Goka AI — Privacy Policy

Effective 7 October 2026

This policy explains what personal data the Goka AI app (“Goka”, “we”) collects, why, who processes it for us, and the choices you have. Goka is operated by Umar Sesay (Belgium). Questions: hello@aus-labs.com.

1. What we collect

Account data

If you create an account: your email address, the name and profile photo shared by Sign in with Apple or Google (if any), and your sign-in identifiers.
Profile details you add: username, bio and profile picture.
If you use Goka without an account (“guest”), we create an anonymous ID for your device so we can run your creations and keep your free credits.

Content you give us

Photos you upload to create a video or image.
Prompts you write, and the effects, styles and aspect ratios you choose.
The videos and images Goka generates for you, and the folders you organise them in.

Purchases and credits

Your credit balance, subscription status and the products you bought.
Payments are handled by Apple (App Store) or Google (Google Play). We never see or store your card details. RevenueCat tells us which product was bought so we can add your credits.

Referrals

Your referral code and which accounts joined with it.

Device data

A push notification token, if you allow notifications, so we can tell you when a creation is ready.
Basic technical data our service providers receive when the app talks to them (such as IP address and device type).

Usage data

How you use the app: screens you open, templates you try, when creations start, finish or fail, and purchases. This is linked to your anonymous user ID only — never your email, name, photos or prompts. You can switch it off at any time in Settings › Share usage analytics.

We do not use advertising trackers, and we do not sell your personal data.

To provide Goka: create your videos and images, store them in your Library, keep your credits and purchases, and sync your account across devices (performance of our contract with you).
To process purchases, restores and refunds (contract; legal obligations).
To send “your creation is ready” notifications (your consent — you can turn them off in your device settings at any time).
To keep the service secure and prevent abuse, such as daily creation limits and stopping free-credit farming (our legitimate interests).
To answer you when you contact us (legitimate interests).
To understand how Goka is used and improve it, using usage data you can switch off in Settings (our legitimate interests).

3. Who processes your data for us

We share data only with providers that help us run Goka, and only what they need:

Supabase — hosting, database, file storage and sign-in. Servers in the United States.
OpenAI — receives the photos and prompts needed to create or edit images.
Replicate — receives the images and videos needed to animate them and add sound.
RevenueCat — manages purchases and subscriptions.
Apple and Google — sign-in, payments and push notifications.
Expo — delivers push notifications.
Resend — sends account emails such as verification codes.
PostHog — product analytics (usage data as described above), hosted in the United States.

These providers process data on our behalf under their own terms and data protection commitments. Some are located outside the European Economic Area; where that happens, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.

4. How long we keep it

Account, profile, purchases and credits: for as long as your account exists.
Your uploads and creations: until you delete them, or delete your account.
Guests: a finished video or image is removed from our servers once you save it to your device.
Purchase records may be kept longer where the law requires it (for example tax rules).

Deleting your account (Settings › Profile › Delete My Account) permanently removes your profile, uploads, creations, folders and credits from our systems.

5. Your rights

If you are in the EEA, the UK or a similar jurisdiction, you can ask us to access, correct, delete or export your data, or to restrict or object to how we use it. Many of these you can do yourself in the app (edit your profile, delete creations, delete your account). For anything else, email hello@aus-labs.com.

You can also complain to your data protection authority. In Belgium that is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.

6. Photos of other people

Only upload photos you have the right to use. If a photo shows someone else, you must have their permission. See our Terms of Use for the full rules.

7. Children

Goka is not intended for children under 13. If you are under the age of digital consent in your country, you may only use Goka with the permission of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.

8. Security

Your uploads and creations are stored privately and are only accessible to your account. Connections are encrypted. No system is perfectly secure, but we work to protect your data and limit who can access it.

9. Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app.

10. Contact

Umar Sesay (Belgium) · hello@aus-labs.com