Last Updated on February, 3, 2026
Who We Are (Data Controller)
Controller: ViaVia UG (haftungsbeschränkt)
Address: Marchgrabenplatz 4, 80805 Munich, Germany
Registration: HRB 308987, Amtsgericht München
Email: info@viavia.travel
If you are in the EEA/UK and we appoint a representative or Data Protection Officer (DPO), we will list their contact details here.
What Information We Collect
We collect the following categories of information depending on how you use the Service:
A) Account and Profile Information
- Account identifiers (e.g., email address)
- Profile settings (e.g., language, preferences)
B) Content You Provide (Inputs and Outputs)
- Uploaded images (start frame and end frame for video generation)
- Prompts (currently preset; future versions may allow custom prompts)
- Generated videos and related metadata (duration, aspect ratio, creation time)
C) Purchase and Credits Information
- Purchase events and receipts needed to validate in-app purchases (IAP)
- Credit wallet balance and transaction history (purchase, generation, refund)
> We do not receive your full payment card details. Payments are handled by Apple App Store / Google Play; we receive only transaction/receipt information required to validate purchases.
D) Technical and Usage Information
- Device and app information (device model, OS version, app version)
- Log data (IP address, timestamps, crash logs, diagnostic events)
- Approximate location derived from IP address (not GPS) for security and fraud prevention
E) Communications
- Messages you send to support, bug reports, and feedback
How We Use Your Information
We use information for the following purposes:
A) Provide and Operate the Service
- Create and manage your account
- Process your uploads to generate videos
- Display your generated results and history
- Provide customer support
B) Maintain Credits and Payments
- Validate purchases and credit your wallet
- Reserve/finalize/refund credits for generation tasks
- Prevent fraud and abuse
C) Safety, Security, and Performance
- Troubleshoot, debug, and monitor reliability
- Detect and prevent malicious activity and violations
D) Improve the Service
- Analyze aggregated usage patterns (e.g., generation success rates, latency)
- Develop and improve features
E) Legal and Compliance
- Comply with applicable law and respond to lawful requests
- Enforce our Terms and protect our rights
Legal Bases (EEA/UK)
If you are in the EEA/UK, we process personal data under one or more of the following legal bases:
- Performance of a contract: to provide the Service you request (e.g., generating videos, maintaining your account and wallet).
- Legitimate interests: to secure the Service, prevent fraud, improve reliability, and maintain operations (balanced against your rights).
- Consent (where required): for optional features such as marketing communications or certain analytics activities (if enabled). You may withdraw consent at any time.
- Legal obligation: where we must retain or disclose information to comply with law.
How We Share Information
We share information only as needed to run the Service.
A) AI Processing Providers (Generation)
To generate your videos, we share your **uploaded images and prompts** with third-party AI providers (fal.ai) that process them on our behalf. This processing is necessary to provide the Service.
B) Cloud Hosting and Storage
We use cloud infrastructure providers (Supabase) for:
- Secure upload handling
- Database storage
- Authentication services
C) App Stores and Payment Processors
Apple and Google process payments. We share only what is necessary for purchase validation and compliance.
D) Analytics and Crash Reporting
We use analytics and crash-reporting tools to understand performance and fix bugs:
- Firebase Crashlytics (Google) for crash reporting and diagnostics
- PostHog (EU cloud) for anonymized usage analytics
These services help us improve app stability and understand how features are used. PostHog data is stored in the EU for GDPR compliance.
E) Legal Disclosures
We may disclose information if required by law or to protect rights, safety, and security.
International Transfers
Our vendors (including AI providers) may process data outside your country, including outside the EEA/UK.
Where required, we rely on appropriate safeguards for international transfers (such as **Standard Contractual Clauses**) or other valid transfer mechanisms.
Retention (How Long We Keep Data)
We keep personal data only as long as necessary for the purposes described above.
A) Uploaded Images (Inputs)
Deleted after generation completes (or fails) once no longer required.
B) Generated Videos (Outputs)
- If you do not save a video: deleted automatically after 7 days
- If you save a video: kept until you delete it or delete your account.
C) Provider-Side Temporary Availability
Our AI provider (fal.ai) retains generated files for approximately **7 days**. We recommend downloading videos you want to keep.
D) Wallet, Receipts, and Compliance Logs
We may retain purchase/receipt validation and accounting records for longer periods as required for legal, tax, audit, and fraud prevention purposes.
E) Support Communications
Support tickets are retained as long as needed to resolve the issue and for reasonable follow-up.
Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data (with certain exceptions)
- Restrict or object to certain processing
- Port your data (data portability)
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory authority
In-App Controls
- Delete individual videos from My Videos
- Delete your account from Profile (this will delete or de-identify stored data except where retention is required by law)
To exercise rights, contact us at: info@viavia.travel
Children
The Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will take appropriate action.
Security
We use appropriate technical and organizational measures designed to protect information, including encryption in transit (HTTPS/TLS) and access controls. However, no method of transmission or storage is 100% secure.
Third-Party Links and Services
The Service may link to third-party sites or services. Their privacy practices are governed by their own policies.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by other appropriate means. The "Effective date" at the top shows when it was last updated.
Contact
Questions or requests:
- Email: info@viavia.travel
- Address: Marchgrabenplatz 4, 80805 Munich, Germany
If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.