Privacy Policy

1. Data we process

Account

Terix Studio creates a random account identifier when you first use the app. The app also creates a random installation identifier, which our service stores only as a keyed one-way hash. If you enable notifications, we store Apple's push token for that installation. These identifiers let the app restore its session, enforce account and security limits, and deliver generation-completion notifications. You do not need to provide your name, email address, or phone number.

If you optionally use Sign in with Apple for account recovery, we store Apple's stable identifier for this app and an encrypted credential needed to revoke that link if you delete the account. We do not request your Apple name or email.

Content you submit

• Descriptions (prompts): the text you type to describe an image or video.
• Reference images: photos you optionally attach to animate, transform, or guide a generation.
• Generated output: the images and videos produced for you.
• Job details: the selected media type, template, quality, aspect ratio, duration, status, credit cost, and timestamps needed to run and display a generation.

Descriptions and reference images are sent over an encrypted connection to our backend and forwarded to Google Cloud Vertex AI, currently using Gemini and Veo models, to produce the output you request. Generated images return through our service. During video generation, intermediate output is staged in a private Google Cloud Storage bucket before the finished result is copied to our temporary media storage so you can preview and download it. We will update this policy if the generation provider changes.

Credits and purchases

We keep a ledger of credit additions, reservations, refunds, and spends so that your balance is always accountable. Payments are processed by Apple; we never see your payment card details. We use RevenueCat to manage subscriptions and validate purchases: it receives your anonymous account identifier and subscription status, provides customer-history and aggregate purchase reporting, and notifies our backend so credits and plan access can be applied to your account.

Technical data

Our servers process basic technical information needed to operate the service securely, such as request timestamps, network addresses used for rate limiting, the approximate country derived by our hosting provider to enforce where AI creation is available, session and request status, and operational error events. This coarse location can be associated with your pseudonymous service request, is used only for app functionality and security, and is not used for advertising or tracking. Limited error events can contain a random account or job identifier so we can diagnose a failed request; they do not contain your prompt or media. We also keep aggregate feature and reliability counts. We do not use advertising SDKs and we do not track you across other apps or websites.

Support

If you email support, we receive the email address, message, and attachments you choose to send. We use them only to answer the request and investigate the issue.

2. What we use data for

• Generating the images and videos you request
• Maintaining your credit balance, delivering purchases, and measuring aggregate subscription and purchase performance
• Preventing abuse, fraud, and violations of our Terms of Use
• Measuring aggregate feature use and service reliability
• Providing support when you contact us

We do not sell personal data, show advertising, build advertising profiles, or train our own AI models on your content. Terix Studio uses paid Google Cloud Vertex AI. Google states that it does not use customer data to train or fine-tune its AI models without permission. Google Cloud may temporarily process or retain inputs and outputs for abuse monitoring. Request-response logging is not enabled for the models Terix Studio uses. Google's default project-isolated, in-memory Gemini cache can retain customer data for up to 24 hours to reduce latency; Google states that this cache is not stored at rest and is compatible with zero data retention. Video-generation intermediates are staged in a private US multi-region Google Cloud Storage bucket and are not used as your Terix Studio Library.

Your AI-processing choice

Before the app sends a prompt or reference image for AI Assist or generation, it asks you to allow processing by Google and identifies what will be shared. The choice is stored on your device. You can decline and continue using non-AI parts of the app, or withdraw the choice later under Settings > Privacy and AI. Withdrawal stops new submissions; it cannot undo processing that already occurred.

3. Who data is shared with

• Google processes the descriptions and attached images you submit, and returns generated output, as our AI generation provider.
• Cloudflare hosts our backend, database, temporary media storage, rate limiting, and operational logs.
• Apple processes payments and subscriptions under its own terms and privacy policy.
• RevenueCat manages subscriptions, validates purchases, and provides customer-history and aggregate purchase reporting, receiving your anonymous account identifier and subscription status to apply credits and plan access.

These providers process data to deliver the service under their applicable terms and privacy commitments. They may process data outside your country, including in the United States. Where data-protection law requires it, international transfers are covered by the providers' data-processing terms and transfer safeguards. We do not share your data with anyone else unless required by law or needed to protect users, rights, and service security.

4. Retention and deletion

• An unused upload ticket expires after about 15 minutes. A reference image used for a generation is removed from our storage within about one day.
• Generated images and videos remain available from our backend for up to 30 days. Save anything you want to keep to your device before it expires.
• Intermediate video files staged in private Google Cloud Storage become eligible for permanent deletion once they are two days old. Google Cloud lifecycle actions are asynchronous and can occur later than the eligibility time. Soft delete and object versioning are disabled on this temporary-processing bucket.
• Prompts, job details, account identifiers, push tokens, credit history, and purchase status are retained while your account exists. Expired sessions and short-lived operational data are removed when they are no longer needed.
• Support correspondence is retained only as long as reasonably needed to answer the request, maintain an issue record, or meet legal obligations.
• Deleting your account immediately blocks further access and starts removal of its stored source media, generated media, sessions, push tokens, prompts, jobs, credit ledger, and active account record. Our service also revokes its Sign in with Apple credential and requests permanent deletion of the matching RevenueCat customer records. Provider outages are retried automatically. Video intermediates already staged in Google Cloud Storage remain subject to the two-day lifecycle rule described above.
• For up to 90 days after account deletion, we retain only bounded deletion-security records, such as a one-way deletion-token hash and random account-ID tombstone, to make deletion retries safe and prevent late purchase webhooks from recreating data. A minimal provider-erasure retry record can remain longer only while an external deletion request is still failing; it contains the random account ID, retry status and, when Apple revocation is pending, an encrypted Apple credential. It is removed as soon as the providers confirm completion.

Removing a creation from the in-app Library hides it from authenticated Library reads on every device and removes the local copy. It does not erase the backend job record early, and server media still follows the schedule above. To erase the server account, use Delete account in Settings. If that control is unavailable, email tacticalcodeworks@hotmail.com for help; because an anonymous Terix Studio account is not identified by your email address, an email alone may not identify which account to remove. Deleting only the app does not delete the server account. Deleting an account does not cancel an App Store subscription, which must be managed separately in Apple's subscription settings.

5. Your rights and privacy choices

If you are in the European Economic Area or a jurisdiction with similar laws, you may have rights to access, correct, export, object to or restrict processing, delete your personal data, and withdraw consent without affecting earlier lawful processing. You may also lodge a complaint with your data-protection authority. Our legal bases are your consent where we ask before sharing content with the AI provider, performance of a contract when we provide a requested service or purchase, legitimate interests in security, fraud prevention, support, and reliable operation, and legal obligations such as accounting. Withdraw optional AI-processing consent under Settings > Privacy and AI, delete the server account under Settings > Account, or email tacticalcodeworks@hotmail.com to exercise another right.

6. Automated safety checks

Google's automated safety systems, and our validation rules, can decline a generation request. A declined request does not consume credits. This screening does not make legal or similarly significant decisions about you. Contact support if you believe a request failed incorrectly.

7. Children

Terix Studio is for adults aged 18 or over and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has used the app, contact us and we will delete the associated data.

8. Security

Traffic between the app, our backend, and our providers is encrypted in transit. Provider credentials are held only on our servers, never inside the app. Sign in with Apple revocation credentials are encrypted at rest. Access to stored content is controlled through short-lived signed links. No system is perfectly secure, but we limit collection and access to what the service needs.

9. Changes to this policy

If we make material changes, we will update this page and the effective date above, and note the change in the app where appropriate.

10. Contact

Terix Studio
Email: tacticalcodeworks@hotmail.com

This website

terixstudio.com is a static website delivered by Cloudflare. It sets no cookies, runs no analytics or advertising, and makes no requests to third parties: its fonts, images and scripts are all served from this domain. Cloudflare may process your IP address in short-lived security logs to protect the site against abuse; we do not receive personal data from it.