Privacy Notice

DRAFT — NOT APPROVED OR OPERATIVEThis working draft must not be relied on or published as final. Confirm the legal operator, data-processing purposes, provider contracts and locations, contact details, retention schedule, age policy and applicable legal review before release.

Proposed operator: [PLACEHOLDER: OPERATOR_LEGAL_NAME_AND_ENTITY]. This draft does not identify the legal Data Fiduciary or establish who controls the service.

Information used by the service

Account and profile information: your email address and authentication details, plus the username, display name, profile image, and optional biography you provide. Google may provide your name and profile image when you choose Google sign-in.
Age eligibility: during account setup, we ask for your date of birth so the service can determine whether you meet its minimum age requirement. The application calculates your age and stores the calculated age, the calculation method, and timestamps in a private account record; it does not store the date of birth in that record.
Content you submit: uploaded images and the titles, descriptions, categories, source links, and visibility settings you choose for them.
Existing voice content: voice stories and Live Room voice messages previously submitted may include original audio, detected language, transcripts, translations, or generated speech. The website's voice recording and playback controls are currently unavailable. Room voice messages are unavailable after 24 hours; photo stories remain with the photo until removed by its creator or account deletion.
Feature and moderation activity: information needed to provide features you use, such as views, likes, saves, follows, and creator statistics. If you submit a report, Ariexo stores your account ID, the reported public photo or profile ID, the selected reason, a limited snapshot of public target details, and moderation status/decision history. Private Live Room report records contain identifiers and reason metadata, not the reported message text. Server-side abuse controls also keep per-account upload and report counters.
Optional Live Room conversation prompts: when the server-side stabilizer is enabled, the public Stick image, its supporting title, description, tags, and category, and a short sample of visible room stories may be sent to Google Gemini so it can inspect the visual and generate a grounded conversation prompt. The request does not include account credentials or private profile fields. Do not share information in a Live Room that you are not comfortable having processed by this provider. The feature remains unavailable when its server key is not configured.
Technical information: basic request and device information may be processed by our hosting, authentication, and storage providers to deliver and protect the service.

How information is used and stored

We use this information to create and secure accounts, display profiles and content according to your visibility settings, provide discovery and creator features, prevent abuse, and respond to support requests. Ariexo uses Firebase for authentication and database services and Cloudflare for site delivery and image storage. Google processes information if you choose Google sign-in and, when enabled, receives the limited Live Room prompt context described above through the Gemini API. These providers process information as part of delivering their services and under their own terms and privacy notices.

Previously submitted voice content is stored in private object storage and may be processed by Cloudflare Workers AI to transcribe speech and translate transcripts. Google Cloud Text-to-Speech receives translated text only when translated speech is requested; it generates a standard synthetic voice and does not imitate the creator. Transcripts, translated captions, and generated speech are cached for reuse. The original recording is kept separately from generated speech and is not replaced. The website currently provides no voice recording or playback controls.

Some pages also load fonts from Google Fonts, the Tailwind CSS browser script from its CDN, and Firebase JavaScript modules from Google's hosting service. When a browser requests these resources, the relevant provider may receive the request's IP address and standard request metadata. The date of birth entered for age eligibility is sent to Ariexo's hosting provider to process the request; the application stores the calculated age rather than the date of birth.

Public profiles and content marked public can be viewed by other people. Content marked private is restricted by Ariexo's access controls to the account that owns it. Do not mark content public unless you are comfortable sharing it publicly.

Ariexo and its providers may use browser storage to preserve your sign-in state and temporary in-session features such as a Visual Trail. Uploaded image files may contain embedded metadata. Existing recordings may include sensitive spoken information and remain subject to the retention practices described below.

Cookies and browser storage

See our Cookie Policy for what we store and how to control it.

When you dismiss the storage notice, Ariexo stores a first-party preference cookie named __Host-ariexo-storage-notice for up to 180 days. Its value is a version marker, not an account identifier or authentication token. If cookies are unavailable, the notice uses local storage for the same preference and duration. You can clear this preference in your browser settings.

Ariexo and its providers use cookies and similar browser storage that are needed to run the service: keeping you signed in (Firebase authentication), completing the Cloudflare Turnstile "I'm not a robot" check that protects sign-in and sign-up from bots, and storing an anonymous viewer identifier and your choice about this notice. We do not use this storage for advertising. You can clear it in your browser settings, but you may then be signed out and asked to repeat security checks. The exact list of cookies and storage keys, and their lifetimes, is [DECISION REQUIRED] and must be confirmed before publication.

Retention and your choices

Existing voice content follows the voice-specific application retention period: 24 hours for Live Room voice messages and the lifetime of the photo for photo voice stories. Room audio objects are also subject to the Cloudflare R2 lifecycle rule documented in docs/voice-system.md; physical object removal may occur after the API has stopped serving the expired message. Other data classes, backups, legal holds, and provider retention remain part of the broader retention schedule: [DECISION REQUIRED]. A support contact and tracked privacy-request process must be verified before publication.

Children

The current code permits accounts from age 16, so it does not exclude all people under 18. The minimum age, age assurance, parental-consent arrangements and child-safety escalation remain [DECISION REQUIRED] and require review by the adult operator and qualified Indian counsel. No parental-consent workflow was found in the repository.

Changes to this notice

We may update this notice as the service changes. We will post the current version here and update the date above.

Privacy contact

[PLACEHOLDER: VERIFIED PRIVACY CONTACT AND REQUEST ROUTE]