Privacy Policy – Banana AI: AI Image Editor
Last updated: October 8, 2026
This privacy policy explains which personal data the app Banana AI: AI Image Editor ("the App", "we", "us") processes, why, with whom it is shared, and what rights you have. It applies to the App on iOS and Android.
1. Who is responsible
Elias Fiedler (eFeat Digital)
Email: efeatdigital@gmail.com
2. Summary
• You do not need an account. The App works with a random, pseudonymous user ID.
• When you create something, the photos, videos, voice recordings and prompts you choose are sent to our AI service provider fal.ai and the AI model that performs the task. We only do this after you have agreed to it in the App, and you can withdraw that consent in the App settings at any time.
• Your results, avatars, saved prompts and your collection are stored only on your device. We do not keep copies of your photos or results on our own servers.
• We do not sell your data and we do not show advertising.
• We do not use your content to train AI models.
3. What data we process
3.1 Content you use to create images and videos
When you start a generation, we process the content you selected for it:
• Photos you pick from your library or take with the camera (for filters, avatars, AI influencers, image-to-video, effects, "From A to B", "Lip Sync" and "Main Character"). Photos usually show faces.
• Videos you choose for "Main Character". They may show you and other people.
• Voice recordings and audio files you record or choose for "Lip Sync".
• Prompts and settings, such as the text you type, the chosen style, model, resolution and the options of the AI influencer builder.
We use faces only to create the result you asked for. We do not create biometric templates and do not use your content to identify or authenticate anyone.
3.2 Results and data stored on your device
Generated images and videos, your collection, avatars and AI influencers, saved prompts, settings and your consent choice are stored locally on your device. They are deleted when you delete them in the App or uninstall the App. Images and videos you save to your photo library are subject to your device's settings.
3.3 Pseudonymous identifiers
• A random user ID created by our purchase service RevenueCat.
• An anonymous Firebase user ID used to secure access to our database.
To be able to trace misuse (for example attempts to create prohibited content), the RevenueCat user ID is sent along with every AI request as technical metadata. It does not contain your name or contact details.
3.4 Purchases, subscriptions and credits
Purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. We process:
• information about your purchases and subscription status (product, date, renewal, expiry), provided by RevenueCat and the stores;
• your credit balance, credit grants and refunds, and daily usage counters, stored in Google Firebase (Cloud Firestore) under your pseudonymous ID;
• markers that block an ID after serious misuse.
3.5 Reports
If you report AI-generated content, we store your description, the content type, the AI model used, the prompt, the platform, the app version and your pseudonymous IDs, so that we can review the report.
3.6 Usage statistics
We use Google Analytics for Firebase to understand how the App is used, for example whether the onboarding was completed, a paywall was shown or a first image was created. This includes device information (model, operating system, language, app version), an app instance ID and approximate location derived from the IP address. On Android, Firebase may also read the Android advertising ID. We use it only for statistics, not for advertising. You can reset or delete it in your Android settings. On iOS we do not access the advertising identifier (IDFA).
3.7 Crash and performance reports
We use Sentry to detect errors. If the App crashes or a request fails, a report is sent with technical information such as device model, operating system, app version, error messages and timings. We do not send screenshots or screen contents.
3.8 Device permissions
• Camera: only when you choose to take a photo.
• Photos: you select photos and videos with the system picker. The App only receives the items you select.
• Add to photo library: only when you save a result.
• Microphone: only while you record your voice for "Lip Sync".
You can withdraw these permissions at any time in your device settings.
3.9 Region
The App reads your device's country setting locally to decide whether the free trial is available in your region. This information is not sent to us.
3.10 Contact
If you email us, we process your email address and your message to answer you.
4. Purposes and legal bases
If you are in the European Economic Area, the UK or Switzerland, we rely on the following legal bases (Art. 6 GDPR):
• Sending your photos, videos, recordings and prompts to fal.ai and the AI models to create your result: your consent (Art. 6(1)(a) GDPR), which you give in the App before your first creation and can withdraw at any time in Settings, and the provision of the service you request (Art. 6(1)(b) GDPR).
• Purchases, subscriptions and credits: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
• Preventing misuse, reviewing reports and securing the service: legitimate interests in a safe and lawful service (Art. 6(1)(f) GDPR).
• Crash and performance reports: legitimate interests in a stable app (Art. 6(1)(f) GDPR).
• Usage statistics: legitimate interests in improving the App (Art. 6(1)(f) GDPR).
• Answering your messages: legitimate interests (Art. 6(1)(f) GDPR) or pre-contractual measures (Art. 6(1)(b) GDPR).
Withdrawing your consent does not affect processing that took place before. Without consent you can still browse the App, but you cannot create images or videos.
5. Recipients
We share data only with the following service providers, and only to the extent necessary:
• fal.ai (Features & Labels Inc., USA): platform that runs the AI models and processes your content as our processor.
• AI model providers via fal.ai, depending on the model you choose: Google (Nano Banana, Veo), OpenAI (GPT Image), xAI (Grok Imagine), MiniMax (H3 Max, Hailuo), Kuaishou (Kling) and PixVerse (AI effects). They create your image or video and may process data in the USA, Singapore or the People's Republic of China.
• Vercel Inc. (USA): hosting of our server that forwards your requests to fal.ai.
• Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Google Analytics for Firebase; EU and USA): anonymous sign-in, credits, reports and statistics.
• RevenueCat Inc. (USA): managing purchases and subscriptions.
• Sentry (Functional Software, Inc.; data stored in the EU, Germany): crash and performance reports.
• Apple and Google: app distribution, payments and the in-app rating prompt, according to their own privacy policies.
We may also disclose data if we are legally required to do so.
6. Transfers outside the EU
Some recipients process data outside the European Economic Area, in particular in the USA, and depending on the model also in Singapore or China. These countries may not offer the same level of data protection as the EU. Where data is transferred, this is based on the EU–U.S. Data Privacy Framework if the recipient is certified, or on the EU Standard Contractual Clauses (Art. 46 GDPR). By consenting in the App you also agree to this transfer (Art. 49(1)(a) GDPR).
7. How long we keep data
• Content on your device: until you delete it or uninstall the App.
• Content sent for generation: fal.ai and the model providers process it to create and deliver your result and keep it only according to their own retention rules. We do not store copies on our servers.
• Credits and purchase data: as long as you use the App and as long as legal retention periods require.
• Reports: as long as necessary to review them and to prevent repeated misuse.
• Crash reports: deleted automatically after Sentry's retention period.
• Usage statistics: according to the retention setting of Google Analytics for Firebase.
8. Your choices
• Withdraw consent to sending content to AI services: Settings → AI data sharing.
• Delete content in the App (collection, avatars, prompts) or uninstall the App.
• Manage permissions (camera, photos, microphone) in your device settings.
• Request deletion of data stored on our side (credits, reports): email us your Support ID from Settings.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw consent at any time. To exercise these rights, contact us at efeatdigital@gmail.com. Because we do not know your identity, please include the Support ID from Settings.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the one in your country of residence.
California and other US states: We do not sell or share personal information for targeted advertising. You can request access to or deletion of your personal information using the contact details above.
10. AI-generated content and responsible use
All results are created by artificial intelligence and can be inaccurate. Prompts are checked by safety filters, and prohibited content (for example sexual, violent or hateful content) is blocked. Only upload photos, videos and recordings you have the right to use. For "Main Character" in particular, everyone shown must have agreed. You can report problematic results directly in the App. We review reports and may block IDs that misuse the App.
11. Children
The App is not directed at children under 13. In the European Economic Area, users under 16 may only use the App with the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Security
Data is transmitted in encrypted form (HTTPS). Our API keys are kept on our server and are not stored in the App. Access to our database is protected by authentication and security rules. No transmission over the internet is completely secure.
13. Changes
We may update this policy when the App or legal requirements change. The current version is always available at this address; the date at the top shows the last update.
14. Contact
Questions about privacy: efeatdigital@gmail.com