DinoDub Privacy Policy

Who uses the service

DinoDub is intended for people aged 13 and over, initially in Saudi Arabia. A parent or legal guardian should be involved in the use and optional disclosures of users aged 13–17; adults may manage their own accounts where legally permitted. Please avoid sharing unnecessary identifying details.

The App version revised on 17 October 2026 no longer requests an Apple age range or gates sharing, publishing, comments, direct messages or external links by age, parental permissions or a PIN. The intended audience does not mean a user’s age has been verified. Account authentication, system microphone and notification permissions, media ownership checks and user interaction settings remain. This change does not mean guardian verification has been completed.

Information we process

Account and profile information includes login email or authorized Apple/Google identifiers, user ID, nickname, chosen avatar, and optional profile contact email, phone country/region and phone number. Contact phone numbers are not verified or used for login. A contact email is not verified and does not prove account ownership or guardianship. Browser quick registration currently requires a nickname and email.

Available profile features may also store birthday, gender, school, manually entered region and biography; learning features store grade, level, learning goals, practice history, progress and rewards. Please avoid unnecessary identifying details.

Media includes selected images, raw voice clips and completed dubbing videos. Interaction information includes comments, likes, favorites, follows, messages, reports, feedback and support correspondence when those features are used.

Operational information includes app-scoped device identifier digests, browser identifiers, session credentials, platform, push identifiers where enabled, and service/security logs. Access logs can contain IP addresses and browser details. Landing-page events include visits, exposure, registration, recording duration, dubbing, sharing, copying, recommendations and visible time. Hashing an identifier does not make it anonymous.

Why information is used

We use necessary information to provide accounts, learning, voice recording and media composition, save works, operate enabled social features, respond to requests, diagnose failures and prevent abuse. Optional sharing is separate from basic practice. Applicable processing grounds and required consent depend on the purpose and user’s circumstances.

We do not sell personal information or offer cross-service targeted advertising. New processing purposes, including any reuse for model training, require an updated explanation and any legally required permission; existing recordings are not treated as blanket permission for new uses.

Children and guardian choices

Parents may request access, correction, deletion or withdrawal of optional recording, publication or interaction permissions. Where law requires guardian authorization, an appropriate guardian verification and consent process is needed before that processing.

The revised App removes parental permission switches and the PIN page; it does not verify legal guardianship. Historical account settings are not used to authorize features in this version. Native and browser releases may differ. Publication of this policy does not establish that the service is ready for an unrestricted children’s release.

Sharing and service providers

A publicly shared work can show a nickname, avatar and voice/video. People with its link may save or forward it; messaging services may cache previews. User-initiated sharing sends the chosen link or media to that service, rather than giving DinoDub access to your address book.

Services used can include AWS hosting, Alibaba Cloud OSS and media CDNs, Apple/Google sign-in, Gmail support, and Expo/APNs/Google push where configured. Speech recognition or assessment features may send the relevant audio to the configured processing service when used. Disclosures are limited to the relevant function or a valid legal obligation. Contact us for provider and processing details relevant to your request.

Where information is processed

The current backend is hosted in the AWS Singapore region. Storage/CDN, login, email, notification providers and operational access can involve other countries, including access from the operator’s location in China. We do not promise that information stays only in Saudi Arabia or Singapore. Applicable cross-border safeguards and provider arrangements must be assessed; accepting this policy does not by itself supply those safeguards.

Retention

Account, profile, learning and saved-work information is kept while needed to provide the chosen service, subject to deletion requests and applicable legal duties. Raw clips and unused uploads are processed for recording, synthesis, retries and support. We seek to remove information when no longer necessary; there is not yet a verified automatic time limit for all server media, analytics records, logs or backups.

For a deletion request we identify the relevant records and controlled media, remove or restrict them as appropriate, and explain completion, remaining work and any justified retention. A successful account-deletion message is not proof that every file or backup has already been destroyed. Necessary anti-abuse digests and registration counts may be retained separately; deleting an account does not restore used registration allowances. This is not a reason to keep unrelated personal information indefinitely.

Media links and deletion limits

Some existing media uses publicly reachable OSS/CDN links. Hiding a work or deleting its database record does not currently automatically revoke every media URL. Please contact us to request removal of controlled media and caches; cloud cleanup and backup handling may require additional work. We cannot remotely erase copies already saved by independent recipients, but this does not remove our responsibility for copies under our or our processors’ control.

Browser storage and permissions

Browser storage keeps language, theme, visitor identifiers and login sessions. Existing H5 sessions do not have a fixed expiry. Clearing storage does not delete the server account and may remove the credential used to restore it. Do not share login tokens.

Microphone and photo access are requested for the corresponding action. You can manage OS permissions. Existing public landing-page statistics do not yet have a separate optional-analytics consent control; contact us about an objection or withdrawal request. We do not describe those statistics as anonymous or as already consent-gated.

Your rights and requests

Contact dinodub2026@gmail.com for access, copies, correction, deletion, withdrawal of consent-based processing or a privacy complaint. We may require proportionate account and guardian verification; an unverified email or nickname alone is insufficient. Do not send passwords, PINs, verification codes, session tokens or unsolicited complete identity documents.

We will review requests promptly, explain the verification needed, and inform you of the outcome and any applicable extension or retained records. You may also contact the competent data-protection authority, including SDAIA for applicable Saudi matters.

Security and changes

We use HTTPS, authentication and access controls. No system is risk-free, and we do not claim all media is private or all deletion is automatic. Material changes will be shown with an updated date, and new consent will be obtained where required rather than inferred from continued use. Arabic, English and Chinese versions are intended to communicate the same policy.