Last updated: 9 August 2026
The KilGen AI website at kilgen.ai and the iOS application Hailuo AI Image Video Maker (together, the “Service”) are operated by Galib Shifullah (“we”, “us”), who is the data controller responsible for the personal data described below.
This Privacy Policy explains what data we collect, how we collect it, every purpose we use it for, and every third party we share it with.
In short: We do not require an account, name, email address or phone number. We do not collect face data or biometric identifiers of any kind. Your prompts and any photo you select are sent to third-party AI services only when you tap Generate, and only after you accept our in-app data consent screen. Your generated images and videos are stored on your device. We do not sell your personal data, and we do not use your content for advertising or to train AI models.
What: The text you type to describe what you want generated.
How we collect it: Directly from you, when you start a generation.
What we use it for:
What: Only the photos you specifically select for a generation. We do not scan, index, or access your photo library in the background.
How we collect it: Directly from you, through the system photo picker or camera.
What we use it for:
We send your photo for one purpose only: to generate the output you asked for. We do not use it for advertising, profiling or identity verification, we do not use it to train AI models, and we do not sell it or disclose it to data brokers. How the third-party provider may use it is governed by that provider’s own terms — see Section 2.
Retention: We do not keep a copy of your uploaded photo on our own servers unless you choose to publish the result to the community feed. Copies held by the third-party processing infrastructure are subject to that provider’s retention practices.
The model, aspect ratio, resolution, duration and similar options you choose are sent with your request so the output matches your selection.
Your generated images and videos are downloaded to your device and stored locally within the app. You can view, rename, favourite and delete them at any time. Deleting them in the app removes them from your device.
When you start a generation, your prompt, any photo you selected, and your generation settings are transmitted to third-party AI processing services. These services host and run the model you chose, and provide the temporary image storage described in Section 1.2.
Depending on the model you select, your content is processed by:
Your content is sent only for the model you actually select for that generation. It is not broadcast to every provider.
We do not sell your content, and we do not use it for advertising or to train AI models.
Once your content reaches a third-party AI provider, it is handled under that provider’s own terms of use and privacy policy, which govern how they may store and use it. We select providers on the basis of their published terms and send them only what is needed to produce the result you asked for. Because these providers set their own terms, we cannot guarantee their practices on your behalf, and we encourage you to review the terms of the provider operating the model you choose.
We will update the list above as models are added or removed.
The app generates a random identifier and stores it in your device keychain. It is not your name, email address, Apple ID, advertising identifier or device serial number, and it is not linked to your real-world identity. We use it to associate your credit balance, generation history and purchases with your installation of the app.
We collect app launches, screens opened, session length, feature usage, generation outcomes and error diagnostics. We use this to understand which features are used and to fix problems.
This is collected through Google Firebase Analytics and through our own analytics endpoint. Firebase Analytics is provided by Google, which processes this data on our behalf and may collect device information (device model, operating system version, language, country) and a randomly generated app instance identifier. It does not receive your name or email address, because we do not collect them. Google’s handling of this data is described at policies.google.com/privacy.
Subscriptions and credit packs are processed by Apple through In-App Purchase. We never receive or store your payment card details. We record the product purchased, the transaction identifier, the price and the renewal date, so we can grant credits, restore purchases and produce revenue reporting.
If you allow notifications, Firebase Cloud Messaging issues a device token so we can tell you when a long generation has finished. You can disable notifications at any time in iOS Settings.
If you are not a paying subscriber, the app may show advertisements served by Google AdMob. Paying subscribers do not see advertisements.
To select, deliver, and measure those advertisements, Google may collect device and usage information such as device type, operating system, approximate location derived from IP address, and interactions with the advertisement. This is described at policies.google.com/technologies/partner-sites.
The app does not request App Tracking Transparency permission and does not access your device’s advertising identifier (IDFA) for tracking you across other companies’ apps or websites.
The app includes an optional community feed. Nothing you generate appears there automatically.
If you choose to publish a result, that image or video and its caption become publicly visible to other users. If you create a profile, the username, display name, biography, avatar and cover image you enter are also public, along with your follower and following lists and the posts you like.
You can delete individual posts, and you can delete your profile from within the app. You can use the app’s generation features without ever creating a profile.
We do not collect, generate, or store face data or biometric identifiers.
The app performs no face detection, face recognition, facial landmark extraction, face mapping, faceprint or face template generation, face matching, age or gender estimation from faces, emotion detection, or any other biometric analysis. No such capability exists in the app.
You may choose to upload a photo that contains a face. When you do, that photo is handled exactly as any other image: it is transmitted as an ordinary image file to the AI model you selected so that model can produce your requested output. We do not derive any facial measurement, biometric template or identifier from it, we do not use it to identify or authenticate anyone, and we do not build or maintain any database of faces or facial features.
We do not use Face ID or any other biometric authentication.
If you upload a photo containing another person, you are responsible for having that person’s permission. If the photo contains anyone under 18, you confirm that you are their parent or legal guardian, or that you have explicit consent from one.
Before you can use any generation feature, the app presents a data consent screen explaining what is sent, who it is sent to, and what it is used for. Your content is not transmitted anywhere until you accept.
If you decline, generation features are unavailable, but you can still browse the app.
You may withdraw consent at any time by deleting the app. To also remove your public community content, delete your posts and your profile in the app before uninstalling.
| Data | Where it is held | Retained for |
|---|---|---|
| Generated images and videos | Your device | Until you delete them |
| Uploaded photos | Third-party processing infrastructure | Only as long as needed to deliver your result |
| Prompt and generation logs | Our servers | Only as long as needed for reliability, abuse prevention and credit reconciliation |
| Community posts and profile | Our servers | Until you delete them |
| Purchase records | Our servers | As required by tax and accounting law |
| Analytics | Firebase / our servers | Only as long as needed to analyse and improve the Service |
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. Users in the EEA and UK have these rights under the GDPR. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any of these rights, email support@kilgen.ai. Because the app has no user accounts, please include the anonymous app identifier shown in the app’s settings so that we can locate your data. We respond within the period required by applicable law.
The kilgen.ai website uses only cookies that are strictly necessary to serve the site. The iOS app does not use cookies. If we add analytics or advertising cookies in future, we will describe them here and provide a consent mechanism.
The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
Our third-party AI providers, analytics providers and hosting operate in a number of countries, including outside your own. Where required, transfers out of the EEA or UK rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.
Data in transit is encrypted using HTTPS/TLS. Your credit balance and anonymous identifier are stored in the iOS keychain. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
We may update this policy to reflect new AI models, features or legal requirements. We will revise the “Last updated” date above, and for material changes we will present the updated policy in the app.
Galib Shifullah
Email: support@kilgen.ai