简要说明：Tomar 使用账户信息、您提交的内容以及必要的技术数据来生成、保存和分享视频。我们不出售个人信息，不投放基于跨应用跟踪的广告，也不读取您未主动选择的照片、联系人或位置。
1. 我们是谁及本政策范围
本服务由 Tomar（tomar.ai 及 Tomar 产品的运营方，以下简称“Tomar”或“我们”）提供。我们是本政策所述个人信息的处理者或数据控制者。本政策适用于 Tomar iOS App，以及您通过同一账户使用的相关网页、桌面端、API、云端生成、存储、社区和支持服务。第三方网站、应用或服务适用其自己的隐私政策。
隐私问题或权利请求可发送至 support@tomar.ai。
2. 我们处理的信息
| 类别 | 示例 | 主要来源和用途 |
|---|
| 账户和联系信息 | 电子邮箱、Tomar/Supabase 用户 ID、账户状态、方案和额度余额、登录及会话记录。 | 由您提供或由账户系统生成，用于登录、同步、账户安全和提供服务。密码由 Supabase 身份认证服务处理；Tomar 不存储您的明文密码。 |
| 用户内容 | 提示词、问题回答、修改指令、项目及会话数据、上传的图片、照片、文档、视频或音频，以及生成的脚本、代码、旁白、海报和视频。 | 由您提交或由服务根据您的请求生成，用于分析素材、生成和修改内容、渲染、保存、播放及跨设备同步。 |
| 社区和协作数据 | 标题、标签、可见范围、创作者标识、点赞、收藏、举报、屏蔽、审核状态以及团队或分享关系。 | 由您的操作产生，用于社区展示、内容审核、权益控制、协作和防止滥用。仅在您主动发布或分享时，相关内容才会按您选择的范围向他人显示。 |
| 交易和额度数据 | 方案、额度发放和消耗、订单或交易编号、购买和退款状态。 | 用于计费、权益、反欺诈、财务对账和法定义务。支付卡等完整支付凭据由 Apple、Stripe 或其他支付服务商直接处理，我们通常不会收到完整卡号。 |
| 搜索、使用和诊断数据 | 搜索词、功能操作、生成阶段、请求时间和状态、App 版本、设备/系统信息、IP 地址、浏览器或 WebView 标识、错误和安全日志。 | 由 App、服务器和基础设施在使用过程中产生，用于交付请求、故障排查、容量管理、安全、防欺诈及改进产品。我们不收集广告标识符用于跨应用跟踪。 |
| 客服和通信 | 您发送的邮件、问题描述、附件，以及您选择随支持邮件提供的 App 版本和设备信息。 | 用于回复请求、解决问题、处理申诉和履行权利请求。 |
| 设备本地数据 | iOS 钥匙串中的登录会话、本地列表缓存、主题偏好，以及分享视频时临时创建的文件。 | 用于保持登录、提高加载速度、记住偏好和调用 iOS 分享面板。退出登录会清除账户缓存；删除 App 本身不会删除服务器上的账户或内容。 |
iOS App 仅在您主动拍摄或选择素材时使用相机或系统照片选择器；不会持续访问相机，也不会读取您未选择的照片。通过 iOS 分享面板保存或发送视频时，接收方由您选择。iOS App 当前不请求持续定位、通讯录或麦克风权限；Tomar 其他端仅在您主动启用录音、语音或会议功能时处理相应音视频和转写内容。
请勿提交您无权处理的第三方个人信息，或与生成目的无关的敏感个人信息。若您主动提交生物识别、健康、精确位置、未成年人或其他敏感信息，我们只会在提供所请求功能所必要的范围内处理，并在适用法律要求时取得单独同意。
3. 我们如何使用信息
- 创建、认证、保护和管理账户，并在设备间同步内容和权益；
- 理解提示和素材，生成、修改、渲染、存储、传输和播放视频及相关资产；
- 提供历史记录、社区、收藏、分享、团队协作、额度和交易功能；
- 审核举报、执行社区规则、保护用户、服务和知识产权；
- 提供客服、排查故障、监控性能、预防欺诈和保障系统安全；
- 履行合同、税务、会计、监管、争议处理和其他法律义务；
- 使用汇总或去标识化信息评估和改进服务。若未来拟将私密内容用于训练面向公众的通用模型，我们会另行明确告知并取得所需同意。
4. AI 服务和自动化处理
Tomar 的核心功能使用人工智能分析提示和素材，并生成脚本、代码、旁白、图像或视频。为完成您发起的任务，我们可能把必要的提示词、附件、上下文和技术参数发送给第三方 AI、语音、视频或数字人服务商。发送范围以完成所选功能所必需的数据为限。
在 iOS App 首次上传素材或创建视频前，我们会说明接收方类别、数据类型和目的，并请求您的明确许可。您可以在 Me → AI data sharing 撤回许可；撤回后，Tomar 会在下一次生成前重新询问。拒绝许可可能导致相应 AI 功能无法运行，但不会影响无需该共享即可提供的功能。AI 输出可能不准确；涉及教育、专业、安全或权利的重要用途，请自行核验。
自动化系统也可能用于垃圾内容识别、内容审核辅助、排序和风控。我们不会仅依靠自动化处理作出对您产生法律或类似重大影响的决定；您可通过客服请求人工复核适用的审核或账户决定。
5. 信息共享和服务商
- 基础设施与身份认证：例如 Supabase 用于账户、数据库和会话，Amazon Web Services 用于计算、对象存储、内容分发、日志和备份。
- AI 与媒体处理：根据您使用的功能和生产配置，可能包括 OpenAI、Anthropic、Google Gemini、DeepSeek、Alibaba Cloud/DashScope、HeyGen，以及其他配置的文本、语音、图像或视频处理商。
- 支付、邮件和支持：例如 Apple、Stripe 及提供交易、邮件投递、客服或安全服务的供应商。
- 按您的指示：当您发布到社区、加入团队、分享链接或使用 iOS 分享面板时，向您指定的用户、公众或第三方应用提供内容。
- 法律与安全：为遵守有效法律程序，调查欺诈、安全事件或侵权，保护用户、Tomar 或公众的权利和安全。
- 企业交易：发生合并、融资、重组或资产转让时，在保密和适用法律要求下向相关方披露。
供应商只能在提供约定服务所需范围内处理信息，并受合同、其适用的隐私条款和安全义务约束。供应商名单或生产模型可能变化；若变化会实质影响您的权利或数据用途，我们会更新本政策并在需要时重新征求同意。
我们不出售个人信息，不为跨情境行为广告“共享”个人信息，不投放个性化广告，也不跟踪您在其他公司的 App 或网站中的活动。
6. 公开内容
私密内容不会仅因生成而自动公开。只有当您主动发布、分享或选择公开可见范围时，相关视频、标题、标签、创作者标识和互动数据才会向对应受众显示。公开内容可能被他人观看、保存、转发或在 Tomar 控制范围之外复制。删除或取消公开会阻止 Tomar 继续提供该内容，但无法删除他人已合法保存的副本。
其他用户可以举报内容或屏蔽创作者。我们可依据服务条款、社区规则、法律要求或安全需要限制传播、移除内容或限制账户。
7. 保存和删除
- 账户资料、私密项目和生成内容通常在账户有效期间保存，直到您删除单个视频、相关项目或整个账户；
- 搜索、诊断、安全和访问记录只在排障、安全、审计和法定义务所合理需要的期间保存；
- 交易、税务、反欺诈和争议记录可按适用法律要求保存更长时间；
- 举报和审核记录可在处理申诉、防止重复滥用和履行法律义务所需期间保存；
- 第三方 AI 或媒体服务商按其企业/API 合同和安全政策保存必要数据；
- 删除后，残余副本可能在隔离备份中保留至正常备份覆盖周期结束，期间不会用于日常产品功能。
您可以在 App 中删除单个视频；该操作会删除该视频及其修订谱系。您也可以前往 Me → Delete account 永久删除账户、账户内视频和剩余额度，或发送邮件至 support@tomar.ai。退出登录只终止当前登录，不会删除账户。卸载 App 也不会删除账户或云端内容；iOS 钥匙串项目在某些设备上可能在卸载后保留，因此如需清除本地会话，请先退出登录或删除账户。
为履行法律义务、处理争议、保护安全或保留已去标识化的数据，我们可能依法保留有限信息。账号删除会写入持久化清理任务；对象存储清理失败会自动重试。清理完成后，任务会移除原始账户标识，仅保留不可逆摘要、尝试次数和完成记录。
8. 跨境处理
Tomar 和服务商可能在美国及其运营所在的其他国家或地区处理信息，数据保护规则可能与您所在地区不同。我们会采用合同、访问控制、加密和法律认可的跨境传输机制。对于来自中国大陆的个人信息，在相关法律适用时，我们会履行告知、单独同意及适用的出境合规要求。
9. 安全措施
我们采用传输加密、iOS 钥匙串会话存储、身份验证、角色和行级访问控制、短期签名媒体链接、最小权限、日志监控及备份等措施。互联网服务不存在绝对安全；若发生依法需要通知的个人信息安全事件，我们会按适用法律通知受影响用户和主管机关。
10. 您的选择和权利
根据所在地法律，您可能有权查阅、复制、更正、删除或转移个人信息，限制或反对处理，撤回同意，对自动化或审核决定提出申诉，以及向主管机关投诉。撤回同意不影响撤回前处理的合法性。加州用户还可享有知情、更正、删除、限制使用敏感信息和不因行使权利而受到歧视的权利；Tomar 不出售或为跨情境行为广告共享个人信息。
请发送请求至 support@tomar.ai。为保护账户，我们可能验证身份和请求范围；授权代理人还需提供适用法律要求的授权证明。我们会在适用期限内回复。
11. 未成年人
Tomar 不面向 13 岁以下儿童。若当地法律要求更高年龄或监护人同意，用户须满足该要求。中国大陆 14 岁以下未成年人的个人信息属于敏感个人信息，必须由监护人同意并监督使用。若我们发现未经有效监护人同意处理了儿童个人信息，将采取措施删除并终止相关账户或功能。
12. Cookie、跟踪和第三方链接
iOS App 不使用第三方广告或分析跟踪 SDK，不使用广告标识符进行跨应用跟踪，因此不请求 App Tracking Transparency 授权。App 使用 iOS 钥匙串和本地存储保存必要会话、主题及列表缓存。Tomar 网页服务可能使用登录、安全和偏好所需的第一方 Cookie 或本地存储。第三方链接或分享目标受其自身政策约束。
13. 政策更新与联系
我们可能因功能、供应商或法律变化更新本政策。重大变化会通过 App、网站、电子邮件或其他适当方式通知，并在需要时重新征求同意。页面顶部日期表示最新版本。
个人信息处理者/数据控制者：Tomar
联系邮箱：support@tomar.ai
网站：tomar.ai
返回顶部 ↑
Tomar Privacy Policy
Applies to the Tomar iOS app, Tomar Studio, tomar.ai, and cloud services linked to the same Tomar account.
In short: Tomar uses account information, content you submit, and necessary technical data to generate, store, and share videos. We do not sell personal data, run cross-app behavioral advertising, or read photos, contacts, or location that you did not choose to provide.
1. Who we are and scope
Tomar, the operator of tomar.ai and the Tomar products (“Tomar,” “we,” “us”), provides the services covered by this policy and acts as the controller or business responsible for the personal data described below. This policy covers the Tomar iOS app and the related web, desktop, API, cloud generation, storage, community, and support services used through the same account. Third-party websites, apps, and services have their own privacy policies.
For privacy questions or rights requests, contact support@tomar.ai.
2. Information we process
| Category | Examples | Primary source and purpose |
|---|
| Account and contact data | Email address, Tomar/Supabase user ID, account status, plan and credit balance, login and session records. | Provided by you or generated by the account system for authentication, synchronization, account security, and service delivery. Supabase processes passwords for authentication; Tomar does not store your plaintext password. |
| User content | Prompts, answers, revision requests, project and session data, uploaded images, photos, documents, video or audio, and generated scripts, code, narration, posters, and videos. | Submitted by you or generated at your request to analyze materials, create or revise content, render, store, play, and synchronize it. |
| Community and collaboration data | Titles, tags, visibility, creator identifier, likes, saves, reports, blocks, moderation status, and team or sharing relationships. | Created through your actions for community display, moderation, entitlement control, collaboration, and abuse prevention. Content is shown to others only when you publish, share, or select a corresponding visibility. |
| Transaction and credit data | Plan, credit grants and usage, order or transaction IDs, purchase and refund status. | Used for billing, entitlements, fraud prevention, accounting, and legal duties. Apple, Stripe, or another payment provider normally processes full payment credentials; Tomar generally does not receive a full card number. |
| Search, usage, and diagnostics | Search terms, feature actions, generation stages, request time and status, app version, device and operating-system information, IP address, browser or WebView identifier, errors, and security logs. | Generated by the app, servers, and infrastructure to deliver requests, troubleshoot, manage capacity, protect the service, prevent fraud, and improve the product. We do not collect advertising identifiers for cross-app tracking. |
| Support and communications | Emails, issue descriptions, attachments, and app version or device details you choose to include in a support message. | Used to respond, troubleshoot, handle appeals, and fulfill privacy requests. |
| On-device data | Login session in the iOS Keychain, local list caches, theme preference, and temporary files created for video sharing. | Used to keep you signed in, improve loading, remember preferences, and open the iOS share sheet. Signing out clears account caches; deleting the app does not delete the cloud account or content. |
The iOS app uses the camera or system photo picker only when you choose to capture or select material. It does not continuously access the camera or read unselected photos. When you save or send a video through the iOS share sheet, you select the recipient or destination. The iOS app currently does not request continuous location, contacts, or microphone access. Other Tomar clients process audio, video, or transcripts only when you activate a recording, speech, or meeting feature.
Do not submit another person’s personal data unless you have authority to do so, or sensitive data unrelated to the generation task. If you intentionally submit biometric, health, precise-location, child, or other sensitive information, we process it only as necessary for the requested feature and seek separate consent where required.
3. How we use information
- Create, authenticate, secure, and manage accounts, and synchronize content and entitlements;
- Understand prompts and materials, and generate, revise, render, store, transmit, and play videos and related assets;
- Provide history, community, saved items, sharing, teamwork, credits, and transaction features;
- Review reports, enforce community rules, and protect users, the service, and intellectual property;
- Provide support, troubleshoot, monitor performance, prevent fraud, and maintain security;
- Perform contracts and meet tax, accounting, regulatory, dispute, and other legal duties; and
- Evaluate and improve the service using aggregated or de-identified information. If we ever propose using private content to train a general-purpose model offered to the public, we provide a separate notice and obtain any required consent.
4. AI services and automated processing
Tomar’s core features use artificial intelligence to analyze prompts and materials and generate scripts, code, narration, images, or video. To complete a task you initiate, we may send necessary prompts, attachments, context, and technical parameters to third-party AI, speech, video, or avatar providers. We limit the transfer to data needed for the selected feature.
Before the iOS app uploads material or creates a video for the first time, it explains the recipient categories, data types, and purpose and asks for your explicit permission. You can withdraw under Me → AI data sharing; Tomar asks again before a later generation. Refusing permission may make the relevant AI feature unavailable, but does not affect features that can be provided without that sharing. AI output may be inaccurate; verify output used for education, professional work, safety, or important rights.
Automated systems may also assist with spam detection, content moderation, ranking, and risk controls. We do not rely solely on automation to make decisions that produce legal or similarly significant effects. You may ask support for human review of an applicable moderation or account decision.
5. Sharing and service providers
- Infrastructure and identity: for example, Supabase for accounts, databases, and sessions, and Amazon Web Services for computing, object storage, content delivery, logs, and backups.
- AI and media processing: depending on the feature and production configuration, providers may include OpenAI, Anthropic, Google Gemini, DeepSeek, Alibaba Cloud/DashScope, HeyGen, and other configured text, speech, image, or video processors.
- Payments, email, and support: for example, Apple, Stripe, and vendors that provide transaction, email delivery, customer support, or security services.
- At your direction: to users, the public, or third-party apps when you publish to the community, join a team, share a link, or use the iOS share sheet.
- Legal and safety: to comply with valid legal process; investigate fraud, security incidents, or infringement; and protect users, Tomar, or the public.
- Corporate transactions: in a merger, financing, reorganization, or asset transfer, subject to confidentiality and applicable law.
Providers may process information only as needed to deliver the contracted service and are subject to contractual, privacy, and security obligations. The provider list and production models may change. If a change materially affects your rights or how data is used, we update this policy and seek consent again where required.
We do not sell personal data, “share” it for cross-context behavioral advertising, serve personalized ads, or track your activity across other companies’ apps or websites.
6. Public content
Generating content does not automatically make it public. A video, title, tags, creator identifier, and interaction data become visible to the selected audience only when you publish, share, or choose a public visibility. Other people may view, save, forward, or copy public content outside Tomar’s control. Deleting or unpublishing stops Tomar from continuing to provide it, but cannot remove copies another person already saved lawfully.
Users may report content or block creators. We may limit distribution, remove content, or restrict accounts under our terms, community rules, legal obligations, or safety needs.
7. Retention and deletion
- Account data, private projects, and generated content are generally kept while the account is active, until you delete a video, related project, or the account;
- Search, diagnostic, security, and access records are kept only as reasonably necessary for troubleshooting, security, audit, and legal obligations;
- Transaction, tax, fraud-prevention, and dispute records may be kept longer when required by law;
- Reports and moderation records may be retained as needed to resolve appeals, prevent repeat abuse, and meet legal duties;
- Third-party AI or media providers retain necessary data under their enterprise/API agreements and security policies; and
- After deletion, residual copies may remain in isolated backups until the ordinary backup-overwrite cycle completes and are not used for normal product functionality.
You may delete an individual video in the app; this removes the video and its revision lineage. You may permanently delete the account, its videos, and remaining credits under Me → Delete account, or email support@tomar.ai. Signing out ends the current login but does not delete the account. Uninstalling the app does not delete the account or cloud content. Because iOS Keychain items may survive uninstall on some devices, sign out or delete the account first if you also want to remove the local session credential.
We may retain limited information when required for legal compliance, disputes, safety, or as de-identified data. Account deletion creates a durable cleanup job, and failed object-storage cleanup is retried automatically. After completion, the job removes the raw account identifier and retains only a one-way digest, attempt count, and completion record.
8. International processing
Tomar and its providers may process information in the United States and other countries where they operate, whose data-protection laws may differ from yours. We use contracts, access controls, encryption, and legally recognized transfer mechanisms where required. For personal information from mainland China, when the relevant law applies, we provide required notice, obtain separate consent, and complete applicable outbound-transfer measures.
9. Security
We use encrypted transport, iOS Keychain session storage, authentication, role-based and row-level access controls, short-lived signed media links, least privilege, monitoring, and backups. No internet service is completely secure. If a personal-data incident requires notice, we notify affected users and regulators as required by law.
10. Your choices and rights
Depending on where you live, you may have rights to access, copy, correct, delete, or port personal data; restrict or object to processing; withdraw consent; appeal automated or moderation decisions; and complain to a regulator. Withdrawal does not affect processing that was lawful before withdrawal. California residents may also have rights to know, correct, delete, limit sensitive-data use, and receive non-discriminatory treatment. Tomar does not sell or share personal data for cross-context behavioral advertising.
Send requests to support@tomar.ai. To protect the account, we may verify identity and scope. Authorized agents must provide authority required by applicable law. We respond within the legally required period.
11. Children
Tomar is not directed to children under 13. Where local law sets a higher age or requires parental authorization, the user must meet that requirement. In mainland China, personal information of children under 14 is sensitive personal information and requires guardian consent and supervision. If we learn that child data was processed without valid guardian consent, we take steps to delete it and close or restrict the relevant account or feature.
12. Cookies, tracking, and third-party links
The iOS app does not use third-party advertising or analytics tracking SDKs, and does not use an advertising identifier for cross-app tracking, so it does not request App Tracking Transparency authorization. It uses the iOS Keychain and local storage for necessary sessions, theme, and list caches. Tomar web services may use first-party cookies or local storage necessary for login, security, and preferences. A third-party link or share destination is governed by that third party’s policy.
13. Updates and contact
We may update this policy as features, providers, or laws change. For material changes, we provide notice through the app, website, email, or another appropriate channel and seek renewed consent where required. The date at the top identifies the current version.
Controller/business: Tomar
Email: support@tomar.ai
Website: tomar.ai
Back to top ↑