This Privacy Policy explains how PixHaha AI ("we", "us", or "our") collects, uses, shares, retains, and protects personal information when you use our Android application and related services (the "Service").

Please read this Privacy Policy carefully. By using the Service, you acknowledge this Privacy Policy. If you do not agree with it, please do not use the Service.

The information we collect depends on how you use the Service and the choices you make.

• Account and authentication information: When you sign in with Google, we process the information needed to authenticate and maintain your account. This may include your email address, display name, profile image URL, authentication token, and the account identifier created for you.
• Profile information: We process information you choose to add to your profile, such as your nickname, avatar, profile fields, and profile media.
• Creation content: When you use creation features, we process the images you select or capture for input, the template and creation settings you choose, your created image or video works, and related job information such as processing status, creation time, download status, and deletion status. This information is needed to create, display, manage, download, and delete your works.
• Purchase and subscription information: When you purchase coins or a VIP subscription, we process the product identifier, order or purchase token, purchase verification result, subscription status, and records needed to provide purchased benefits, prevent fraud, and resolve payment issues. Google Play processes payment details under its own privacy policy; we do not receive your complete payment-card number.
• Device, network, and security information: We and our service providers may process technical information including IP address, device model, operating system version, app version, language, network information, Android ID, and device security or anti-fraud identifiers. With the permissions and choices available on your device, this may also include the Google Advertising ID and a device identifier derived from device characteristics.
• Attribution information: If you agree to attribution tracking where consent is requested, we may receive installation-source and campaign information from Adjust and Google Play Install Referrer. Meta/Facebook attribution may be used only when it is configured for the applicable distribution campaign.
• Feedback, reports, and communications: If you contact us, submit feedback, or report content or a problem, we process the information and attachments you provide, together with the information needed to investigate and respond.

We use personal information to:

• provide, maintain, and secure the Service and your account;
• authenticate you and prevent unauthorized access, fraud, abuse, and violations of our terms;
• process creation requests and manage your works;
• deliver, verify, and administer coins, VIP subscriptions, and related purchases;
• provide customer support, investigate feedback or reports, and communicate service-related information;
• measure installation attribution and campaign performance when permitted by your consent and applicable law; and
• comply with legal obligations, resolve disputes, and enforce our agreements.

Where applicable law requires a legal basis, we process information to perform our contract with you, to comply with legal obligations, with your consent, and for our legitimate interests in operating, protecting, and improving the Service, subject to your rights.

We share personal information only as needed to operate the Service, comply with law, or with your direction. Recipients may include:

• Service and infrastructure providers: Providers that host, secure, support, or operate the Service and its creation features.
• Google Sign-In and Firebase Authentication: Used to authenticate users who choose Google sign-in.
• Google Play Billing: Used to process and verify in-app purchases and subscriptions.
• Adjust and Google Play Install Referrer: Used for installation attribution and campaign measurement when enabled and permitted.
• Meta/Facebook: Used only when Meta attribution is configured for the applicable distribution campaign.
• Legal and safety recipients: Professional advisers, regulators, law enforcement, or other parties where disclosure is required by law or necessary to protect rights, safety, and security.

We may also share aggregated or de-identified information that does not reasonably identify you. We do not sell personal information in exchange for money.

The Service uses permissions only for the functions you choose to use:

• Camera: Used when you choose to take a photo for an avatar or creation input.
• Selected photos and videos: Used when you choose media from your device for a profile or creation request. We do not need unrestricted access to your entire media library for this purpose.
• Internet and network state: Used to connect the app to the Service, process creation requests, and download your works.

The Service does not request location permission. You can control app permissions in your Android device settings. You can also reset or limit use of the Google Advertising ID through your device settings. Disabling a permission or identifier may affect related functionality.

We retain information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements.

You can request account deletion through the Delete Account option in the app settings. Deleting your account ends access to the Service. We will delete or de-identify personal information associated with your account unless retention is necessary for legal, accounting, security, fraud-prevention, dispute-resolution, or other lawful purposes. Works or purchase records may remain for a limited period where needed for those purposes.

We and our service providers may process information in countries other than the country where you live. Those countries may have data-protection laws that differ from the laws in your country. When we transfer information internationally, we will use safeguards required by applicable law.

We use reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to anyone under 18 years old. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us so that we can take appropriate action.

Google, Google Play, Firebase Authentication, Adjust, Meta/Facebook where enabled, and any third-party pages opened from the Service are governed by their own privacy notices. We encourage you to review them:

• Google: https://policies.google.com/privacy
• Firebase: https://firebase.google.com/support/privacy
• Adjust: https://www.adjust.com/terms/privacy-policy/
• Meta: https://www.facebook.com/privacy/policy

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or objection to certain processing of your personal information, and to request a copy of certain information. You may edit profile information in the app, delete your account through app settings, adjust device permissions and advertising controls, or contact us to exercise applicable rights.

We may need to verify your identity before responding. Your rights may be limited in circumstances permitted by applicable law.

We may update this Privacy Policy from time to time. We will post the updated version at the Privacy Policy link in the Service and change the "Last Updated" date. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.