Privacy Policy

This policy explains what Ramalama AI (ramalamaai.net, owned and operated by Lunonia Inc) keeps about you, why, for how long, and who processes it for us. The short version: your photos are deleted a day after their video is made, your videos after 30 days, and we don't sell your data.

1. What we keep and for how long

• Photos and costume pictures you upload, and the costume pictures made from them: kept in our file storage until a day after their video is made or fails, then deleted.
• Your videos: deleted 30 days after they are made.
• A record of each video, without the files: the costume (and your costume words, if you wrote some), how many photos, format, length, quality, its status, why it failed if it did, timings, and the account and device that made it.
• Moderation records: the time, the video they belong to, which check it was, the result and the moderation model's answer. Kept long term, so decisions can be reviewed.
• A random device ID, kept in your browser's storage and in a cookie: used to stop abuse of the Service and to keep your choices while you sign in or pay.
• Your IP address: used to stop abuse and to tell which country a visit comes from. Where we store it, we store a salted hash, not the address itself.
• Your account: a guest account kept by a cookie in your browser when you don't sign in; the email you type on Stripe Checkout, which we keep with your purchase to send you the purchase and video-ready emails and to bring your credits along when you sign in with it on another device; or, if you sign in, your email address. Also your sign-in sessions, your credits and credit history.
• Payments: Stripe handles your payment details. We receive the payment ID, the product, the amount, the status and the email address you paid with.
• Usage events, linked to the device ID or your account: the page you landed on, the site and campaign that sent you, device type, country, and actions such as starting a video or opening checkout.

Records without an end date above are kept until you ask us to delete them (section 5).

2. Your photos

A photo you upload is shrunk in your browser and kept there (in your browser's storage) until you start a video, so it survives signing in or paying. When the video starts, it is uploaded, sent to fal.ai for an automated moderation check, then to the image and video models to make your video. We do not use it to train AI models.

3. Who processes data for us

• Cloudflare runs the Service: hosting, the database (in eastern North America), file storage and sign-in emails.
• fal.ai (Features & Labels Inc., United States) runs the photo check; we ask it not to keep the check in its request history. kie.ai runs the image and video models (Nano Banana by Google, Seedance by ByteDance), using your choices and your photos, and keeps the files it makes for up to 14 days. When you describe a costume in your own words, Inworld (Theai, Inc., United States) passes those words to an AI safety model (OpenAI's gpt-oss-safeguard); your photos and account details are not sent to it. Anything else about how long each keeps requests is set out in their own privacy policies.
• Stripe runs checkout, payments, receipts and refunds and receives your payment details directly.
• Google: Google Analytics, on ramalamaai.net only, records which pages are visited and where visitors come from. There is no Google sign-in.

We don't sell your data.

4. Cookies and browser storage

• Device ID (browser storage and a cookie of the same name): used to stop abuse and keep your choices. Kept until you clear your browser data.
• Your choices in the tool (browser session storage): so sign-in and checkout bring you back to the same video; cleared when you close the tab.
• Session cookies: your guest account from the first time you start a video or buy, or your signed-in account; until you sign out or the session expires.
• Google Analytics cookies (_ga and _ga_*): only on ramalamaai.net, to count visits. We don't turn on Google's advertising features.
• TikTok videos on the “What is the Ramalama trend?” page: they play in TikTok’s own player, which loads from tiktok.com when you scroll near the videos. TikTok then receives your IP address and may set cookies, as described in TikTok’s privacy policy.

5. Your rights

You can ask for a copy of the data we hold about you, or ask us to correct or delete it: email support@ramalamaai.net from the address on your account. We complete requests within 30 days. Deleting your account removes your videos, photos and credits.

We keep moderation records after an account is deleted, without your email address. Payment records kept by Stripe follow Stripe's own policy and legal retention rules.

6. Children

The Service is not meant for anyone under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, email support@ramalamaai.net and we will delete it.

7. Changes

We may update this policy. Changes are posted on this page with a new date. See also the Terms and the Refund Policy.