EFFECTIVE OCTOBER 10, 2026

Privacy Policy

Last Updated: October 10, 2026
Effective Date: October 10, 2026

This Privacy Policy explains how RIZWAN TECH SOLUTIONS LLC, the developer and operator of MythVio ("we," "us," or "our"), collects, uses, discloses, retains, and protects personal information when you use the MythVio mobile application, the website at https://app.mythvio.com/, and related support services (collectively, the "Service").

1. Scope and controller

This policy covers every interaction with the Service, from visiting the website or installing the app through account use, purchases, creative tasks, support, and account closure. Platforms and companies that operate independently—such as the app store, social-login provider, ad network, or payment processor you select—explain their own handling in separate notices.

The controller responsible for personal information is RIZWAN TECH SOLUTIONS LLC, located at 639 Landis Ave, Bridgeton, 08302-4836, United States (US).

2. Information we process

2.1 Information you provide

• Account information: email address, internal user ID, sign-in method, authentication records, profile settings, credit balance, and subscription or entitlement status.
• Creative content: prompts, photos, images, videos, selected styles or templates, editing instructions, generated results, and creation history you choose to retain.
• Purchase information: order or transaction identifiers, product, amount, currency, billing country, payment status, subscription status, and refund status supplied by Google Play or another authorized payment provider. We do not receive your complete card number, expiry date, or security code.
• Communications: support requests, screenshots, feedback, privacy requests, copyright notices, safety reports, appeals, and transaction references you send us.

If you select Google or Facebook login, we receive the identifier and authorized profile fields supplied by that provider, such as your name, email, or profile picture. Your password for that outside account is not shared with MythVio. Optional profile fields are not a condition of using the core creative tools.

2.2 Information collected automatically

• Device and network data: device model, operating system, app version, language, time zone, network type, IP address, approximate country or region, and device or app identifiers.
• Usage and diagnostics: feature interactions, task status, credit events, session timestamps, crash reports, error logs, performance measurements, attribution data, and security events.
• Advertising data: where ads are offered, advertising identifiers, impressions, clicks, reward completion, fraud signals, and consent choices.

2.3 Device permissions

A tool may ask to reach your photo or video library, camera, device storage, or notifications. The prompt identifies why access is needed. Permission settings remain under your control in Android; turning one off may prevent the dependent tool from working.

3. How and why we use information

We process information to:

• create and secure accounts, authenticate sign-in, and maintain settings;
• run the image or video task you request, deliver results, and maintain saved history;
• administer subscriptions, purchases, credits, rewarded-ad benefits, receipts, refunds, and payment disputes;
• operate, debug, protect, analyze, and improve the reliability of the Service;
• detect fraud, infringement, prohibited content, non-consensual synthetic media, and other misuse;
• respond to support, billing, privacy, copyright, safety, and legal requests; and
• comply with law, resolve disputes, and enforce our Terms of Service.

Where a legal basis is required (for example, in the EEA, the United Kingdom, or Switzerland), we rely on the following:

You may withdraw consent through the relevant app, device, or contact channel; withdrawal does not affect processing already completed lawfully.

Service messages and optional marketing

Account verification, security alerts, receipts, and responses to your requests are service communications. If we send promotional email, you can stop those messages through the unsubscribe control in the message or by contacting support. Opting out of promotions does not prevent delivery of essential account, transaction, or security notices.

4. Creative content and AI processing

To perform a cloud-based image or video task, MythVio uploads the material and directions you selected. Only task-relevant data is routed through our systems and the outside infrastructure, rendering, safety, and model operators engaged to produce the result.

Photos and videos may contain faces. MythVio may locate facial features solely to align or render the effect you requested. We do not use this processing to identify or authenticate a person, compare a face against a recognition database, or create a face-recognition profile for advertising.

Private submissions and results are excluded from unrelated general-model training. Companies processing a task for us must not independently train their models on that private material. We may study aggregated or de-identified operational measurements that contain no image or information identifying you.

You must have the rights and permissions needed for any content you submit, including permission from depicted people where required. Do not upload identity documents, medical records, financial records, or other sensitive information that the creative task does not need.

There is no public member feed, commenting system, or person-to-person messenger in MythVio. A private submission or result stays outside other users’ view unless you deliberately export it; after export, the receiving platform’s rules apply.

5. Providers and other disclosures

Providers may change as the Service evolves. We require service providers to process information for contracted purposes and subject to confidentiality and data-protection obligations. We may also disclose information when required by binding legal process or when reasonably necessary to protect users, the public, our rights, or the integrity of the Service.

If a merger, sale, reorganization, or other lawful business transfer changes who controls your information, we will identify the receiving organization and its contact details in an appropriate notice. The recipient must preserve the protections applicable to the transferred information. A new purpose or materially different use will require the additional notice and consent mandated by the law that applies to you. A corporate transfer does not by itself authorize unrelated use of private creative content.

For a refund or chargeback investigation, the responsible payment channel may receive relevant order, account, and entitlement-use records needed to assess the disputed transaction.

6. Advertising and analytics

Standard advertisements or an optional watch-to-earn placement may appear in MythVio. For ad delivery, frequency control, measurement, reward validation, and fraud prevention, partners can receive an advertising identifier, coarse location inferred from IP, interactions, impressions, clicks, and conversion events.

MythVio receives no money for transferring a user’s personal information as a commodity. Local statutes can nevertheless classify personalized advertising as a regulated disclosure. When they do, the app supplies the required choice or consent. Android also lets you reset or restrict the advertising identifier.

Cookies and device storage

Web-based sign-in or checkout features, when offered, may use cookies or local storage to maintain a session, save choices, and protect transactions. Browser controls allow you to remove or block this storage; doing so can interrupt sign-in or payment. Any non-essential tracking requires the choices or consent prescribed by applicable law. The public landing page currently includes no analytics or advertising tracking script; app SDK processing is described separately above. Because the website does not track visitors, it does not respond differently to browser “Do Not Track” signals. Where applicable law requires us to honor an opt-out preference signal, such as Global Privacy Control, for a covered disclosure, we will do so.

7. Retention

How long a record remains depends on why it exists. Our normal schedules are:

Deletion may take additional time to pass through encrypted backups and disaster-recovery systems, which are isolated from ordinary product use and overwritten through routine backup cycles. Limited records may be retained where required for law, security, fraud prevention, disputes, or completed transactions.

8. Security and international transfers

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transmission, role-based access, service monitoring, logging, and provider controls. No method of online transmission or storage is completely secure, so absolute security cannot be guaranteed.

Processing can occur in Hong Kong, the United States, or another place where RIZWAN TECH SOLUTIONS LLC or a contracted operator maintains facilities. If moving data across a border requires added protection, we rely on the transfer instrument recognized for that route—for example contractual commitments, an adequacy finding, consent, or another valid ground.

When a personal-data security incident occurs, we investigate, contain it, and take appropriate remedial steps. Where notification is required, affected people and the relevant authority will be informed within the applicable deadline. The notice will describe the incident, likely consequences, protective measures, and available contact or assistance information to the extent known.

9. Your choices and privacy rights

The law where you live may let you inspect or correct information, ask for erasure, limit or challenge a use, receive data in a portable format, revoke consent, decline specified advertising uses, or seek review after we refuse a request. A complaint may also be filed with the authority responsible for privacy in your jurisdiction.

• Manage permissions, notifications, and advertising settings through the app or Android settings.
• Delete individual saved creations through the relevant in-app control where available.
• Email support@mythvio.com to submit or appeal a privacy request.

We may ask for information reasonably necessary to verify your identity, account control, or an authorized agent’s authority. We do not discriminate against a user for exercising a privacy right.

We verify and address access, correction, erasure, export, consent-withdrawal, and account-closure requests within 15 working days, subject to any shorter statutory deadline. A data copy can be requested by email and, where portability applies, will be supplied in a commonly usable, machine-readable format. If we cannot grant a request, we explain the reason and how to seek review. The separate deletion schedules and limited retention exceptions in Section 7 describe what happens to the underlying records.

10. Account and data deletion

Use the delete-account option in MythVio account settings where available, or email support@mythvio.com from the address linked to your account. We process a verified deletion request within 15 working days, or sooner where applicable law requires.

Deletion is permanent. We delete or de-identify your account profile, saved creative history, and associated active-service records, subject to the limited retention described in Section 7. Unused credits and app-account entitlements may be lost. Uninstalling MythVio does not delete your account, and deleting the app or account does not cancel a Google Play subscription; subscriptions must be managed separately through Google Play.

11. Regional disclosures

Hong Kong

Users may request access to and correction of personal data as provided by applicable Hong Kong data-protection law. You may also raise a concern with the Office of the Privacy Commissioner for Personal Data where that right is available.

EEA, United Kingdom, and Switzerland

Data-protection rules in these jurisdictions can provide inspection, correction, erasure, portability, restriction, objection, consent-withdrawal, and regulator-complaint rights. Any protection that the law makes compulsory applies regardless of this document.

Where applicable, you may also challenge a decision made entirely by automated means that has legal or similarly significant effects on you, ask for a person to review it, and present your position. Requests about such a decision can be sent to our privacy contact.

United States

Qualifying state residents can be entitled to disclosure of our practices and copies of covered data, correction or deletion, controls over regulated advertising disclosures and profiling, limits on specified sensitive-data uses, and review of an adverse request decision.

Where California privacy law applies, requests may cover the categories and individual items of data held about you, their sources, the reasons for collection, and the categories of recipients. Rights may include correction, deletion, and opting out of a covered sale or cross-context advertising disclosure. See Section 6 for our advertising practices; contact our privacy address to exercise rights or ask an authorized representative to act for you.

In the past 12 months, we have collected the following categories of personal information, for the purposes described in Section 3 and kept as described in Section 7:

We do not use or disclose sensitive personal information for purposes that would require a “Limit the Use of My Sensitive Personal Information” right, and we do not knowingly sell or share personal information of users under 16. To opt out of a covered sale or sharing, use the ad-privacy choice offered in the app, reset or delete your Android advertising ID, or email support@mythvio.com with the subject “Do Not Sell or Share My Personal Information.”

Other regions

Additional notices, consent flows, or local rights may apply according to where you live. We will honor non-waivable rights and provide supplemental information where required.

12. Age requirement

No one younger than 16 may use MythVio. A higher local threshold or guardian-approval rule still controls where applicable. We do not intentionally request personal data from an under-16 user. A parent or guardian who believes a young person supplied such data should email support@mythvio.com so we can investigate, erase it where appropriate, and close the related account.

13. Changes and contact

A revised policy may be issued when MythVio, our data practices, or legal obligations change. The page will show its new revision date. For a material revision, we will use an additional in-service or other suitable notice and obtain consent when the governing rule demands it.