Privacy Policy

1. Who is responsible

This Privacy Policy explains how BanTeng, Hong Kong ("we", "us" or "our") handles personal information in FolioMotion AI for Android, package com.foliomotion.android. Contact us at bteng@baoteng.shop with privacy questions or requests.

FolioMotion AI creates images and short videos using online AI services. Your workspace is associated with an anonymous account even though the ordinary app flow does not require an email-and-password registration. Anonymous account and installation identifiers can still be personal information.

2. Information we process and why

• Workspace, app and device information. An app-generated installation identifier, account identifier, session credentials, app version, device model, operating-system information, selected language, country or region setting and time zone support your workspace, localized content, access control and service operation. Network requests expose connection information, including your IP address, to our service infrastructure. The installation identifier is separate from the Android advertising ID.
• Creation materials and results. We process the photos you select, prompts you enter or choose, template and generation settings, generated images and videos, task status and related metadata to create results and show your history. Photos may include faces or other personal information. Materials are uploaded to online processing services; creation is not solely on your device. Use only materials you have permission to submit.
• Purchases and credits. Google Play processes checkout. We receive product and purchase identifiers, purchase tokens, verification and subscription status, purchase-related amounts where provided, and credit activity to apply benefits, restore eligible purchases, reconcile balances and handle billing issues. The app has no payment-card entry form and does not receive your full payment-card details from Google Play.
• Support and reports. If you send feedback, we process your message, optional reply email, account association, app version and submission details. A report about your creation includes its task identifier and report category so we can identify the result. Sending a report does not itself attach or re-upload the result file. Do not include passwords, full payment credentials or unrelated sensitive information.
• Usage and campaign information. As described below, we process app interactions, screens, sessions, app and device identifiers, and advertising-source information to understand usage, improve operation and measure campaigns.

3. Online AI processing and service providers

We use service providers for authentication, databases, media storage and delivery, AI processing, purchases and analytics. These include Supabase for backend services, Google Play for purchases, and Google Analytics for Firebase for analytics. Our configured image and video processing providers include ByteDance / Volcengine (Doubao Seedream) and Alibaba Cloud / Bailian (Wan), depending on the selected template and generation steps. Infrastructure and content-delivery services, including Cloudflare for this website, handle the requests needed to deliver the service.

AI providers receive the content and request information needed for the selected processing. A workflow can include image preparation before video generation. Providers and infrastructure may process information in countries other than where you live. Processing is subject to the service arrangements and applicable law; this policy does not promise that every copy remains in your country or that providers retain no data.

The app does not publish your workspace as a public social feed. However, uploaded and generated media are delivered using online URLs, and possession of a media URL may allow access to the file. Do not treat these URLs as password-protected private storage or share them with people you do not intend to have access.

4. Analytics and advertising attribution

Product analytics is enabled. Firebase processes app-instance identifiers, device and app information, screens, sessions, interactions and purchase-related events. We associate analytics with your anonymous workspace identifier. Google may derive approximate location from IP information. This app disables Android advertising-ID collection and configures advertising storage, advertising user-data use and ad personalization as denied. These settings do not turn off product analytics. There is currently no general analytics switch in the app.

Server-side attribution is separate. The app contacts our sign service, which receives connection and device/app information, and sends the resulting proof with the workspace and app identifiers to our verification service. We use this information with advertising-click and campaign records to associate visits or installations with an advertising source and measure campaign performance. These records can include IP-related information, user-agent information, click identifiers, campaign identifiers and attribution status. This processing is not disabled merely because the Android advertising ID is unavailable.

Advertising measurement can involve configured advertising services, including Meta, and campaign or conversion information associated with a visit, registration or purchase. The current Android release does not initialize the Meta app-events SDK: its required application configuration is not supplied, and automatic initialization and automatic app-event logging are disabled. Server-side attribution is separate; the absence of this SDK does not disable it or Firebase analytics. There is currently no in-app advertising-measurement switch.

For information about Google's handling, see Google's Privacy Policy and Google Analytics for Firebase data information. If you have questions or wish to exercise an applicable right concerning measurement, contact us.

5. Your choices and permissions

You choose whether to select photos, provide prompts, make purchases, send feedback or share results. The app uses Android's system picker for selected photos rather than asking for access to your entire photo library in the creation flow. It does not request precise-location, contacts, microphone or camera permission for this flow.

When AI-processing consent has not yet been given for your workspace, the app asks for your agreement before submitting a creation and remembers your choice. You can choose Not now; no creation is submitted from that prompt. To avoid new AI-processing requests after agreeing, do not start new creations. This does not cancel requests already sent or erase existing results. There is currently no separate in-app control to withdraw AI-processing consent. You can use the creation and workspace deletion options below, or contact us about a privacy or consent-related request.

Saving a result creates a copy in your device's media storage. Sharing opens Android's chooser and passes the chosen file to the destination you select. That destination controls its own handling, and copies outside FolioMotion AI are not removed by deleting a creation or workspace. You can manage those copies in the relevant device or service.

6. Retention and deletion

We retain information according to the purpose for which it is used, including providing your workspace and history, processing and reconciling creations and purchases, resolving support requests, maintaining security, measuring usage and campaigns, and meeting applicable record-keeping obligations. The appropriate period depends on the type of record, whether the workspace or request remains active, outstanding billing or support issues, and applicable legal requirements. There is no single period that applies to every category or every provider copy.

Deleting one creation: the Delete action removes the task from visible history by marking it deleted. This action is not a promise that the underlying uploaded media, generated file, delivery cache or AI-provider copy is immediately erased.

Deleting your workspace: use account or workspace deletion option in Profile and confirm in the app. The app directly sends an authenticated account-deletion request. You do not need to email us or obtain manual support approval to use that action. The service removes account access and associated records covered by the deletion process, including uploaded objects under the account's storage location and subscription records. The app clears local session and workspace state after the service confirms success. A failed or unknown response is not a successful deletion.

A separate deletion audit record is retained with the account and app identifiers, deletion time and available subscription reference, type and amount, to record the operation and support accounting and dispute reconciliation. Other records or copies may remain where needed for the purposes above, including transaction, security, backup, provider or legal records. Account deletion does not guarantee immediate erasure of every generated-media, CDN, backup, analytics or provider copy. Contact us about the scope of a privacy request or any retained information.

Uninstalling the app alone does not send an account-deletion request. Deleting a workspace does not cancel a Google Play subscription; use Profile → Manage subscription or Google Play subscriptions to manage renewal. Files already saved or shared outside the app remain under the control of you or the receiving service.

7. Security and access

The app uses HTTPS for service connections and disallows cleartext network traffic. Local session information is encrypted using an app-specific Android Keystore key. Access checks associate service requests with the current workspace. No method of transmission or storage provides an absolute security guarantee.

Protect access to your device and avoid sharing session information or media links unintentionally. Clearing app data or reinstalling may affect access to an anonymous workspace. Save results you wish to keep, and contact us if you have a privacy or account-access concern.

8. Privacy requests and other disclosures

Depending on the law that applies to you, you may have rights to request access, correction, deletion or a copy of your information, object to or restrict certain processing, or withdraw consent where processing relies on consent. Contact bteng@baoteng.shop. We may need information to verify a request and protect the workspace from unauthorized access. Do not send passwords, purchase tokens or full payment credentials.

We may disclose relevant information where required by law or reasonably necessary to address fraud, security incidents, legal claims or threats to someone's rights or safety. If you believe a child has provided personal information without the permission required by applicable law, contact us so the concern can be assessed. These contact routes do not replace the direct in-app account or workspace deletion action.

9. Changes and contact

We may update this policy as our practices or services change. The effective date below identifies this version; we will provide additional notice or seek agreement where required by applicable law.

Operator: BanTeng, Hong Kong
App: FolioMotion AI for Android
Privacy contact: bteng@baoteng.shop
Effective date: October 22, 2026