Privacy Policy

How AI Rap Flow handles account information, photos, AI processing, private videos, payments and privacy requests.

Last updated: 2026-10-28

Operated by Tianqi Li, trading as AI Rap Flow. Contact: support@airapflow.com. Effective and last updated: October 28, 2026.

What this policy covers

This policy covers airapflow.com. Any authorized simulated results are clearly labeled. The processing described below applies when the relevant feature is used. Merely selecting a photo does not start paid AI processing.

Information we collect

We receive your email address and account identifiers when you sign in. Google sign-in provides basic identity information, such as your name, email and profile image; we do not request access to your Gmail, Drive or contacts. Email sign-in uses a one-time link. We also process session information, account settings and support messages.

When you submit a creation, we receive your selected photos, names, story details, requested output language, stage, quality, duration and other settings. Task records include status, provider references, credit reservations and results. Hosting and security services process technical information such as IP address, request time, browser information and errors to deliver the service and limit abuse. Payment records include order references, amount, currency, subscription status and transaction events; we do not receive full card numbers or card security codes.

Photos, likeness and consent

Photos can identify you and other people. Only submit photos you own or are authorized to use, with permission from everyone depicted and any required parent or guardian permission. Avoid confidential or unnecessary sensitive information in photos and prompts. The service uses visible appearance to create a performance; it is not offered as an identity verification or face recognition service. AI vendors process image content to generate the requested result.

We do not publish your uploaded photos or private results as examples, or use them to train our own models, without separate permission. Vendor processing is subject to that vendor's terms; we cannot promise that every vendor has identical retention or model-improvement practices.

Why we process information

We use information to authenticate you, carry your selected settings through sign-in, create and privately deliver videos, maintain your credit balance, reconcile uncertain or failed jobs, respond to requests and protect the service. Where relevant privacy law requires a legal basis, these uses rely on performance of our agreement with you, legitimate interests in security and service operation, legal obligations, or consent where required. We do not sell your personal information or use your photos for targeted advertising.

Service providers and international processing

Cloudflare provides hosting, D1 account and task storage, private R2 media storage, email delivery, security and media processing. Better Auth is the authentication software used by our application. Google processes Google sign-in under its own privacy terms. KIE AI and its upstream model providers process the photos, prompts and reference media needed for an enabled AI generation request. Some workflows use temporary vendor uploads; others give the provider time-limited access to specified private media. Do not share these links.

If payments are enabled, Stripe processes checkout and payment information under its own terms. We may disclose necessary records to professional advisers, competent authorities or a successor operator where legally permitted. Our providers may process information in countries outside your own. Applicable transfer safeguards and privacy rights depend on your location and the provider; we do not promise exclusive storage in a particular country.

Read the providers' notices: Cloudflare privacy, Google privacy, KIE privacy, and Stripe privacy.

Cookies and drafts on your device

We use session cookies for sign-in and browser storage for creation settings. To preserve selected photos across sign-in, a local draft may be saved in your browser with a 30-minute validity period. Expired drafts are discarded when the draft store is next accessed; this is not a guarantee of physical deletion at exactly 30 minutes. You can clear site storage in your browser. A referral source may be retained in a first-party cookie for up to 30 days. Clearing cookies can sign you out or remove unsaved work.

Optional advertising and audience analytics are not currently enabled. We will update this notice and provide any legally required choices before introducing them. Hosting security and operational logs are still processed.

Retention and deletion

Account and task records are kept while your account is active and as reasonably needed for delivery, credit accounting, security, support and dispute resolution. Submitted media and completed videos are stored privately for the account library until deleted or no longer needed for those purposes. There is currently no automatic 30-day deletion rule for our stored photos or videos, and the service is not a permanent backup: download results you want to keep. Local draft expiry and a signed link's expiry do not delete copies already submitted to a provider.

KIE currently states that generated media is retained for 14 days and text or metadata logs for two months; its current rules, and any separate upload limits, apply to its copies. Our account library may contain a separate private copy. Provider retention can change independently of our storage. We retain necessary billing, fraud-prevention and legal records for applicable requirements; backups and provider copies may persist for their respective retention periods.

To request account or media deletion, email us from your registered address. We verify the request, explain any legally necessary exceptions and arrange removal from systems we control. We do not yet provide an automated account-deletion control. We aim to respond within 30 days, subject to applicable legal deadlines and permitted extensions.

Your rights, security and contact

Depending on your location, you may have rights to access, correct, delete, export or restrict use of your information, object to certain processing, withdraw consent, or complain to a privacy regulator. Contact support@airapflow.com; we may need proportionate proof of account ownership. Withdrawing consent does not undo lawful processing already completed.

Media access is restricted through account checks and limited provider access. No storage or transmission method is completely secure. Do not send passwords, sign-in links or payment credentials to support. The service is intended for adult account holders, not children registering independently. We update the date above when this notice changes and provide further notice for material changes where required.

See our Terms of Service, Refund Policy and Contact.