Last updated: June 2026
This Privacy Policy describes how BOLD YAZILIM TASARIM VE TICARET LIMITED SIRKETI ("Bold Yazilim", "We", "Us", or "Our") protects your privacy when you use Bold Yazilim (the "Bold Yazilim Service") which includes the Web site located at boldyazilim.com (the "Site") and all Bold Yazilim mobile phone applications (each, the "App").
PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE BOLD YAZILIM SERVICE, YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS DESCRIBED HEREIN AND ALL TERMS AND CONDITIONS INCORPORATED BY REFERENCE. THIS PRIVACY POLICY IS PART OF AND INCORPORATED INTO BOLD YAZILIM'S TERMS OF USE ("Terms of Use"). IF YOU DO NOT AGREE TO ALL OF THE TERMS AND CONDITIONS SET FORTH BELOW, YOU MAY NOT USE THE BOLD YAZILIM SERVICE.
This Privacy Policy applies to information (including personal information) collected through the Bold Yazilim Service.
If you decide not to read this entire Privacy Policy, we want you to walk away with a few key points about our privacy practices:
When you use the App, we may collect information about you, including:
Images and videos you provide when you use the App—whether via your camera or camera roll (if you have granted us permission to access them), the in-app internet search functionality, or your social media account (if you choose to connect it). We obtain only the specific images and videos you choose to modify in the App; we do not collect or access your entire camera roll—even if you grant the App access to it. Each image or video you upload via the App is encrypted, and the encryption key is stored locally on your device. This means that the only device that can view the file is the one from which it was originally uploaded. While we do not require or request any metadata attached to the images or videos you upload, metadata (e.g., geotags) may be associated with your media by default. We take steps to remove any metadata that may be present in the files you provide.
App usage information, such as information about how you use the App and interact with us, including your preferred language, the date and time when you first installed the App and the date and time you last used the App.
Purchase history, if you choose to purchase an App subscription, such as confirmation that you are a paid subscriber to the App.
Certain features within the App may require you to be logged in. If you choose not to log in, you can still use some parts of the App, but your experience may be limited and you may not have access to all features. If you log in using your Apple ID, we will receive your Apple ID and may also receive the email address associated with your Apple ID, depending on your Apple settings (e.g., if you use Apple's "Hide My Email" feature, Apple may provide a private email relay service instead). This information is used to create and manage your account within the App and to authenticate your login.
Social media information, if you choose to login to the App via a third-party platform or social media network (for example, Facebook), or otherwise connect your account on the third-party platform or network to the App. We may collect information from that platform or network, such as your social media alias, first and last name, number of "friends" on the social media platform and, if depending on your Facebook or other network settings, a list of your friends or connections (though we do not use or store this information). Our collection and processing of the information we obtain from social media platforms is governed by the requirements these social media platforms impose on us in their relevant terms and conditions.
Device data, such as your computer and mobile device operating system type and version number, manufacturer and model, device ID, push tokens, Google Advertising ID, Apple ID for Advertising, browser type, screen resolution, IP address (and the associated country in which you are located), the website you visited before visiting our Site; and other information about the device you are using to visit the App.
Online activity data, such as information about your use of and actions on the App and the Sites, including pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access. Our service providers and certain third parties (e.g., online advertising networks and their clients) also may collect this type of information over time and across third-party websites and mobile applications. This information may be collected on our Site using cookies, browser web storage (also known as locally stored objects, or "LSOs"), web beacons, and similar technologies. We may collect this information directly or through our use of third-party software development kits ("SDKs"). SDKs may enable third parties to collect information directly from our App.
We do not use the images or videos you provide when you use the App for any reason other than to provide you with the AI-Photo-Video generation functionality of the App. We may use information other than images or videos you provide for the following purposes:
This section explains how Lundo collects, uses, discloses, shares, and retains face data.
When you choose to create an AI photo or video, Lundo processes the facial imagery contained in the photos and videos that you explicitly select and upload. Face detection performed inside the app (to confirm a usable face is present before generation) runs entirely on your device using Apple's Vision framework and is not collected, stored, or transmitted.
Face data is used solely to generate the AI photo and video output that you request (for example, art styles, animations, and avatar effects applied to your own media).
Lundo does not use face data to identify, recognize, or authenticate any individual. We do not create, derive, or store any biometric identifiers, faceprints, or facial-recognition templates, or any data that could be used to uniquely identify a person. Face data is never used for advertising, profiling, or to train AI models.
Face data is sent off your device for cloud generation only after you explicitly provide consent within the app (the "AI Data Processing" consent screen) and submit a generation request.
To generate the output you request, the facial imagery in your uploaded media is processed by our cloud infrastructure providers, Amazon Web Services (AWS) and Google Cloud Platform (GCP), and by our third-party AI generation providers, used solely to produce the requested output: Google, OpenAI, Replicate, fal.ai, Higgsfield, ByteDance, and Kling AI. We do not sell face data, and we do not share it for any purpose other than providing the generation feature you request.
We do not retain face data or any image(s), video(s) you upload after generation of AI Photos. After successful generation, the media you upload and the face data processed to generate AI photos are immediately deleted from our servers permanently. Note that this process may take 4 (four) days. Third-party AI providers retain data only in accordance with their own policies for the limited time needed to process your request. The AI outputs you generate are stored so that you can access them in the App, and you can delete them at any time or by deleting your account.
We do not disclose user images or videos to third parties, except where necessary to provide the AI photo and video generation features of the App, including uploading encrypted images to our cloud infrastructure providers, Google Cloud Platform and Amazon Web Services, and securely transmitting user-provided images to trusted third-party AI service providers solely for the purpose of processing the requested AI output.
We may share your non-image and non-video information in the following circumstances:
In this section, we describe the rights and choices available to all users. Users who are located within European can find additional information about their rights below.
The App may contain links to other websites, mobile applications, and other online services operated by third parties. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.
We use commercially reasonable security practices to help keep the information collected through the App secure and take reasonable steps to verify your identity before granting you access to your account (if you have an account with us). However, Bold Yazilim cannot ensure the security of any information you transmit to the Bold Yazilim Service or guarantee that information on the App may not be accessed, disclosed, altered, or destroyed. You are responsible for maintaining the confidentiality of your login information and device identifiers.
We configure Google Cloud Platform and Amazon Web Services to permanently delete images/videos you provide, face data and the information associated with the media immediately after Video generation is completed. The deletion from our servers may take up to 4 (four) days.
Your AI Photos you generated are stored on our servers (hosted by AWS) and remain accessible to you within the App at any time, from any device on which you are logged in, until you choose to:
Important Note: Simply uninstalling the App from your device does not automatically delete your account or any associated AI Photos.
With respect to non-image/video information that we may collect, we will retain such information in a personally identifiable format only for as long as necessary to fulfill the purposes we have set out in this Privacy Policy. You may also ask that we delete your information using the "Delete My Account" or by contacting us.
Third-party AI service providers used by the App retain and process user-provided data in accordance with their respective privacy policies and operational requirements. OpenAI may retain API inputs and outputs for up to 30 days for abuse prevention and service integrity purposes and does not use such data for model training by default. Replicate generally deletes data processed via its API shortly after execution, often within approximately one hour, unless data is explicitly saved through its platform. fal.ai processes data submitted for AI tasks and may retain limited data temporarily as necessary to operate and maintain its services. Higgsfield states in its Cloud API documentation that generated output files may be retained for up to seven (7) days and may be removed from its servers at any time after this retention period. Kling AI retains user-provided data only as necessary to deliver requested AI services or to comply with applicable legal and regulatory requirements. Google, including Google Cloud Platform services, processes and retains data in accordance with its applicable privacy policies and contractual obligations for service operation, security, and compliance purposes. ByteDance processes user-provided data in accordance with its privacy policy and retains such data only as necessary to provide services, ensure platform safety, and comply with applicable legal and regulatory requirements.
We store the information we collect in connection with the App on Amazon Web Services and Google Cloud Platform. For Amazon Web Services, we may specify the US as the data storage location; for Google Cloud Platform, we may specify data storage at an available location closest to you when you use the App. Your personal information may be accessed by our service providers in other locations outside of your state, province, or country. Your device ID (and general App usage information) may also be accessed by the Company's technical support team in other locations outside of your state, province, or country. Where applicable, we rely on appropriate transfer mechanisms for transfers of data from the EU, UK and Switzerland.
The App is not directed at children under the age of 13, and our Terms of Use do not allow children under 13 years of age to use the App. If we learn that we have collected personal information of a child under the age of 13, we will delete it. We encourage parents with concerns to contact us.
This section contains disclosures required by the California Consumer Privacy Act ("CCPA") and applies only to "personal information" that is subject to the CCPA.
THE BOLD YAZILIM SERVICES THAT FEATURE ADVERTISING ARE NOT MEANT FOR CALIFORNIA-LOCATED PEOPLE UNDER 16. We do not knowingly collect information for use in connection with advertising from California children under the age of 16. If we receive a verifiable notice through support@boldyazilim.com that a California minor under the age of 16 has signed up for an advertising-based Bold Yazilim Services account and provided us with personal information, we will take measures to delete it as soon as possible.
We collect the following categories of personal information about California consumers from social networks, service providers and directly from California consumers and have disclosed this information in the past 12 months to third parties for business purposes: personal and online identifiers (i.e., username, email address, IP address, or unique online identifiers), internet or other electronic network activity information (i.e., advertisement interaction), and geolocation information, as well as other information about California consumers that is linked to these categories of personal information. We also draw inferences from this information about your predicted characteristics and preferences. Business Purposes: our business purposes for use of California consumer personal information include the purposes described in this Privacy Policy, including, without limitation, marketing; auditing related to our interactions with you; legal compliance; detecting and protecting against security incidents, fraud, and illegal activity; debugging; performing services (by us or our service providers), such as account servicing and analytics; research for technological improvement; internal operations; activities to maintain and improve our services; and other one-time uses. We disclose the categories of personal information designated above to the following categories of third parties for business purposes: service providers; government entities; operating systems and platforms; and social networks.
In the event a California consumer has a Bold Yazilim Service subscription that features advertisements, we collect and disclose the following information for the purpose of delivering relevant advertising: personal and online identifiers such as IP address and device identifiers, internet or other electronic network activity information (i.e., advertisement interaction), geolocation information, as well as other information about California consumers that is linked to these categories of personal information. We also draw inferences from this information about your predicted characteristics and preferences. We disclose the categories of personal information designated above to the following categories of advertising-related third parties: advertising/marketing companies; advertising networks; and social networks.
California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below: please email support@boldyazilim.com or contact us using this address: BOLD YAZILIM TASARIM VE TICARET LIMITED SIRKETI, Sahrayı Cedit Mah., Batman Sk., No:30 Kapı no:25 34734 Kadıköy/İstanbul, Türkiye.
Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. In the event you designate an authorized agent to make a CCPA request on your behalf, we will require verification of identity and authorization.
We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Privacy Policy and posting it on the App. Any modifications will be effective upon our posting the new terms and/or upon implementation of the new changes. Your continued use of the App after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.
Please direct any questions or comments about this Policy or privacy practices to support@boldyazilim.com.
You may also write to us via postal mail at:
BOLD YAZILIM TASARIM VE TICARET LIMITED SIRKETI
Sahrayı Cedit Mah., Batman Sk., No:30 Kapı no:25
34734 Kadıköy/İstanbul, Türkiye
support@boldyazilim.com