AI Surprised Privacy Policy

1. Information we process

• Account information: registration email, nickname, salted password hash, email verification records and login sessions. Optional details include avatar, real name and creator status; basic browsing does not require them.
• Policy acceptance: we record the privacy policy version accepted at registration. We do not collect age declarations, full dates of birth or identity documents.
• Creations and interactions: uploaded creations, covers, icons, descriptions and publishing declarations; favorites, recommendations, last-opened times, usage duration and cloud saves from integrated creations.
• Usage and safety records: visitor identifiers, page and creation visits, source category, device category, start time and duration for analytics, popularity rankings and improvements. Network services also process IP addresses for transmission and abuse prevention; verification and feedback endpoints use rate-limit identifiers.
• Contact and moderation: report reasons, details, reported creations, block lists, moderation outcomes, and the email and issue details submitted through support forms. Do not provide unrelated sensitive information.

2. How information is used and displayed

Account information enables registration, sign-in, recovery and security. Saves and interaction records synchronize progress and display favorites and recent activity. Usage records support analytics, recommendations and rankings. Feedback and block information support moderation and privacy requests.

Public creations display content, title, description, cover, icon and author nickname. Sign-in emails, passwords, real names, cloud saves, report details and block lists are not public author information. Administrators process reports and service data according to their duties.

3. Local caches and device permissions

The website and app use session cookies for sign-in and local storage for essential interface state and some creation progress. The iOS app bundles its fixed interface and example creations. Browsers may cache scripts, images and media from online creations and other visited content. The system may remove caches when storage is low; clearing them does not delete accounts or cloud saves.

Camera permission is requested only when you choose to take a photo for an avatar or creation image. You may decline or revoke it in system settings and use an existing image. Basic browsing does not request contacts or precise location.

4. Service providers and creator content

The platform uses server, file storage and email services for access, resources and verification codes. Email providers process recipient addresses and message content. No cross-company advertising tracking SDK is integrated; the app does not sell personal information or serve third-party targeted advertising.

Creations run in isolated containers and do not receive your email, password or real name. Integrated creations can read and write their own saves. Do not enter passwords, identity details or other sensitive information into creations; report suspicious content. External sites have their own privacy policies.

5. Retention and deletion

Accounts, creations, interactions and cloud saves remain on platform servers for cross-device access until you delete the content or account. Verification codes and sessions expire, and temporary uploads and previews are cleaned up after expiry. Feedback is retained during processing for status tracking; account deletion clears linked feedback and records. Anonymous feedback deletion can be requested through support using its tracking token.

Request deletion under Profile → Privacy & safety → Delete account. After password verification and confirmation, all sessions are invalidated and submissions hidden immediately. Background cleanup usually removes the account, files, saves, favorites, recommendations, activity and linked personal data within minutes, retrying storage failures. Completed deletion is irreversible. Site owners must transfer ownership first.

Caches on other users' devices and public content saved by others cannot be individually recalled remotely. The platform rejects subsequent attempts to reopen deleted creations. Server logs, operational backups and legally retained information are managed separately under the operator's actual security and legal obligations; ask support for retention details.

6. Your choices and rights

You can view or update your nickname, real name and avatar in Profile; change passwords in Account security; remove favorites or recommendations in creation menus; and unblock authors, view feedback or delete your account in Privacy & safety. Contact support for a copy of personal information, corrections you cannot make, withdrawal of consent or other privacy requests. We may verify identity but will not ask for account passwords or verification codes.

7. Protection of minors

Guardians with questions about a minor's personal information or requests for correction or deletion can use Help & contact → Child safety. We will verify and handle the request.

8. Policy updates and contact

Policy updates are published here. The latest policy is always accessible from sign-in/sign-up and the app's Profile screen.

Operator: Guodong Technology Co., Ltd.
Contact: www.aisurprised.com/support
Account & privacy management: www.aisurprised.com/safety