Skip to main content

Privacy Policy

What we collect when you make a video, including your face photo, and how we protect it

Last updated: 28 October 2026

Kairo Studio Limited (“we”) operates Polar Bear 2026 (polarbear2026.app). This policy explains what we collect and how we use it, in line with the New Zealand Privacy Act 2020.

The short version

  • Your photo is used only to make your video.
  • Photos are automatically deleted within 24 hours.
  • Your photos and videos are never used to train AI models and never sold.
  • Photos are processed by a third-party AI video provider on our behalf.
  • We process the face in your photo only with your explicit consent.

What we collect

  • Your photo and the template and caption you choose.
  • Your email address, to send your video link and receipt.
  • Payment details, handled by Stripe Checkout. We receive only limited information such as the last four digits of your card and the payment status.
  • Basic usage data, such as pages visited and device type, using privacy-friendly analytics without advertising cookies.

Your face photo

The photo you upload will usually show a face. Some laws, such as the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI), treat information derived from a face as biometric information. We handle face photos as follows:

  • Consent first. Before you upload, we ask for your explicit consent to process the face in your photo for the single purpose of making your video. You also confirm that every other adult shown has consented. We do not process the photo without this consent.
  • One purpose. We and our AI video provider process the photo only to generate the video you ordered and to check it against our photo rules.
  • No identification. We do not use your photo to recognise or identify anyone, and we do not create or keep face templates, faceprints or similar identifiers from it.
  • Never sold. We never sell, lease, trade or otherwise profit from your photo or any information derived from it.
  • Short retention. The photo is deleted automatically within 24 hours of upload, whether or not the video succeeds.

You can withdraw consent at any time before your video is generated by not completing the order, or afterwards by asking us to delete your data.

How we use it

To generate and deliver your video, process payment and refunds, check uploads against our photo rules, provide support, and prevent fraud or abuse.

Who we share it with

  • fal.ai, our AI video provider, processes your photo to create the video. It is not permitted to use it for any other purpose.
  • Stripe for payments.
  • Cloudflare for hosting, file storage and sending emails.
  • Resend for our newsletter, only if you opt in.
  • Google, if you sign in with Google.
  • Discord for internal order notifications, which include the buyer’s name.

Some providers are located outside New Zealand (for example in the United States). We choose providers that protect your information to a standard comparable to New Zealand law.

How long we keep it

  • Uploaded photos: deleted automatically within 24 hours.
  • Generated videos: deleted 7 days after delivery. Download your video before then.
  • Order records: kept as long as required for tax and accounting law.

Age

The Service is only for adults aged 18 and over. If you believe someone under 18 has used the Service, contact us and we will delete their data.

Your rights

You can ask to access, correct or delete your personal information at any time by emailing support@polarbear2026.app. You can also complain to the NZ Office of the Privacy Commissioner.

Contact

Kairo Studio Limited · New Zealand · support@polarbear2026.app