approved recordings | Indefinitely. We own them under the Contributor Content Agreement and they live on in datasets, models, and copies delivered to third parties |
| Rejected recordings | Deleted 30 days after the decision |
| Practice recordings | Deleted after 60 days; never sold |
| Recording fingerprints (non-reversible hashes) | Kept indefinitely, so a deleted recording cannot be re-submitted. They cannot be turned back into video |
| Contact details — phone number, email, payout account number, delivery addresses | Kept while your account is open and for 90 days after you delete it, so that the last payout can be made and any dispute settled; then removed |
| Your name, payment, and tax records | Kept while your account is open and for 10 years afterwards, to meet record-keeping, tax, and legal-claim requirements |
| The agreement you signed | Kept for as long as any recording it covers exists, as proof of the licence |
| ID document and selfie | Kept for as long as the law allows after verification, then deleted; the pass/fail result is kept |
| Support messages and access logs | For as long as the law allows |
8. Your rights, and their honest limits
Depending on where you live, privacy law gives you the right to be informed; to access your data; to correct it; to object to processing; to have data erased or blocked in the circumstances the law allows; to data portability; to be indemnified for damage; and to complain to your privacy regulator.
To exercise any of these, contact privacy@aniani.app or use the Help screen. We reply within 15 working days, and will explain any delay or refusal.
To delete your account: in the app, open Help, then "How do I delete my account?", and tap Delete my account. Without the app, follow the steps at [aniani.app/delete-account](https://aniani.app/delete-account/). Deletion is permanent. On the day, sign-in stops, recordings we have not approved are deleted, and money you have earned is still paid out. Your contact details are removed 90 days later. Your name and the payment and tax records are kept for 10 years. The agreement you signed is kept for as long as any recording it covers exists.
What deletion actually does, stated plainly:
- A recording you never submitted — never reaches us; delete it on your phone.
- A submitted recording we have not yet approved — ask us and we delete it. You are not paid.
- A rejected recording — deleted automatically after 30 days, or sooner on request.
- An approved recording you were paid for — we own it. We will delete your account information and stop using your recordings in future datasets and releases on request. We cannot recall recordings, datasets, or models already delivered, sold, or published, and we cannot remove your footage from a buyer's systems or from a public dataset already released. This is a limit of reality, not a legal trick, and it is why the Contributor Content Agreement asks you to agree before you record.
- Fingerprints of deleted recordings stay, so that deleted footage cannot be re-submitted for payment. They are one-way hashes and cannot be turned back into video.
- We may keep what we must for tax, accounting, fraud, and legal-claim records even after you close your account.
You may withdraw consent at any time by closing your account. Withdrawal stops future processing; it does not make past processing unlawful, and it does not undo Section 4 of the Contributor Content Agreement for recordings that have already reached our servers.
9. How we protect your data
- All storage is private by default with no public access; encryption in transit (TLS 1.2+) and at rest with keys we control.
- Recordings are never given a public link. Uploads use short-lived, write-only credentials.
- Only three sets of consumers can read a recording: our automated checking workers, our named reviewers (every view logged), and our own dataset pipeline. Reviewer accounts are individual and audited.
- Object versioning and checksums make silent tampering detectable.
- Staff and reviewers are bound by confidentiality and trained on handling this material.
No system is perfectly secure. If a breach affects your personal information, we will use our best efforts to tell you: a notice in the app, a post on our social channels, or both. Where the law requires it, we also notify you directly and the privacy regulator in your country within the time the law sets (in the Philippines, 72 hours from knowing).
10. Automated processing
Automated checks measure recording quality and flag possible duplicates, staged content, and fraud, and an automated model pre-sorts the review queue. A person makes the decision to approve or reject before any payment is made. Recordings can be rejected automatically only for mechanical failures (for example, a corrupt file or an exact duplicate). Our decision is final.
We also calculate a trust score from your approval history, which affects your queue priority and eligibility for boosted tasks. You may ask us to explain it.
11. Children
AniAni is for adults. You must be 18 or older to have an account. We do not knowingly collect information about anyone under 18, and any recording in which a person under 18 appears is rejected and deleted. If you believe we hold data about a minor, contact privacy@aniani.app and we will delete it.
12. Changes to this notice
If we change how we use your information in a material way, we will notify you in the app and, where the law requires, ask for your consent again. The version number and effective date at the top of this notice always tell you which version applies.
13. Complaints
Talk to us first: privacy@aniani.app. If you are not satisfied, you can complain to the privacy regulator in your country.