Privacy Policy

Last updated: 24 April 2026

This Privacy Policy describes how Clony ("we", "us", "our") collects, uses, stores, and shares information when you use the Clony mobile application ("the App") and related services.

If you do not agree with this policy, please do not use the App.

1. Who we are and how to contact us

• Contact / privacy requests: contact@clony.app

• App Store listing: Clony by Robin Michel / AI Companion

2. What the App does (context for the data we collect)

Clony is a generative-AI app that lets you:

• Clone a voice from audio you record or upload, and use that voice to generate text-to-speech audio memos.

• Generate "talking photos" — short videos where a photograph you provide is animated to speak an audio memo (lip-sync).

• Generate singing audios from voices and audio you provide.

To deliver these features we need to process the audio, images, and text you give us. This policy explains exactly how.

3. Information we collect

3.1 Information you provide

• Account data:email address and, depending on your sign-in method, a display name and profile image URL from Apple Sign-In or Google Sign-In. Anonymous sign-in is also supported (no personal identifier required).

• Audio recordings and uploads: voice samples you record or upload to train a cloned voice, and audio files used as references for the singing feature.

• Photographs / images: photos you select from your photo library or capture with the camera to generate talking photos or dance videos.

• Text inputs: the text you type to generate voice memos.

• Purchase information: in-app purchases and subscriptions are processed by Apple or Google. We do not receive your credit-card number. We receive an anonymous purchase token via RevenueCat so we can unlock entitlements on your account.

3.2 Information collected automatically

• Technical and device data: device model, OS version, app version, language, approximate region (country-level), and a device identifier used to prevent fraud and abuse of free-tier quotas.

• Usage data: feature usage counts, quota consumption (characters generated, videos created), and error logs to diagnose crashes.

• Push notification tokens (if you grant notification permission).

3.3 Information we do not collect

• We do not perform facial recognition. Clony does not extract, store, compare, or share face templates, face geometry, face landmarks, face embeddings, or any other biometric identifier derived from photographs. We do not use ARKit face tracking, Apple Vision face APIs, or equivalent biometric APIs.

• We do not perform speaker identification. Voice clones are trained as generative TTS models; they are not used to identify you or match you against any database.

• We do not collect precise location. No GPS, no background location.

• We do not access your contacts, calendar, health data, or messages.

We do not use your uploaded audio, photos, or text:

• to train shared / foundation AI models,

• for advertising or profiling,

• to build profiles about you or sell to data brokers.

4. AI-Generated Content — how photos and audio are processed

When you use the Talking Photo features, you may upload a photograph. Clony does not perform facial recognition and does not extract, store, or share any biometric identifiers, face templates, face geometry, or face embeddings from uploaded photographs. Photographs are used solely as visual input to generate the specific video you requested.

Uploaded photographs are stored in Google Firebase Cloud Storage under your account and are transmitted to our GPU inference provider RunPod solely to render the video you requested. RunPod processes the image only for the duration of the inference job, does not retain it afterwards, and does not use it to train models.

Voice training audio is processed similarly: it is stored in your account's Firebase Storage and sent to ElevenLabs to create a cloned voice model used only for your account.

You own the content you upload and the content we generate for you, subject to our Terms of Service.

5. Third-party processors and sub-processors

We share information only with processors strictly necessary to deliver the service. They act on our instructions and are contractually bound by data-protection obligations.

Google Firebase / Google Cloud Platform(Authentication, Cloud Storage, Firestore, Cloud Functions)

RunPod, Inc. (runpod.io) GPU inference for video generation (lip-sync, music models)

ElevenLabs, Inc. Voice cloning and text-to-speech

RevenueCat, Inc. Subscription entitlement management

Apple, Inc. / Google LLC App Store / Google Play payments, Sign-In with Apple, Google Sign-In, push notifications (APNs / FCM)

For users in the EU/EEA/UK/Switzerland, transfers to the United States rely on Standard Contractual Clauses as adopted by the European Commission, plus supplementary measures where required. Copies of the SCCs are available on request at contact@clony.app.

We do not sell personal information and do not "share" it for cross-context behavioural advertising (as defined under CCPA/CPRA).

6. Data retention and deletion

• Uploaded audio and photographs are retained while the associated voice, memo, or video exists in your account. Deleting an item in the App deletes its underlying media from our storage.

• On RunPod / ElevenLabs, inputs exist only for the duration of the inference job and are not retained afterwards by the processor.

• Voice models created via ElevenLabs are retained while the corresponding voice exists in your account. Deleting the voice in the App triggers deletion of the underlying voice model.

• Account data and generated content are retained while your account exists. If your account is inactive for 24 months, we may delete it after notifying you.

• Logs and crash data are retained for up to 90 days.

• Purchase records are retained as long as required by tax and accounting law (typically up to 10 years in the EU).

Deleting your account: open the App → Account → Delete Account. This permanently removes your account, all cloned voices, voice memos, photos, generated videos and songs associated with your account. You may also email contact@clony.app to request deletion.

7. Your rights

Depending on where you live you have the following rights:

GDPR / UK GDPR (EU, EEA, UK, Switzerland):

• Access, rectification, erasure, restriction, data portability, and objection.

• Withdraw consent at any time (does not affect prior processing).

• Lodge a complaint with your local supervisory authority (e.g. the CNIL in France, BfDI in Germany, ICO in the UK).

CCPA / CPRA (California):

• Right to know, delete, correct, and opt out of sale/share (we do not sell or share).

• Right to limit use of sensitive personal information.

• Right to non-discrimination for exercising your rights.

Other jurisdictions: equivalent rights under Brazilian LGPD, Canadian PIPEDA, etc.

To exercise any right, email contact@clony.app. We respond within 30 days (extendable by 60 days for complex requests, with notice).

8. Security

We apply industry-standard safeguards:

• Data in transit is encrypted with TLS.

• Data at rest in Firebase and GCS is encrypted by Google.

• Access to production data is restricted to authorised staff on a need-to-know basis.

• Firestore and Storage are protected by security rules scoped to the authenticated user.

No system is perfectly secure; in the event of a data breach affecting you, we will notify you and the competent authority as required by law.

9. Consent to record and upload third-party voices or images

You must only upload audio or photographs that you own or for which you have obtained the explicit consent of the person depicted or recorded, or that depict a subject not covered by personal-data laws (e.g. a historical figure, a cartoon character you own rights to). You are solely responsible for ensuring you have the necessary rights and consents. See our Terms of Service for detail.

Non-consensual or deceptive use — including impersonation, harassment, deepfakes of public figures, or political manipulation — is strictly prohibited and can result in immediate account termination and may be reported to law enforcement.

10. International users

The App is operated from Germany and data is processed in the United States and the European Union. By using the App, you acknowledge that your data may be transferred to and processed in jurisdictions whose data-protection laws may differ from those in your country. Safeguards described in Section 5 apply.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the App and update the "Last updated" date above. Continued use of the App after the effective date constitutes acceptance of the updated policy.

12. Contact

Questions, complaints, or requests: contact@clony.app