Shorty

Privacy Policy

Last updated: 2 April 2025

1. Introduction

Duration AI Ltd (“Duration”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and related services (collectively, the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, you must not use the Service.

2. Data Controller

Duration AI Ltd is the data controller responsible for your personal data under applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”).

If you have questions about this Policy or our data practices, contact:

  • Email: support@duration.ai
  • Address: 128 City Road, London, EC1V 2NX

3. Information We Collect

We collect and process the following types of information:

3.1. Information You Provide

  • Account information: name and email address.
  • Payment information: processed by Stripe (we do not store full card data).
  • User content: files, videos, documents, or links you upload.
  • Face and photo data: selfie photographs you voluntarily upload when using our AI character generation features (e.g. Fruit Islander). See Section 3.4 for full details.
  • Communications: support requests, survey responses, and feedback.

3.2. Information Collected Automatically

  • Usage data: log files, pages visited, IP, browser/device details, access times.
  • Cookies and similar technologies: functionality, security, analytics.

3.3. Information from Third Parties

  • Third-party login (e.g., Google): basic profile data (name, email).
  • Payment processing by Stripe (may act as independent controller).

3.4. Face and Photo Data

When you use our AI character generation features (such as Fruit Islander), you may voluntarily upload selfie photographs containing your face. Photographs are sent to third-party AI services which analyse the photo and use it as a reference to produce representative cartoon character artwork. No information from this analysis is stored — it is used transiently during the generation process only.

We do not extract or store facial geometry, biometric identifiers, face maps, or any data that could be used to uniquely identify you through facial recognition. The photographs are used exclusively to generate your requested artwork and are not used for authentication or identification purposes.

4. How We Use Your Information

We process personal data for the following purposes:

  • Provide and operate the Service (account, content processing, features), including processing uploaded photographs to generate AI artwork as described in Section 3.4.
  • Personalize and improve the Service (adaptive programs, algorithms).
  • Communicate updates, security alerts, and support responses.
  • Manage payments and subscriptions.
  • Comply with legal obligations and enforce our Terms.
  • R&D using anonymised/aggregated data to improve AI models.

5. Legal Basis for Processing

We rely on the following lawful bases:

  • Performance of a contract
  • Legitimate interests (service improvement, security, communications)
  • Consent (where required)
  • Legal obligation

6. How We Share Your Information

We do not sell personal data. We may share data in the following cases:

  • Service providers (hosting, analytics, support, payments), including AI service providers that process uploaded photographs on our behalf (see Section 6.1)
  • Legal compliance (lawful requests, court orders)
  • Business transfers (merger, acquisition, sale of assets)

6.1. Third-Party AI Service Providers

When you use our AI character generation features, your uploaded photographs are shared with third-party service providers solely to generate your requested artwork:

  • AI image generation providers — receive your uploaded photographs to generate stylised cartoon images. Uploaded photographs are temporarily stored for up to 7 days to facilitate generation, after which they are permanently deleted.
  • AI analysis providers — receive your uploaded photographs to analyse and inform the artwork generation. Photos are processed transiently and are not retained after analysis is complete.

We do not sell or share your photographs or face data with any other third parties for advertising, marketing, or any purpose unrelated to providing the Service.

7. Data Retention

7.1. We retain personal data only as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, accounting, or reporting requirements.

7.2. User-generated content may be retained while your account remains active. If you delete your account, we will delete or anonymise your data within a reasonable period, except where retention is required by law.

7.3. Face and photo data: We do not store your original uploaded photographs on our servers. Photographs are temporarily hosted by our third-party AI service providers for up to 7 days to facilitate artwork generation, after which they are permanently deleted from their systems. No information derived from the analysis of your photographs is stored. Generated artwork images are retained while your account is active and are deleted upon account deletion.

7.4. Aggregated or anonymised data may be retained indefinitely for research and analytical purposes.

8. Data Security

8.1. We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

8.2. Despite our efforts, no system is completely secure. You acknowledge that you provide data at your own risk.

8.3. You are responsible for maintaining the security of your credentials.

9. Cookies and Tracking Technologies

9.1. We use cookies and similar technologies to maintain session functionality, remember preferences, and measure performance and analytics.

9.2. You can control or delete cookies through your browser settings. Disabling cookies may affect certain features of the Service.

10. International Data Transfers

10.1. Your personal data may be transferred and processed outside the United Kingdom, including to countries that do not provide the same level of data protection.

10.2. Where such transfers occur, we implement appropriate safeguards such as standard contractual clauses approved by the ICO.

11. Your Rights

Under the UK GDPR, you may have rights to access, correction, erasure (“right to be forgotten”), restriction, portability, objection, and withdrawal of consent where applicable.

To exercise rights, contact support@duration.ai. We may need to verify your identity before processing requests.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with data, contact us to request deletion.

Certain features within the Service are restricted to users aged 18 and over. Where applicable, users may be asked to confirm their age before accessing such features.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the policy was most recently revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact

Duration AI Ltd

128 City Road, London, EC1V 2NX

Email: support@duration.ai

You may also lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk if you believe your rights have been violated.