1. Overview

Groovely AI is operated by SLHDDS LTD ("we", "us", "our"), a company incorporated in England & Wales (Company No: 16961592), with its registered address at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. SLHDDS LTD is the data controller for your personal data under UK and EU GDPR.

This Privacy Policy explains how we collect, use, store, and delete information when you use the Groovely AI mobile application.

Groovely AI is intended for users aged 18 and over.

We do not sell, rent, or trade any personal data to third parties.

Last Updated: 24 February 2026

2. Information We Collect

We collect only the images that you upload to the app. These images may contain facial imagery, such as selfies or portraits, which you choose to upload for the purpose of AI video generation.

We do not extract facial geometry, biometric identifiers, or faceprints from your images. Image collection is entirely user-initiated — we only receive images when you explicitly upload them within the app.

We do not require account registration. We do not collect names, email addresses, phone numbers, or profile data within the app.

We do not collect analytics data, advertising identifiers, tracking data, or usage profiling information.

3. How We Use Your Images

Uploaded images, including those containing facial imagery, are used solely to:

  • Generate AI-created video content requested by you
  • Display and store your generated videos within the app

To generate videos, your uploaded images are sent to a third-party AI video generation provider: Fal.ai. This provider processes your images transiently for the sole purpose of generating the requested video and does not retain your images after generation is complete.

Images are not used for:

  • AI model training
  • Facial recognition profiling
  • Biometric identification
  • Marketing
  • Advertising
  • Sale to third parties

Neither we nor our third-party providers perform facial recognition, facial geometry extraction, biometric analysis, or face mapping on your uploaded images.

4. Legal Basis for Processing

Under UK and EU GDPR, we rely on the following legal bases to process your personal data:

  • Contractual necessity (Article 6(1)(b)): Processing your uploaded images is necessary to provide the AI video generation service you requested.
  • Legitimate interests (Article 6(1)(f)): We may process limited data to maintain the security and operation of our service, provided this does not override your fundamental rights and freedoms.
  • Legal obligation (Article 6(1)(c)): We may process data where required to comply with applicable law.

5. Face Data

This section specifically addresses how we handle images containing facial data, as required by applicable platform guidelines.

  • What face data we collect: When you upload a photo to the app, it may contain your face (e.g. a selfie or portrait). We collect only the image file you choose to upload. We do not extract or store any facial geometry, faceprints, or biometric data from your images.
  • How we use face data: Your uploaded face image is used exclusively as input to AI video generation. The image is sent to our server, which forwards it to a third-party AI video generation provider (Fal.ai) to create an animated video based on a template you select. No other use is made of your face data.
  • Third-party sharing: Your face image is shared with our AI video generation provider (Fal.ai) solely for the purpose of generating your requested video. This provider processes the image transiently and deletes it after video generation is complete. Generated videos are stored on Amazon Web Services (AWS) S3 in the US-East region. No face data is shared with any other third parties.
  • Storage: Your uploaded face image is stored temporarily on our servers (hosted on AWS US-East) during video generation. The original uploaded image is not permanently stored — it is used only for processing.
  • Retention: Face images are not retained after video generation is complete. Generated videos (which may contain an animated version of your face) are retained until the earlier of: you deleting them within the app, or thirty (30) days from creation. After this period, they are permanently deleted.

6. Storage & Retention

Images are stored securely on servers hosted by Amazon Web Services (AWS US-East, United States).

Images are retained until the earlier of:

  • You delete them within the app, or
  • Thirty (30) days from the original upload date

After this period, images are permanently deleted.

We do not maintain image backups once deleted. System logs do not store image content.

7. International Data Transfers

As SLHDDS LTD is incorporated in England & Wales and images are stored in the United States (AWS US-East), your data is transferred internationally.

We rely on appropriate safeguards under UK GDPR, including standard contractual safeguards provided by AWS, to protect personal data transferred outside the United Kingdom.

8. Third-Party Service Providers

We use the following third-party service providers to operate our service. Your data is shared with these providers only as described below and for no other purpose:

  • Fal.ai — AI video generation. Your uploaded images are sent to Fal.ai for transient processing to generate your requested video. Images are not retained by Fal.ai after generation is complete.
  • Amazon Web Services (AWS, US-East) — Secure storage of uploaded images and generated videos.
  • RevenueCat — Subscription status and entitlement verification only. No image data is shared with RevenueCat.
  • Apple App Store / Google Play — Payment processing for subscriptions and in-app purchases. We do not process or store payment card information.

9. Payments & Subscriptions

Subscriptions and in-app purchases are processed exclusively by:

  • Apple App Store (iOS)
  • Google Play Billing (Android)

We do not process or store payment card information.

RevenueCat is used solely to manage subscription status and entitlement verification. No image data is shared with RevenueCat.

10. Data Deletion

You may delete your uploaded images at any time within the app.

If you cancel your subscription, your stored images are automatically deleted.

If you require assistance, you may contact: support@groovely.ai

11. Your Rights (UK & EU GDPR)

If you are located in the United Kingdom or the European Economic Area, you have the following rights under applicable data protection law:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete personal data.
  • Right to erasure: Request deletion of your personal data.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to data portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@groovely.ai.

As the app does not require accounts, identification may be required to verify ownership of data before processing requests.

You also have the right to lodge a complaint with your local supervisory authority:

  • UK: Information Commissioner's Office (ICO) — ico.org.uk
  • EU: Your local data protection authority in the EEA member state where you reside.

12. Security

We implement reasonable technical and organisational measures to protect uploaded images against unauthorised access, alteration, or loss. However, no system can be guaranteed to be completely secure.

13. Age Restriction

Groovely AI is intended for users aged 18 and over. We do not knowingly collect data from individuals under 18.

14. Cookies & Tracking

The Groovely AI mobile application does not use cookies, advertising identifiers, or tracking technologies.

Our website (groovely.ai) does not use cookies, analytics services, or third-party tracking scripts.

15. Your Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

  • Right to know: You may request information about the categories and specific pieces of personal information we have collected about you.
  • Right to delete: You may request that we delete personal information we have collected from you.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

We do not sell personal information. We do not use or share personal information for cross-context behavioural advertising.

To exercise your rights, contact us at support@groovely.ai.

16. Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or a portion of our assets, your personal data may be transferred to the successor entity. We will notify you of any such change and ensure the successor is bound by commitments consistent with this Privacy Policy.

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of England & Wales. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of England & Wales, without prejudice to your rights under applicable local data protection law.

18. Contact Us

For any privacy-related questions, data requests, or to exercise your rights under this policy, please contact us:

  • Email: support@groovely.ai
  • Data Controller: SLHDDS LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

19. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above.