Privacy Policy

• Account data: name, email address, login credentials, and account settings.
• Consent records: when you confirmed you are 16 or older and which version of our Terms and policies you accepted.
• Usage and device data: IP address, device identifiers, browser/app metadata, and logs.
• Billing data: transaction metadata and payment records (payment details are processed by payment providers).
• Support and uploaded content: files or messages you submit for support or service features.

Reference images go to our AI partner, not to our servers. The reference image you choose for an AI character is sent directly from the Camify desktop app to our AI inference partner Decart (Decart Inc., USA), which uses it to generate your live character. It is never uploaded to or stored on Camify servers, and we do not see it, copy it, or retain it. If you pick an image from your Camify Studio gallery, that image is stored by Camify Studio under its own privacy policy.

Live webcam frames and prompts. To drive a character live, your webcam frames and the text prompts for your character are streamed to our AI inference partner Decart (Decart Inc., USA) for real-time transformation, and the result is returned to your app. Camify does not keep a recording of your live video.

How Decart may use this content. Under Decart's API terms, the content sent to Decart (webcam frames, reference image, and prompts) and the AI output it creates are not treated as confidential, and Decart may use them to run and improve its AI models, including training. Decart handles personal data under its own privacy terms and data processing agreement. Do not show or type sensitive information (for example health details, ID documents, or bank cards) into Camify.

Biometric and special personal information (POPIA Sec 26). Webcam frames may contain biometric information (your face). Camify processes this information only for the purpose of producing the real-time character output you requested, on a contract-performance basis under POPIA, and does not build a biometric template, identification database, or profile from this data.

We do not process voice or audio. Camify currently does not capture, transmit, or process microphone audio. If this changes, this section will be updated and you will be notified before the change takes effect.

We do not sell live camera feeds. We do not store live feeds on our servers as recordings unless you explicitly upload content (for example, a support attachment).

Depending on your location, we process personal data under one or more of these legal bases:

• Performance of a contract (to provide requested services).
• Legitimate interests (security, fraud prevention, service improvement).
• Compliance with legal obligations.
• Consent, where legally required.

We do not sell personal data. We share the minimum data necessary with the following sub-processors:

• Decart Inc. (USA). Real-time AI character generation. Receives live webcam frames, the reference image you choose, and your prompts, and may use them and the output to improve its models (see section 03).
• SendGrid / Twilio (USA). Transactional emails (verification, receipts, password resets). Receives your email address only.
• DigitalOcean (Netherlands / USA). Infrastructure hosting for the Camify API and admin systems.
• Manual cryptocurrency payments (Bitcoin, USDT). Where you choose to pay in BTC or USDT, the transaction id (TXID) and wallet reference are recorded against your account. No third-party crypto processor is used.
• Fraud and risk partners to detect and prevent abuse.
• Law enforcement or regulators when legally required, or when necessary to protect rights, prevent fraud, or enforce our policies.

Camify is operated from the Republic of South Africa. The following data may be transferred to processors outside South Africa:

• United States. Decart (live webcam frames, reference images, and prompts). SendGrid (transactional email).
• European Union / Netherlands. DigitalOcean (infrastructure).

By creating an account and using the Service you explicitly consent to these transfers (POPIA Sec 72(1)(b)). Where required, we rely on standard contractual safeguards with each processor. If you do not consent to these transfers, do not create an account.

Depending on your location, you may have rights to access, correct, delete, restrict, object, or export your personal data. You may also withdraw consent where processing is based on consent.

To exercise these rights, email privacy@camifycam.com. We may verify your identity before processing requests.