Privacy Policy
Last updated: February 15, 2026
Data controller: brotto.io
1. Contact
For privacy inquiries, support, and data subject requests: [email protected].
2. Data We Collect
We collect minimal personal data required to operate the service:
- Apple ID identifier (for authentication);
- Optional name and email (if provided via Sign in with Apple);
- Prompts and content metadata submitted for AI generation;
- Device information and technical logs for diagnostics;
- Billing information processed by Apple for In-App Purchases.
3. How We Use Your Data
We process data to provide the service (content generation, account management), ensure security and prevent abuse, improve our product, and comply with legal obligations. For non-essential cookies and marketing communications, we rely on your consent.
4. Data Sharing
We share data with infrastructure providers, AI service providers (for content generation), analytics tools, and payment processors — strictly as necessary to operate NUL, under contractual confidentiality and security obligations.
5. Third-Party AI Services
NUL uses third-party AI service providers to generate content. When you create content using the App, the following data may be sent to these providers:
- Text prompts and descriptions you enter;
- Images, audio, or video files you upload as reference material;
- Generation parameters (aspect ratio, duration, style settings).
Your Apple ID, name, email address, and payment information are never shared with AI providers. All requests are routed through our secure proxy server.
The third-party AI providers we use include:
- Google (Veo for video, Imagen for images);
- OpenAI (Sora for video, GPT-Image for images);
- Kuaishou (Kling for video generation);
- MiniMax (Hailuo for video generation);
- Midjourney (image generation);
- ElevenLabs (text-to-speech, sound effects, audio processing);
- Alibaba (Wan for video generation);
- xAI (Grok Imagine for video and image generation);
- Anthropic (Claude for Prompt Studio chat assistant).
Each provider processes your data solely for the purpose of generating the content you requested. Generated content URLs are temporary and expire approximately 14 days after creation. Each provider is subject to their own privacy policies and data retention practices. We require that all providers maintain appropriate security and confidentiality protections for user data.
The App requests your explicit consent before sharing any data with these third-party AI services. You may review this consent at any time through the App settings.
6. International Transfers
Some of our service providers may process data outside of Brazil. In such cases, we adopt appropriate safeguards and legal bases for international data transfers.
7. Data Retention and Deletion
We retain data for as long as necessary to fulfill the purposes described above, comply with legal obligations, and exercise our legal rights. Upon valid request, we may delete or anonymize your data where applicable.
8. Your Rights
Depending on your jurisdiction, you may have rights including: access to your data, correction, deletion, portability, restriction of processing, and withdrawal of consent. To exercise these rights, contact [email protected].
9. Information Security
We employ technical and organizational measures to protect against unauthorized access, loss, alteration, and improper disclosure of personal data.
10. Children
The App is not directed at children under 17. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact [email protected].
11. Cookies
Our website uses cookies. For details on what cookies we use and how to manage your preferences, see our Cookie Policy.
12. Changes to This Policy
We may update this policy to reflect legal, technical, or operational changes. The current version will always be available on this page with the last updated date.