Privacy Policy

Last updated: November 2026

SetWalk (setwalk.app) is a service of Apphive, Inc., a Delaware (USA) corporation, 2810 N Church St, PMB 97340, Wilmington, DE 19802 ("we"). This policy explains what data we process when you use SetWalk, why, who we share it with and for how long. Contact: [email protected].

1. What data we process

• Account: your email and, if you sign in with Facebook or Google, your name, your profile picture and the identifier that network gives us. You sign in with a link we email you, with Facebook or with Google. We do not store Facebook or Google access tokens.
• Your photos: the photos you upload to create your content. They show your face and the face of anyone else in them. We only use them to generate the images and videos you order. We do not use them to identify you or for facial recognition.
• Generated content: the images and videos created with your photos.
• Orders and payments: what you buy, the amount and the status of the order. Payments are processed by Stripe or PayPal; we do not store your card details.
• Use of the site and device: IP address, browser, pages visited and, depending on your cookie choice, analytics and advertising cookies and pixels (section 6).
• Communications: the messages you send to support.
• Feedback you send us. If you use "Send feedback", we store the type (bug, idea or other), your message, your browser, operating system and language and, if you are signed in, your account identifier. We do not store your IP address or screenshots. Your email is optional and we only use it to reply to you. To review feedback we use an artificial intelligence tool from Anthropic, with emails and phone numbers masked. We delete it after 12 months, or sooner if you delete your account.

Photos of other people: only upload photos of yourself or of people who have given you permission. Do not upload photos of minors unless you are their parent or guardian.

2. Why, and on what legal basis

We do not sell your data. We do not use your photos to train AI models, and the providers we send them to process them only to provide their service to us.

3. Artificial intelligence

To create your content, your photos are sent to AI providers that generate the images and the video:

• Google (Gemini) receives your photos and generates the images. We use its paid service, in which Google does not use the data to train its models.
• fal.ai animates the images already generated, which show your face, but does not receive your original photos. It uses those images only to generate the video and not to train its models.
• Shotstack puts the final video together.

They only receive what each order needs. The result is generated by AI and may not be accurate.

4. Who we share data with

With providers that process data on our behalf, under contract and only for these purposes:

• hosting of the website and the database: Hetzner (USA);
• storage of your photos and of the generated content (images and videos), and database backups: Cloudflare R2 (Europe);
• additional database backups: Amazon Web Services (USA) and Backblaze (USA);
• AI: Google, fal.ai and Shotstack;
• payments: Stripe and PayPal;
• email: Mailgun and Amazon SES;
• website usage analytics: Microsoft (USA), with Clarity;
• feedback review: Anthropic, PBC (USA), an AI tool.

For their own purposes, under their own policies: Meta, TikTok and Google, which receive data about your visit to measure and show ads, depending on your cookie choice (section 6). If those cookies are active, when you buy we also send them from our server the purchase event with your email (and, to TikTok, your phone number) hashed, your IP address, your browser and, to Meta, its cookies. We also share data with the authorities when the law requires it.

5. Where data is processed

Mainly in the USA. Your photos and the generated content are stored in Europe (Cloudflare R2). Database backups are stored in Europe and in the USA. Some providers, such as the AI and payment providers, may process them in other countries. For data from the European Economic Area, the United Kingdom and Switzerland we use the European Commission's Standard Contractual Clauses.

6. Cookies and analytics

We use the cookies the site needs to work and, in addition, analytics and ad-measurement cookies: Google Analytics (how many people visit and where they come from), Microsoft Clarity (how the site is used, with session recording; text fields and your photos are masked), the Meta pixel and the TikTok pixel (to measure our ads on those networks). When those cookies are active and you enter your email or phone number in a form on our website, the Meta pixel sends them to Meta encrypted (hashed) to match your visit with your Meta account and measure our ads. If you are in the European Economic Area, the United Kingdom, Switzerland or Brazil, they are only turned on if you accept them in the cookie notice. In other countries they are on by default and you can reject them at any time from the "Cookies" link in the footer; we also honor your browser's Global Privacy Control signal. These providers are in the United States.

7. How long we keep data

• Photos you upload: deleted 30 days after your order is delivered. Sooner if you ask us or if you delete your account. If your order could not be delivered, we keep your photo so we can redo it until we deliver it or refund you. If you did not pay, we delete it after 30 days.
• Generated images and videos: 12 months from delivery, with an email 30 days before; sooner if you delete your account. The link in the email telling you your videos are ready lets anyone who has it watch them for 30 days; it stops working if you delete your account, and you can ask us to cancel it sooner.
• Account: until you delete it.
• Feedback: 12 months, or sooner if you delete your account.
• Orders and payments: for as long as tax and accounting obligations require.
• Marketing email: until you unsubscribe; if you have not bought, we stop sending it 180 days after your last interaction. Your unsubscribe is kept so we can respect it.
• Backups: kept for up to 35 days. What is deleted from the database also disappears from the backups within that period.

8. Your rights

You can ask for access, rectification, erasure, objection, restriction or portability of your data, and withdraw your consent, by writing to [email protected]. We reply within 30 days at most. Depending on where you live (for example, the EU or the United Kingdom, California, Mexico, Brazil, Colombia or Peru) you may have additional rights, including the right to complain to your data protection authority.

8 bis. Deleting your account and your data

You can delete your account and your data from your account menu, "Delete account" option, or by writing to [email protected]. If you signed in with Facebook, you can also remove SetWalk in Facebook → Settings → Apps and websites and ask us to delete your data. We delete your photos, the generated content, your feedback and your account. We only keep payment records, for tax and accounting obligations, and your unsubscribe from our emails.

9. Minors

SetWalk is only for people aged 18 or over.

10. Security

Encrypted connections (TLS). Your photos and the generated content are stored encrypted in Cloudflare R2. The database is not reachable from the internet and only authorised staff can access it. The database backups at Cloudflare and AWS are encrypted, and the hosting provider also keeps copies of the server for 7 days.

11. AI agents you connect

If you authorize an AI agent or an application from another company, we send it only what that permission allows: the status and date of your orders and the link to your finished videos, which only opens when you're signed in to SetWalk. That company processes this data under its own terms, not as our provider. We log each connection and each use (which agent, when and an encrypted fingerprint of the IP) for security. You can disconnect it at any time from "My Creations"; from then on it receives nothing more, but what it already received is kept by that company under its terms.

12. Changes

We will publish changes on this page with their date. If they are important, we will let you know by email or on the website.