Privacy policy.
**Last updated:** July 11, 2026
Applies to: 4OS, AIMediaGenerator, the 4OS website, mobile applications, web applications, APIs, creator tools, and related services.
This Privacy Policy explains how 4os LLC does business as 4OS and AIMediaGenerator (collectively, “4OS,” “AIMediaGenerator,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information.
We operate from the United States. Our primary website is 4os.io. Privacy, security, copyright, legal, and support questions may be sent to admin@4os.io or submitted through https://4os.io/help.
We do not currently publish a postal address or offer a privacy phone line. Legal notices may be sent to admin@4os.io unless a separate written agreement requires another method.
## 1. Services covered by this Policy
This Policy applies when you use:
- the AIMediaGenerator mobile application;
- the AIMediaGenerator and 4OS web applications;
- 4OS websites, including pages hosted at 4os.io;
- APIs, account systems, creator tools, media-generation workflows, and integrations;
- customer support, abuse reporting, privacy requests, and legal request channels; and
- any other service that links to this Policy.
This Policy does not apply to third-party services that have their own privacy policies, such as Apple, Google, payment processors, connected applications, or AI model providers when they act independently.
## 2. Age restriction
The Service is intended for users who are at least 18 years old. We do not knowingly allow children under 13 to create accounts or submit personal information. If you believe a child has provided personal information to us, contact admin@4os.io and we will take appropriate steps.
## 3. Personal information we collect
The information we collect depends on the features you use, your device, and your settings.
### 3.1 Account and authentication information
We may collect:
- name, display name, username, email address, profile image, and account preferences;
- authentication identifiers, sign-in tokens, and account IDs;
- information received from Sign in with Apple and Google Sign-In, depending on your chosen sign-in method and settings;
- workspace, team, role, permissions, subscription status, and plan information; and
- communications preferences and support history.
### 3.2 User Content and AI-generation data
To provide the Service, we process content you submit or create, including:
- prompts, instructions, negative prompts, captions, scripts, style selections, model settings, and generation parameters;
- uploaded images, video, audio, voice, documents, project files, brand assets, logos, photographs, and other media;
- edits, masks, crops, selections, annotations, and revision history;
- generated outputs such as images, videos, audio, text, thumbnails, metadata, and project files;
- file names, technical metadata, content provenance, and usage metadata; and
- public links, shared projects, reports, comments, or other content you choose to publish or share.
Uploaded media may contain information about you or other people. You are responsible for having the rights, permissions, consent, and lawful basis needed to upload and use that content.
Unless a feature clearly says otherwise, we do not intentionally derive biometric identifiers from uploaded images, audio, or video for the purpose of uniquely identifying a person.
### 3.3 Device, usage, analytics, and diagnostics information
We may collect:
- IP address and approximate location derived from IP address;
- device type, operating system, browser type, language, region, time zone, and app version;
- pages, screens, features, buttons, projects, and settings you use;
- generation events, selected model or tool, processing time, failures, credits, limits, and usage statistics;
- security logs, audit logs, error events, crash reports, performance metrics, and reliability diagnostics;
- cookies, local storage, session identifiers, and similar technologies used to operate the Service; and
- referral information, traffic source, and campaign attribution.
We use Google for analytics and crash reporting where enabled. We do not currently use advertising identifiers, precise GPS location, address-book data, health data, or ad-targeting SDKs by default.
### 3.4 Billing and transaction information
If you purchase a subscription, credits, or paid feature, we may receive:
- subscription tier, purchase date, renewal date, cancellation status, credit balance, and usage entitlements;
- Apple App Store transaction identifiers and receipts for in-app purchases;
- web billing status, invoice information, taxes, country or region, and payment status; and
- limited payment metadata from payment processors, such as card brand and last four digits, if made available to us.
Apple and web payment processors process payment credentials under their own policies. We do not intentionally store full payment-card numbers.
### 3.5 Support, privacy, abuse, and legal communications
We collect information you provide when you contact us, submit a privacy request, report abuse, appeal a moderation action, submit a copyright complaint, or request support. This may include contact details, message content, attachments, account identifiers, project links, diagnostic data, and related correspondence.
## 4. How we use personal information
We use personal information to:
- create and manage accounts;
- authenticate users through Apple and Google;
- provide, store, synchronize, and operate the Service;
- process prompts, uploads, settings, and project files;
- generate, edit, preview, and export AI media;
- provide subscriptions, credits, account management, and billing support;
- deliver support, troubleshoot issues, and respond to requests;
- send service, security, legal, billing, and policy messages;
- send optional product updates or marketing where allowed;
- monitor reliability, performance, usage, and product quality;
- prevent abuse, fraud, security incidents, prohibited content, and misuse;
- enforce the Terms of Service and Acceptable Use Policy;
- comply with legal obligations and respond to lawful requests; and
- protect the rights, safety, and property of users, 4OS, and the public.
Where applicable privacy law requires a legal basis, our bases may include performance of a contract, legitimate interests, consent, compliance with law, and protection of rights and safety.
## 5. AI processing and model providers
AIMediaGenerator uses automated systems and third-party AI services to transform Inputs into Outputs. To perform your request, we may transmit relevant prompts, uploads, project settings, generated outputs, and technical metadata to Google and KlingAI or to other providers disclosed in an updated notice.
These providers may process User Content to deliver generation, editing, safety, moderation, abuse-prevention, reliability, and technical support functions. Processing may occur in the United States or other countries where our providers operate.
### 5.1 Model training
Our current product commitment is:
- 4OS does not use private prompts, private uploads, or private generated outputs to train general-purpose AI models unless you affirmatively opt in.
- We do not currently offer a training opt-in control because private User Content is not used for training by default.
- We may use de-identified, aggregated, or operational data to measure reliability, debug errors, protect the Service, and improve user experience.
- We may use public, shared, reported, or policy-violating content to enforce our terms, protect safety, comply with law, and improve moderation systems.
If we later introduce an optional training or public-gallery improvement program, we will provide a separate notice and control before using eligible private User Content for that purpose.
### 5.2 Human review
We may perform limited human review of User Content when necessary to provide support, investigate abuse, address safety or policy issues, comply with law, fix technical errors, protect rights, or respond to your request. We use access controls and internal limits intended to restrict review to appropriate personnel and service providers.
## 6. How we disclose personal information
We may disclose personal information to:
- Google, for hosting, storage, analytics, crash reporting, authentication, infrastructure, security, and AI-related services;
- KlingAI, for AI media generation and related processing;
- Apple, for App Store distribution, in-app purchases, receipts, platform services, and Sign in with Apple;
- Google Sign-In, if you choose Google authentication;
- payment processors and tax providers, if web billing is enabled;
- customer-support, security, and operations vendors;
- professional advisers such as lawyers, accountants, insurers, and auditors;
- law enforcement, regulators, courts, or other parties when required by law or necessary to protect rights and safety;
- business transaction parties in connection with a merger, financing, acquisition, reorganization, or sale; and
- other users or the public when you intentionally share, publish, collaborate, or create public links.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising under the current product design. We do not use advertising SDKs by default.
## 7. Cookies and similar technologies
We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, protect accounts, maintain sessions, measure performance, and understand usage. Google analytics services may use cookies or similar technologies where enabled.
We do not currently provide a separate cookie-settings dashboard. You can manage browser cookies through your browser settings and app permissions through your device settings. In jurisdictions where consent is required for nonessential analytics, nonessential analytics should be disabled until consent is obtained.
More detail is available in our Cookie Policy at https://4os.io/legal/cookie-policy.html and Privacy Choices page at https://4os.io/legal/privacy-choices.html.
## 8. Data retention
We keep personal information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or allowed by law.
Current operational retention expectations are:
| Category | Typical retention |
|---|---:|
| Account profile and authentication records | Until account deletion, plus a reasonable backup and legal-hold period |
| Projects, prompts, uploads, and generated outputs | Until you delete the project or account, unless retained for safety, legal, billing, backup, or dispute reasons |
| Deleted project data in backups | Typically up to 90 days |
| Security, audit, and abuse-prevention logs | Typically 30 to 180 days, longer if needed for investigations or security |
| Support and legal communications | Up to 3 years, or longer if needed for legal rights or obligations |
| Billing, tax, and transaction records | Up to 7 years or the period required by accounting and tax laws |
| Aggregated or de-identified analytics | May be retained longer if it no longer identifies a user |
Account deletion is available in the app through Settings > Delete Account. Project deletion is available through Project > Delete. Some information may remain in backups, transaction records, security logs, abuse records, or legal holds where permitted by law.
## 9. Privacy choices and rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or appeal decisions about personal information. You may submit a request through https://4os.io/help or email admin@4os.io.
You can also:
- delete your account through Settings > Delete Account;
- delete projects through Project > Delete;
- manage billing through https://4os.io/settings/billing;
- manage help and communication preferences through https://4os.io/settings/help;
- unsubscribe from marketing emails using the unsubscribe link in those emails; and
- change camera, microphone, photo-library, notification, and file permissions through device settings.
If we deny a privacy request, you may appeal by contacting admin@4os.io and referencing the original request.
## 10. U.S. state privacy notices
For residents of California and other U.S. states with privacy laws, this section describes additional disclosures.
| Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email, account ID, IP address, device identifiers | Hosting, authentication, analytics, support, security, payment, and legal providers |
| Commercial information | Subscriptions, purchases, receipts, credits, billing status | Apple, payment processors, tax/accounting providers |
| Internet or network activity | App usage, feature interactions, pages, logs, diagnostics | Google and operations providers |
| Geolocation | Approximate location from IP address | Hosting, analytics, security providers |
| User-generated content | Prompts, uploads, projects, generated outputs, support attachments | Google, KlingAI, storage, support, safety providers as needed |
| Inferences | Preferences derived from settings and usage | Internal product analytics and personalization systems |
We do not sell personal information or share it for cross-context behavioral advertising under the current product design. Where legally required, we honor recognized opt-out preference signals such as Global Privacy Control to the extent applicable to our online services.
## 11. International transfers
We are based in the United States and use providers that may process information in the United States and other countries. If you access the Service from outside the United States, your information may be transferred to countries that may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards for international transfers.
We have not appointed an EEA representative or UK representative at this time. Privacy inquiries from EEA or UK users may be sent to admin@4os.io.
## 12. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure. You are responsible for maintaining the confidentiality of your credentials and for using account-security features provided by the Service.
Report security concerns to admin@4os.io.
## 13. Third-party links and services
The Service may link to third-party websites, platforms, AI tools, marketplaces, and integrations. We are not responsible for the privacy practices of third parties when they act independently. Review their policies before using those services.
## 14. Changes to this Policy
We may update this Policy from time to time. If changes are material, we will provide notice through the Service, by email, or by another reasonable method. The updated Policy will apply after the effective date stated on the page.
## 15. Contact us
4os LLC
Doing business as 4OS and AIMediaGenerator
Primary domain: 4os.io
Privacy, support, security, abuse, copyright, legal, and appeal contact: admin@4os.io
Privacy request page: https://4os.io/help
Privacy choices: https://4os.io/legal/privacy-choices.html
Phone: No privacy phone line is currently offered.
Postal address: No public postal address provided; legal notices may be sent to admin@4os.io unless a separate written agreement requires another method.