Privacy Policy
Last updated: 14 November 2026
Who we are
Cinazu is a Mac app for making videos with AI, and the website at cinazu.com. Both are made and run by Lil Dog Productions, LLC ("Cinazu", "we", "us"), Los Angeles, California, United States, which is the data controller for the personal information described here.
- Email: support@cinazu.com
- Post: Lil Dog Productions, LLC, Los Angeles, California, United States
The short version
- Your Library stays on your Mac. Your projects, edits, imports and exports aren't uploaded to us.
- You sign in with Apple. We never see a password, and we don't ask Apple for your name or email.
- Before anything goes to the cloud, the app asks you, and names each company and what it gets.
- When you make something on credits, your request passes through our server to the company that makes it, and the result comes back to your Mac. We keep the result for at most 7 days.
- We don't sell your information, we don't show ads, and we don't track you across other apps or websites.
- You can delete your account in the app at any time.
What stays on your Mac
These are made and kept on your Mac. They aren't sent to us:
- your projects, scenes, takes, edits, captions and exports;
- photos, clips, songs and other files you bring in, except the parts you choose to send for a make (see below);
- anything made by your Mac's own features: script drafting with Apple Intelligence, sketch pictures (Image Playground), Mac voices and music made on the Mac. Apple Intelligence may use Apple's Private Cloud Compute, which Apple says it doesn't store;
- your own API keys, which are kept in your Mac's Keychain;
- crash reports, until you choose to send one (see "Support and bug reports").
This is me (adding yourself)
When you add yourself with This is me, Cinazu checks, on your Mac, that it's really you:
- You record about 5 seconds of yourself reading four numbers. Your Mac checks that the numbers were said (speech recognition on the Mac) and that the face in the recording matches the photos you added (a face-matching model that runs on the Mac).
- No photo, recording or face measurement from the check leaves your Mac. We don't receive them, and we can't access them. The one thing our server is told is that the check passed, described below.
- The recording is deleted as soon as the check ends, whatever the result. The face measurements exist only while the check runs. Your project keeps only the date, a match score and which photos were checked.
- What our server keeps, if you're signed in: only that your account passed the check for that character. That is the character's id in your project, which face-matching model was used, the match score and the date. It holds no photo, no recording and no face measurement. We use it for one thing: a video in which a real person speaks on camera is made only for someone who passed this check on that account. Removing yourself from This is me, deleting the character or deleting your account deletes it.
- You can remove yourself any time: delete the character from the project. Turn off camera or microphone access for Cinazu any time in System Settings ▸ Privacy & Security.
- When you later make something with yourself on credits (for example a speaking shot), the photos and lines that make needs are sent as described under "What you make on credits", like any other make.
What we collect, and why
1. Your account. When you sign in with Apple, Apple gives us an anonymous account id for Cinazu. We don't ask for, and don't get, your name or email address. We use the id to keep your credits, your purchase history and your settings on our server, so they follow you to every Mac you sign in on. We also keep a sign-in token from Apple, only so we can tell Apple to end the sign-in when you delete your account.
2. Purchases and credits. When you buy credits, Apple processes the payment. We never see your card. The app sends us Apple's signed record of the purchase, and we check it and add the credits. We keep:
- your balance;
- a history of credits added, spent, held and returned;
- Apple's transaction ids;
- your daily usage against limits.
We use these to run your account, prevent fraud and handle refunds. Apple also tells our server about refunds.
3. Starter credits. To give starter credits once per person, we keep a scrambled (hashed) copy of the App Store's id for your install, and a mark that your Apple account has had them.
4. What you make on credits. When you press a paid button, the app sends our server what that make needs. Depending on what you're making, that's your words (prompt, scene description, lyrics, lines to be spoken), the pictures you attach (for example a cast photo or a start frame), a clip (Replace character), a take and a line of your song (lip sync), or a character's picture and the recording of their line (a speaking shot). Our server passes it straight to the company that makes it (see "Who gets what"). It isn't saved to our database: we hold it in memory only while the make runs.
The result (the picture, clip or sound) is stored on our server until your app collects it, and is deleted automatically after at most 7 days. If a make is cancelled or lost, its result is deleted at once.
For each make we keep a record without your words or media: what kind of make it was, which model, the price, what was charged or returned, when, whether it was a free redo, and the provider's error message if it failed. This powers Credits ▸ History, refunds and our checks against provider bills.
5. Reports. When you use Report this result, we get your reason, your note (up to 1,000 characters) and which result it was (its kind, effect and model). We never get the picture, clip or sound itself. We use reports to find problems, improve Cinazu and enforce our Terms.
6. Limits, abuse and security. We use your account id and your make records to apply daily spending limits, stop abuse and keep the service running. That includes automatic checks on lip sync that can pause an account (see our Terms). Our server's logs record each request's IP address, time and result, and sometimes your account id. We don't use IP addresses to work out where you are, and we don't combine them with anything else to identify you.
7. Support and bug reports. If you email us, we get your email address and whatever you send. That includes any video or screenshot you attach, and anything you include from Help ▸ Report Issue. That window lets you choose to attach:
- Diagnostics: the app version, your Mac model and macOS version, the project name, the timeline's shape, and the clip names and file paths in any warnings. File paths can include your Mac user name. There's no media, prompts or keys.
- Crash reports: Apple's crash data, meaning where the app stopped and the app and macOS versions.
You see exactly what's attached before you send it, and nothing is sent until you send the email.
8. TestFlight (test builds only). If you test Cinazu through Apple's TestFlight, Apple shares with us the name and email address you were invited with, your install and session counts, and any feedback, screenshots or crash reports you choose to send through TestFlight. Apple's TestFlight terms and privacy policy cover what Apple does.
9. The website. See "The website" below.
We don't collect: your location, contacts, browsing history, health or financial details, or advertising identifiers. There's no analytics or advertising code in the app.
Who gets what
Cinazu doesn't make pictures, video, music or voices itself. Other companies' models do. Before your first cloud make, the app shows who gets what and asks you to allow it. You can review that, or turn cloud makers off, in Settings ▸ Privacy.
On credits (you pay with Cinazu credits, and we pay the companies):
| Who | When | What they get | What they keep |
|---|---|---|---|
| Cinazu's server (hosted on Google Cloud in the USA) | Every make on credits | Each request as above, plus your account id | The request only in memory while it runs; the result up to 7 days; the records listed above |
| Google (Gemini API) | Pictures, video (Omni Flash), music (Lyria), voices | Your words and the pictures you attach for that make; narration text; a clip for Replace character | Google keeps video, music and voice requests and results for 55 days so a take can be extended or edited, and logs prompts and results for a limited period to detect abuse. Google doesn't use them to improve its products on paid services. |
| fal | Speaking shots (made by ByteDance's OmniHuman), lip sync (made by sync.), sound effects (made by ElevenLabs), Kling and Seedance video | For a speaking shot, the character's picture and the recording of the line they say (if the character is you, that is a picture of you); a clip's words and start picture; for lip sync, your take and the line of your song; a sound effect's words and length | Requests aren't stored; uploaded files are deleted about an hour after the make. fal may also keep "usage data" under its terms. |
| Anthropic (Claude) | The assistant in Edit, the picture check, script help and script drafting | What you ask the assistant; a list of your timeline's clips (titles, times, levels); frames and words of your cut when it looks at them; the script or pictures it checks; your idea when it drafts a script | Deleted within 30 days, unless flagged for breaking Anthropic's usage policy (then up to 2 years). Anthropic may not train on it. |
| Runway | Off during the test. If we turn Runway on for credits, the app will ask you again before your first Runway clip, and this page will change. | A clip's words and start picture | Under Runway's terms. |
| Apple | Sign in, purchases, Apple Intelligence | Sign-in and purchase details (Apple already has them); for Apple Intelligence, what you draft | Under Apple's privacy policy |
We never send: your project files, your other media, or your keys to anyone but the company the key belongs to.
Our own service providers. Besides the companies above, we use Google Cloud (Cloud Run, Firestore, Cloud Storage and Cloud Logging, in the USA) to run our server, Apple (iCloud Mail) for email, and Vercel to host the website. They process data for us under their own data-processing terms.
Training
Cinazu never uses your photos, videos or words to train AI, and never sells them. When you make something on Cinazu credits, it goes to the company that makes it. Google and Anthropic, who make most of what Cinazu makes, don't use it to train their models. Clips made with Seedance go through fal, under fal's terms. With your own key, your own agreement with that company applies: for example, a free Gemini key lets Google use what you send to improve its products.
Speaking shots, Kling clips, lip sync and sound effects also go through fal, under fal's terms.
With your own keys
If you add your own key for Google, Runway, Higgsfield, ElevenLabs or Anthropic in Keys, your Mac sends those requests directly to that company. They don't pass through our server, and we don't see them. That company bills you, and your own agreement with it applies, including whether it trains on what you send. For example:
- a free Gemini key lets Google use your data to improve its products;
- ElevenLabs trains on your data unless you turn off "Improve the models for everyone" in your ElevenLabs account;
- Higgsfield's and Runway's standard terms allow training.
Your keys stay in your Mac's Keychain. We never receive them.
How long we keep things
| What | How long |
|---|---|
| A make's request (words, pictures, clips, takes) on our server | Only in memory while the make runs |
| A make's result on our server | Until your app collects it, and at most 7 days |
| Make records, credit history, balance, purchases, settings, limits | While your account exists |
| Reports | 90 days from the report, or until you delete your account, whichever is sooner. If the law requires us to pass a report to the authorities, we keep it for as long as the law requires |
| Server logs (including IP addresses) | 30 days |
| Support emails and attachments | 2 years after the conversation ends, or sooner if you ask |
| After you delete your account: money records (purchases, refunds, starter credits, credits forfeited, any amount owed), plus any suspension and the marks that stop starter credits being claimed twice | 7 years, under a code that doesn't contain your Apple account id, for tax, refunds and fraud prevention |
| Data kept by Google, fal, Anthropic and Apple | See "Who gets what" and their own policies |
Legal bases (people in the EU, EEA, UK and Switzerland)
We use your information:
- to provide Cinazu to you under our Terms (contract): your account, credits, purchases, sending your makes and returning the results;
- for our legitimate interests in keeping Cinazu safe, preventing fraud and abuse, applying limits, handling reports and fixing bugs;
- to meet legal obligations, such as keeping tax and payment records;
- with your consent, where we ask for it, for example the cloud makers question in the app. You can withdraw it in Settings ▸ Privacy at any time.
Your choices and rights
- Cloud makers: turn them off in Settings ▸ Privacy. Free features on your Mac keep working.
- Delete your account: in the app (see below).
- Your rights: wherever you live, you can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it. If you're in the EU, EEA, UK or Switzerland, you can also object to or restrict some uses, ask for your data in a portable form, and complain to your local data protection authority. California and other US state residents have similar rights. We don't sell or share personal information for advertising, and we don't use sensitive information to infer things about you.
- How to ask: email support@cinazu.com from any address, with the short account code shown in Settings ▸ Account. That code lets us find your account without your Apple ID. We'll answer within 30 days. We won't treat you differently for using your rights. If we say no, you can ask us to reconsider by replying to that email.
Children
Cinazu is for people 18 and older, and our AI providers require that too. We don't knowingly collect information from anyone under 18. If you believe someone under 18 is using Cinazu, email support@cinazu.com and we'll delete their account.
Where your information goes
We're based in the United States, and our server runs in the USA. Google, fal, Anthropic and Apple may process data in the USA and other countries. If you're outside the USA, your information is transferred there. Where the law requires it, we rely on the European Commission's Standard Contractual Clauses (and the UK's addendum) or the provider's certification under the EU-US Data Privacy Framework.
Security
- Our server holds the companies' keys; the app never does.
- Every request is signed to your account.
- Records are stored in Google Cloud with access limited to us.
- Results are deleted after 7 days.
- Your own keys stay in your Mac's Keychain.
No system is perfectly secure. If a breach affects your information, we'll tell you and the authorities as the law requires.
Deleting your account
In the app, open Credits (or Settings ▸ Account) and choose Delete account…, then confirm with your Apple ID.
- What goes: your account, balance, credit history, make records, stored results, reports and sign-in tokens are deleted from our server, and we ask Apple to end Cinazu's sign-in.
- What we keep: the money records described above, for 7 years.
- What happens to your credits: unused credits are lost and can't be refunded.
- Your Mac: your Library stays on your Mac until you delete it.
The website
- Hosting: Vercel hosts cinazu.com and keeps server logs for security.
- Counting visits: we don't. The site has no analytics or tracking code.
- Cookies: the site sets none.
- Asking to try it early: the "Ask to try it early" button opens an email to support@cinazu.com. We get your email address and whatever you write. We use them only to answer you and, if there's a place in the test, to invite you to TestFlight; TestFlight sends Apple your email address so it can send the invitation. The email is stored by Apple (iCloud Mail). We keep it until the test ends, then delete it unless you ask us to keep you posted, and we delete it sooner if you ask. We don't add you to a mailing list or send marketing email unless you ask us to.
Changes to this policy
When we change this policy, we'll update the date at the top. If a change affects what we collect or who gets it, we'll also tell you in the app before it applies, and the app will ask again before sending anything to a new company.
Contact
support@cinazu.com · Lil Dog Productions, LLC, Los Angeles, California, United States