This explains what the app stores, who processes it, and how to ask for access or deletion. Carousel of Heroes is operated by Ivan Krapivin, Serbia. Contact support@carouselofheroes.com with a privacy question or request.
Technical and job records. We keep records needed to operate and troubleshoot the service. These can include your IP address, browser or app user-agent, requested address and query parameters, referring address, response status and size, request-processing time, and error information. Generation and export records are linked to a carousel and account. They include status and timestamps, provider/model information, token and service-cost totals, and failure details. Some unexpected errors may include additional technical details; these records are not all automatically redacted. Service-cost totals are our operating costs, not payment information collected from you.
We use these records to operate, secure and support the app, not for product analytics. The iOS and Android apps have no advertising or third-party analytics SDK. Our websites offer optional Google Analytics, described below. Account content is not sold.
Apple crash reports. We use crash reports about the iOS app that Apple makes available to us to investigate and fix crashes. Depending on the report, these can include app and operating-system versions, device model, crash time, stack traces and technical diagnostic identifiers. For TestFlight feedback, Apple may also provide the tester's name, email address and associated feedback or contact context. We use these reports for troubleshooting, not advertising or product analytics. This is separate from Apple's own data collection. The server-log archive schedule described below does not set the retention of Apple's reports or downloaded copies. Contact support with an access or deletion request concerning these reports.
Scene descriptions sent to the image provider can contain context from what you wrote. The photo-upload feature stores and processes your selected photos for your carousel; it does not send their image files to these AI providers. Avoid including private information that is not needed for your carousel or report. Web research and emails announcing completed generation are not enabled in the current release; account authentication emails are separate.
Provider processing also depends on the applicable service terms, account settings and legal obligations. This notice does not promise that providers retain no data or that every provider use is limited to our own purposes.
On carouselofheroes.com and app.carouselofheroes.com, we ask before loading Google Analytics. If you allow it, Google may receive browser and device information, approximate location derived from your IP address, and which broad website or app section you visit. Analytics may use cookies to recognize your browser. We send section names, not carousel text, account details, project IDs, or full page addresses. We do not load the tag if you decline. Your choice is saved separately in each website's browser storage. You can change it using “Analytics settings” on the landing site, or disable it for the web app below. Disabling stops future collection in that browser; it does not erase information Google has already received.
Creating or regenerating cards sends the material needed for that request to the providers described above. In the current web app and iOS 1.0 builds 12 and 13, the app explains these recipients and asks for permission before generation. It also asks you to confirm that you are at least 18 and legally an adult in your country of residence. You must check that confirmation before allowing AI processing. This is your own statement, not a check of your identity or age; we do not collect a birth date or identity document through this step.
Declining sends no generation request. Your permission and adult confirmation are stored on the device for the current account and disclosure version, including guest accounts. Another account, device or changed disclosure can require a new choice. You can withdraw permission in Account to stop future generation requests until you agree again. This does not cancel work already requested or erase information already processed. Viewing, manually editing and exporting existing cards do not require a new AI-generation request.
Version availability. The web update published on 22 September 2026 includes the permission screen and adult confirmation. iOS 1.0 builds 12 and 13 are currently available through TestFlight and include both. iOS 1.0 build 11 has the separate AI permission screen but no adult-confirmation checkbox. Older Android versions have not received this separate permission screen. Choosing Generate or Regenerate there sends the material required for that request. Do not submit material you do not want processed by the listed providers. This notice will be updated when the revised clients are released.
We copy generated illustrations into our app's storage, but that does not automatically delete the provider's copies. Provider-generated media links may be accessible to anyone holding the URL. For new fal.ai requests since 21 September 2026, we configure generated-media expiry after 24 hours and disable storage of the request/response JSON history. These settings do not retroactively erase media created before that change or cover the provider's separate billing, security or legally required records. Actual processing remains subject to the provider's applicable terms and settings. This is separate from the app's private storage and does not mean uploaded photos are sent to fal.ai.
The current app does not offer your generated backgrounds to other users. Your uploaded photos and story text are not a shared catalogue. If a shared background feature is introduced, its controls and this notice must be updated before it is enabled. When you export or share files through your device, the destination you select receives those files.
Account content is kept in active application storage until you delete it or the account. Temporary export copies may expire sooner. Account deletion removes the authentication account and its carousels, source text, uploaded and generated pictures, exports, signatures, personal templates, usage records and linked translation/AI-content reports. Guest sessions can also delete their data from Account before signing out, without registering.
Project-linked generation and export records do not currently have a fixed age-based expiry. They are removed from active application storage when the associated project is deleted, including through account deletion. Export-job records may be removed earlier when a carousel is regenerated or its photo settings change. Exported files have a separate lifetime.
An AI-content report keeps a limited snapshot of the reported cards for review, even if you later regenerate or delete the carousel. While a report is open, we review the need to keep it every 30 days. After it is resolved or dismissed, we delete the report, its comments and its snapshot after 90 days through an hourly cleanup task. Editing a moderator note does not restart this period. Deleting your account removes linked reports earlier. Contact support if you want to request removal of a report without deleting your account. Translation feedback is separate: it is kept until account deletion or an approved removal request, not by the AI-content-report closure schedule.
Server logs are separate from project records. Since 21 September 2026, our web-server access/error logs, main system-log copy and system journal are configured with a 28-day archive window, daily segments and hourly maintenance, designed to keep new operational records for less than 30 days during normal operation. Existing mixed historical archives are not split; some older entries remain during the transition until their whole archive expires. Interruptions or failed maintenance can delay expiration and require remediation. Account deletion does not automatically remove matching entries from operational logs.
Our service providers may retain their own logs and backup copies under their service terms, retention settings and legal obligations. Deleting data from the app does not promise immediate erasure from those separate systems or from copies you downloaded or shared. Contact support for help with an access or deletion request, including assistance with provider-held data.
Some older translation reports may already have lost their account link when an account was deleted under the previous implementation. We cannot reliably identify them by account ID alone. If you believe such a report contains your personal information, contact support so it can be located and reviewed.
Our providers and their authorized subprocessors may process data outside your country, including in the United States. The region used to send an email is not necessarily its storage region. Contractual data-protection and international-transfer arrangements depend on the provider and applicable service agreement. Contact us for information about the arrangements that apply to your data.
To delete an account, use Account → Delete account or the account and data deletion page, which also explains how to request deletion without installing or signing into the app. For a copy of your data, a correction, an objection or another privacy question, write to support@carouselofheroes.com.
The service is intended for people who are at least 18 and legally adults in their country of residence. It is not directed at children. The availability and limits of the app's adult self-confirmation are described above.
If this changes in a way that affects what is stored or who sees it, we will update the date above and provide notice of the change. Material changes to AI recipients or processing will require an updated disclosure and permission in clients that implement the permission screen.