Pasko AI (“we”, “us”) runs an online service that turns a photo into a short Christmas video. We decide how your personal information is used, which makes us its personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

For anything about your privacy, including reaching our Data Protection Officer, email paskoai.app@gmail.com.

• Your account: your email address. If you sign in with Google, also your name and profile picture from Google.
• Your photos and what you choose with them: the scene and, for VIP and Bundle, your greeting card text.
• The videos we make for you.
• Payments: the package, amount, the GCash reference number you enter, an optional receipt screenshot, and whether we approved it. You pay inside the GCash app; we never see your GCash PIN, balance or other transactions.
• Credits: a history of credits you received and used.
• Technical information: a cookie that remembers your language, cookies that keep you signed in, and basic records kept by our hosting providers for security (such as IP address and browser type).

Two things stay only on your device: if you pick a photo before signing in, your browser keeps it until you come back (at most a day), and the installed app keeps a page to show when you are offline.

Your photo may show other people, including children. Before you upload, you confirm that everyone in the photo agreed, and that for any child you are their parent or guardian or have their permission.

We use the faces in your photo only to make your video. We do not use them to identify anyone, and we do not build face profiles.

• To make your video and deliver it to you (based on your consent and our agreement with you).
• To run your account, credits and payments (to provide the service you asked for).
• To send you service emails: sign-in codes, payment updates, and when your video is ready (to provide the service).
• To keep the service safe and prevent fraud, such as fake payment references (our legitimate interest).
• To keep the sales records that tax law requires (a legal obligation).

We do not sell or rent your information, use it to show you ads, or use your photos to train our own AI.

We use these service providers to run Pasko AI. They receive only what they need for their part:

• Supabase: our database, sign-in, and storage for your photos and payment screenshots, hosted in Sydney, Australia.
• Cloudflare: stores your finished videos (Cloudflare R2, Asia-Pacific region).
• Vercel: runs our website, on servers in the United States and other countries.
• kie.ai (NEXUSAI Services LLC, United States) and the Kling AI model it uses: make the video from your photo. They receive your photo through a private link that expires after one hour, plus the scene instructions. They do not receive your name or email. Their own terms allow them to store what they process to run and improve their service.
• Google: “Continue with Google” sign-in, and our email account that sends you service emails.

Some of these providers are outside the Philippines. We choose providers that protect data, and your rights under Philippine law still apply. We also share information with authorities when the law requires it.

• Photos: until you delete them (Account, then “Delete my uploaded photos”) or delete your account. A photo whose video is still being made is kept until the video is finished.
• Videos, credits and payment records: until you delete your account.
• Sales records in our accounting books: as long as tax law requires, even after you delete your account.
• Emails we sent you stay in our email account’s sent folder.

When you delete your account in Account, we delete your photos, videos, payment screenshots, credits and payment records from the app right away.

Connections to Pasko AI are encrypted. Your photos and videos are kept in private storage, and access rules let only you (and our staff, when needed to help you or check a payment) see them. Video and photo links expire after a short time. No system is perfectly secure, but if a breach puts your information at risk, we will tell you and the National Privacy Commission as the law requires.

Under the Data Privacy Act you have the right to:

• be told how your information is used (this page);
• get a copy of your information;
• correct information that is wrong;
• object to how it is used, or withdraw your consent;
• have it deleted or blocked;
• receive it in a format you can take elsewhere;
• be compensated for damage caused by its misuse; and
• complain to the National Privacy Commission (privacy.gov.ph).

You can delete your photos or your account yourself on your Account page. For anything else, email paskoai.app@gmail.com. We may ask you to confirm it’s you before we act.

Pasko AI is meant for adults (18 and older). Children may appear in photos only with the permission of their parent or guardian, as described in section 3.

We use only the cookies the service needs: to keep you signed in and to remember your language. We do not use advertising or tracking cookies.

If we change this policy, we will update the date at the top. If a change affects how we use your photos, we will tell you by email or in the app first.

Questions, requests or complaints about your privacy: paskoai.app@gmail.com.