**Last Updated:** November 5, 2025
## 1. INTRODUCTION
Banana Art (“we,” “us,” “our,” or “Company”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Banana Art (the “App”) and related services (collectively, the “Services”).
**PLEASE READ THIS PRIVACY POLICY CAREFULLY.** By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Services.
## 2. INFORMATION WE COLLECT
### 2.1 Information You Provide Directly
**Account Information:**
– Email address (if you create an account)
– Username or display name
– Authentication credentials
– Profile information (optional)
**User Content:**
– Images and photos you upload
– Text prompts and descriptions
– Creative preferences and settings
– Feedback and support messages
**Payment Information:**
– Processed through Apple App Store or Google Play Store
– We do not directly collect or store payment card details
– Transaction history and subscription status
– Promotional codes used
**Communications:**
– Support inquiries and correspondence
– Survey responses and feedback
– User reviews and ratings
### 2.2 Information Collected Automatically
**Device Information:**
– Device type, model, and manufacturer
– Operating system and version
– Unique device identifiers (IDFA on iOS, Advertising ID on Android)
– Device settings and preferences
– Screen resolution and display information
**Usage Data:**
– App features used and frequency of use
– Generated content creation timestamps
– AI model usage and preferences
– Session duration and frequency
– Navigation patterns within the App
– Errors and crash reports
– Performance metrics
### 2.3 Information from Third Parties
**AI Service Providers:**
– Usage metrics from AI model providers (Google Nano Banana AI, etc.)
– Model performance data
– Error logs and diagnostic information
**Analytics Services:**
– Firebase Analytics
– Firebase Performance Monitoring
– Aggregated usage statistics
**Payment Processors:**
– Apple App Store or Google Play Store
– Subscription status and transaction confirmations
– Refund and cancellation data
## 3. HOW WE USE YOUR INFORMATION
We use the collected information for the following purposes:
### 3.1 Service Provision and Improvement
– **Provide Core Services:** Generate AI-powered images and videos based on your inputs
– **Account Management:** Create, maintain, and authenticate your account
– **Personalization:** Customize your experience based on preferences and usage history
– **Feature Development:** Develop, test, and improve new features
– **Quality Assurance:** Monitor and enhance service quality and performance
– **Bug Fixes:** Identify and resolve technical issues
### 3.2 AI Model Training and Improvement
– **Model Enhancement:** Use anonymized and aggregated data to improve AI models
– **Content Moderation:** Train models to detect inappropriate or prohibited content
– **Quality Improvement:** Enhance accuracy and quality of generated outputs
– **Bias Detection:** Identify and mitigate biases in AI outputs
**Important:** We do not use your User Content for AI training without explicit consent or proper anonymization.
### 3.3 Communication
– **Service Updates:** Notify you about updates, new features, and changes
– **Support:** Respond to inquiries, requests, and provide customer support
– **Marketing:** Send promotional materials and offers (with your consent)
– **Administrative:** Send important notices about your account or subscription
### 3.4 Analytics and Research
– **Usage Analytics:** Understand how users interact with the Services
– **Performance Metrics:** Monitor app performance and stability
– **Market Research:** Conduct surveys and collect feedback
– **Statistical Analysis:** Generate anonymized statistics and insights
### 3.5 Legal and Security
– **Compliance:** Comply with legal obligations and regulatory requirements
– **Fraud Prevention:** Detect and prevent fraudulent activities
– **Security:** Protect against security threats and unauthorized access
– **Enforcement:** Enforce our Terms of Use and other policies
– **Legal Claims:** Establish, exercise, or defend legal claims
### 3.6 Business Operations
– **Subscription Management:** Process payments and manage subscriptions
– **Customer Support:** Provide technical support and assistance
– **Business Analytics:** Analyze business performance and trends
– **Partnership Management:** Work with third-party service providers
## 4. HOW WE SHARE YOUR INFORMATION
We may share your information in the following circumstances:
### 4.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
**AI Model Providers:**
– Google (Nano Banana AI and other models)
– Other AI service providers for image generation and processing
– Cloud computing and storage providers
**Infrastructure and Hosting:**
– Firebase (authentication, analytics, database, storage)
– Cloud hosting services
– Content delivery networks (CDNs)
**Analytics and Performance:**
– Firebase Analytics
– Firebase Performance Monitoring
– Crash reporting services
**Payment Processing:**
– Apple App Store (for iOS subscriptions)
– Google Play Store (for Android subscriptions)
– RevenueCat (subscription management)
**Communication Services:**
– Email service providers
– Customer support platforms
**Important:** All service providers are contractually obligated to maintain the confidentiality and security of your information and may only use it to provide services to us.
### 4.2 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and provide you with choices regarding your information.
### 4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
– Court orders, subpoenas, or legal processes
– Law enforcement or government agency requests
– National security or public safety requirements
– Protection of our rights, property, or safety
– Protection of users or the public
### 4.4 With Your Consent
We may share your information for purposes not described in this Privacy Policy with your explicit consent.
### 4.5 Aggregated or Anonymized Data
We may share aggregated or anonymized data that cannot reasonably be used to identify you:
– Public reporting and statistics
– Research and academic purposes
– Business partnerships and collaborations
– Marketing and promotional materials
### 4.6 User-Generated Content
If you choose to:
– Share generated content publicly
– Participate in community features
– Submit content for promotional use
Your content and associated information may be publicly visible.
## 5. DATA RETENTION
### 5.1 Retention Periods
We retain your information for as long as necessary to:
– Provide the Services to you
– Comply with legal obligations
– Resolve disputes
– Enforce our agreements
**Specific Retention Periods:**
**Account Data:**
– Active accounts: Duration of account existence plus 90 days after deletion
– Inactive accounts: May be deleted after 2 years of inactivity
**User Content and Generated Content:**
– Stored while account is active
– Deleted within 90 days of account deletion
– Cached/temporary content deleted within 30 days
**Usage and Analytics Data:**
– Aggregated data: Retained indefinitely in anonymized form
– Individual session data: 2 years
**Communication Records:**
– Support tickets: 3 years
– Marketing communications: Until you unsubscribe
**Legal and Compliance Records:**
– Transaction records: 7 years (for tax and accounting purposes)
– Legal claims: Duration of claim plus applicable statute of limitations
### 5.2 Deletion
You may request deletion of your account and associated data at any time through:
– In-app settings
– Contacting support at support@thekmobile.com
Upon deletion, we will:
– Remove personal identifiers within 30 days
– Complete full deletion within 90 days
– Retain only what is required for legal compliance
## 6. DATA SECURITY
### 6.1 Security Measures
We implement industry-standard security measures to protect your information:
**Technical Safeguards:**
– Encryption in transit (TLS/SSL)
– Encryption at rest for sensitive data
– Secure authentication mechanisms
– Regular security audits and testing
– Firewalls and intrusion detection systems
**Administrative Safeguards:**
– Access controls and authentication
– Employee training on data protection
– Confidentiality agreements with staff and contractors
– Incident response procedures
**Physical Safeguards:**
– Secure data centers with restricted access
– Environmental controls and monitoring
– Backup and disaster recovery systems
### 6.2 Limitations
**IMPORTANT:** No system is completely secure. While we implement reasonable security measures:
– We cannot guarantee absolute security
– You use the Services at your own risk
– You are responsible for maintaining the confidentiality of your account credentials
– You should not upload highly sensitive or confidential information
### 6.3 Data Breach Notification
In the event of a data breach that affects your personal information:
– We will notify affected users without undue delay
– Notification will include the nature of the breach and recommended actions
– We will notify regulatory authorities as required by law
## 7. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights:
### 7.1 Access and Portability
– **Right to Access:** Request a copy of your personal information
– **Right to Portability:** Receive your data in a structured, machine-readable format
– **How to Exercise:** Contact support@thekmobile.com
### 7.2 Correction and Deletion
– **Right to Correction:** Request correction of inaccurate information
– **Right to Deletion:** Request deletion of your personal information
– **How to Exercise:** Update through in-app settings or contact support
### 7.3 Restriction and Objection
– **Right to Restriction:** Request limitation of processing in certain circumstances
– **Right to Object:** Object to processing based on legitimate interests or for marketing
– **How to Exercise:** Contact support@thekmobile.com
### 7.4 Withdrawal of Consent
– Right to withdraw consent for processing based on consent
– Does not affect lawfulness of processing before withdrawal
– May affect ability to use certain Services
### 7.5 Automated Decision-Making
– Right to object to automated decision-making
– Right to request human review of automated decisions
– AI-generated content is not used for automated decision-making about you
### 7.6 Filing Complaints
You have the right to file a complaint with a supervisory authority:
– **EU/EEA:** Your local Data Protection Authority
– **UK:** Information Commissioner’s Office (ICO)
– **California:** California Attorney General
– **Other jurisdictions:** Your local privacy regulator
### 7.7 Region-Specific Rights
**For California Residents (CCPA/CPRA):**
– Right to know what personal information is collected
– Right to know whether personal information is sold or shared
– Right to opt-out of sale/sharing of personal information
– Right to non-discrimination for exercising privacy rights
– Right to limit use of sensitive personal information
**We do not sell your personal information.**
**For EU/EEA Residents (GDPR):**
– All rights listed in sections 7.1-7.5 apply
– Right to lodge a complaint with supervisory authority
– Right to data portability
– Right to be forgotten
**For UK Residents:**
– Rights equivalent to GDPR
– Contact ICO for complaints
**To exercise your rights:** Email support@thekmobile.com with:
– Your name and contact information
– Specific right(s) you wish to exercise
– Details of your request
– Verification information (to confirm identity)
We will respond within:
– 30 days (GDPR/UK GDPR)
– 45 days (CCPA), extendable by 45 days with notice
– As required by applicable law
## 8. CHILDREN’S PRIVACY
### 8.1 Age Restrictions
The Services are not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under the applicable age limit.
### 8.2 Parental Consent
If you are between 13 and 18 years of age (or the age of majority in your jurisdiction), you may only use the Services with parental or guardian consent.
### 8.3 Discovery of Children’s Data
If we discover that we have collected information from a child under the applicable age limit without proper consent:
– We will delete such information promptly
– We will terminate the associated account
– We will notify parents/guardians if contact information is available
### 8.4 Parental Rights
Parents and guardians have the right to:
– Review personal information collected from their children
– Request deletion of their children’s information
– Refuse further collection or use of their children’s information
**To exercise parental rights:** Contact support@thekmobile.com
## 9. COOKIES AND TRACKING TECHNOLOGIES
### 9.1 Types of Technologies Used
**Essential Cookies:**
– Authentication and session management
– Security features
– Required for core functionality
**Analytics and Performance:**
– Firebase Analytics
– App usage statistics
– Performance monitoring
– Crash reporting
**Functionality:**
– User preferences and settings
– Language and region preferences
– Feature enablement
**Mobile Identifiers:**
– Device identifiers (IDFA, Advertising ID)
– Firebase Installation IDs
– Used for analytics and attribution
### 9.2 Your Choices
**Limit Tracking:**
– iOS: Settings > Privacy > Tracking > Disable tracking for Banana Art
– Android: Settings > Google > Ads > Opt out of Ads Personalization
**Reset Advertising ID:**
– iOS: Settings > Privacy > Advertising > Reset Advertising Identifier
– Android: Settings > Google > Ads > Reset advertising ID
**Note:** Disabling certain tracking may affect app functionality and personalization.
## 10. INTERNATIONAL DATA TRANSFERS
### 10.1 Data Location
Your information may be transferred to and processed in:
– United States
– European Union
– Other countries where our service providers operate
These countries may have different data protection laws than your country of residence.
### 10.2 Transfer Safeguards
When transferring data internationally, we implement appropriate safeguards:
– Standard Contractual Clauses (SCCs) approved by relevant authorities
– Adequacy decisions by competent authorities
– Privacy Shield certification (where applicable)
– Other legally recognized transfer mechanisms
### 10.3 EU-US and Swiss-US Data Transfers
For transfers from the EU/EEA or Switzerland to the US:
– We rely on Standard Contractual Clauses
– We ensure appropriate technical and organizational measures
– We comply with GDPR requirements for international transfers
## 11. THIRD-PARTY LINKS AND SERVICES
### 11.1 Third-Party Content
The App may contain links to third-party websites, services, or content. This Privacy Policy does not apply to third-party services.
### 11.2 No Responsibility
We are not responsible for:
– Privacy practices of third parties
– Content or security of third-party services
– Data collection by third parties
### 11.3 Recommendation
We recommend reviewing the privacy policies of any third-party services you access through or in connection with the App.
## 12. SPECIFIC SERVICE DISCLOSURES
### 12.1 AI-Generated Content
**Processing Location:**
– User Content is sent to AI service providers (including Google) for processing
– Processing may occur in various geographic locations
– Content is processed in accordance with service provider privacy policies
**Data Minimization:**
– We only send necessary data for image generation
– Prompts and images are processed temporarily
– Results are returned to your device
**Third-Party AI Providers:**
– Google (Nano Banana AI and other models)
– Subject to Google’s privacy policies and terms
– We implement contractual protections where possible
### 12.2 Firebase Services
We use Firebase services provided by Google:
– **Firebase Authentication:** User sign-in and authentication
– **Firebase Realtime Database:** Real-time data synchronization
– **Cloud Firestore:** Database services
– **Firebase Analytics:** Usage analytics
– **Firebase Performance Monitoring:** App performance tracking
– **Firebase Cloud Messaging:** Push notifications
Data processed by Firebase is subject to Google’s privacy policies and our data processing agreement with Google.
### 12.3 RevenueCat
We use RevenueCat for subscription management:
– Processes subscription status and purchase data
– Integrates with App Store and Play Store
– Subject to RevenueCat’s privacy policy
– Helps manage cross-platform subscriptions
### 12.4 In-App Purchases
Subscription and purchase processing:
– Handled by Apple App Store or Google Play Store
– Subject to their respective privacy policies
– We receive limited transaction data (subscription status, not payment details)
## 13. CHANGES TO THIS PRIVACY POLICY
### 13.1 Modifications
We reserve the right to modify this Privacy Policy at any time. When we make changes:
– We will update the “Last Updated” date
– Material changes will be communicated via:
– In-app notification
– Email (if we have your email address)
– Prominent notice in the App
### 13.2 Review
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
### 13.3 Continued Use
Your continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.
### 13.4 Material Changes
For material changes that significantly affect your privacy rights:
– We will provide at least 30 days’ notice
– We may require you to affirmatively accept the changes
– You may delete your account if you do not agree to the changes
## 14. CALIFORNIA PRIVACY RIGHTS
### 14.1 CCPA/CPRA Disclosures
**Categories of Personal Information Collected:**
– Identifiers (email, device ID, IP address)
– Commercial information (purchase history, subscription status)
– Internet activity (usage data, browsing history within App)
– Geolocation data (general location)
– Visual information (uploaded images)
– Inferences (user preferences, characteristics)
**Sources:** Directly from you, automatically collected, from third parties
**Purposes:** As described in Section 3 of this Privacy Policy
**Sharing:** With service providers as described in Section 4
**Sale/Sharing:** We do not sell or share personal information for cross-context behavioral advertising
### 14.2 California Consumer Rights
– Right to know what personal information is collected
– Right to know whether personal information is sold or shared
– Right to access personal information
– Right to delete personal information
– Right to correct inaccurate personal information
– Right to opt-out of sale/sharing
– Right to limit use of sensitive personal information
– Right to non-discrimination
### 14.3 Exercising Rights
California residents may exercise these rights by:
– Emailing: support@thekmobile.com
– Subject line: “California Privacy Rights Request”
– Include: Name, email, specific request, verification information
### 14.4 Verification
We will verify your identity before processing requests by:
– Matching information you provide to information we have on file
– Requesting additional verification for sensitive requests
### 14.5 Authorized Agents
California residents may designate an authorized agent to make requests on their behalf by:
– Providing written authorization
– Verifying the agent’s authority
– Verifying your identity
### 14.6 Shine the Light Law
California residents may request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
## 15. NEVADA PRIVACY RIGHTS
Nevada residents have the right to opt-out of the sale of certain personal information to third parties. We do not sell personal information as defined by Nevada law. If you are a Nevada resident and have questions, contact support@thekmobile.com.
## 16. EUROPEAN PRIVACY RIGHTS
### 16.1 Legal Basis for Processing
We process your personal data based on:
**Contract Performance:**
– To provide Services you’ve requested
– To manage your account and subscription
**Legitimate Interests:**
– To improve our Services
– To conduct analytics and research
– To detect fraud and ensure security
– To enforce our Terms
**Consent:**
– For marketing communications
– For optional features requiring consent
– Where required by law
**Legal Obligations:**
– To comply with laws and regulations
– To respond to legal requests
### 16.2 Data Protection Officer
For EU/EEA inquiries, you may contact our Data Protection Officer at:
**Email:** dpo@bananastudio.com *(Note: Update with actual DPO contact)*
### 16.3 Supervisory Authority
You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.
## 17. DO NOT TRACK SIGNALS
Some browsers have “Do Not Track” features. Currently, there is no industry consensus on how to respond to these signals. We do not currently respond to Do Not Track signals. This may change as standards develop.
## 18. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:
**Email:** support@thekmobile.com
**In-App:** Settings > Contact Support
**Response Time:** We aim to respond within 5 business days.
**Mailing Address:** *(Add your business mailing address if required by applicable law)*
## 19. ACKNOWLEDGMENT
BY USING BANANA STUDIO, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO ITS TERMS.
If you do not agree with this Privacy Policy, you must not use the Services.
—
**Banana Art Privacy Policy**
**Version 1.0**
**Effective Date: November 5, 2025**