TRUST CENTER
A personal creative space needs thoughtful boundaries. Here’s how we protect your material, check who a Personal Double belongs to, and help people act when something goes wrong.
Explore the protectionsCare at every step.
Built into the creative process.
01 / YOUR PRIVATE CREATIVE SPACE
No email address or phone number is required to use the app. Apple handles purchases. You decide when a creative task needs an online service.
ON YOUR DEVICE
Transcription, rehearsal, room analysis, pronunciation preparation, self-filming, trimming and captions run locally, with the required device capabilities and permissions.
Your personal pronunciation corrections improve future instructions; they don’t retrain a shared model.
IN YOUR PRIVATE ICLOUD
Your material syncs through Apple’s private CloudKit database. We cannot browse your private iCloud library. Media you add for reels is the exception: it is kept on our server and listed to your devices from there.
Apple protects iCloud data in transit and on its servers. End-to-end protection depends on the data type and your settings. Apple explains iCloud security
WHEN YOU CHOOSE THE CLOUD
Writing help sends the relevant text to Anthropic through our server. Personal Double creation and video rendering send the material needed to the video partner named in the app.
You see consent information before sending. These online features aren’t on-device processing.
02 / YOUR FACE. YOUR PERSONAL DOUBLE.
A Personal Double is for your own likeness and voice. In the current BytePlus flow, a live face check comes before the reference clip can be used.
After you consent, BytePlus runs a live face check on its verification page inside the app. Our server confirms the result with the provider before continuing.
Record a five-second clip of your face and voice. BytePlus checks the face against your verification record. A refused clip cannot become your active double.
Your double and approved looks belong to your own provider asset group. Requests are checked against ownership before those assets can be used for your renders.
This is live face verification, not a government-ID or legal-identity KYC check. Older or fallback Higgsfield doubles use a different on-device liveness flow. The consent screen and privacy policy explain which path applies.
03 / ASSET UPLOAD VERIFICATION
References give you creative range. Checks help keep that range tied to the person who passed verification.
Photos and videos added as looks go through the video partner’s face-consistency and moderation checks. An asset must be accepted before it can be used. Uploads also have file-type, size and duration limits.
UploadCheckUseLooks are added to your verified group. A face mismatch is refused; another person’s asset group cannot be selected as yours.
Voice samples must be your own voice. The face check does not establish ownership of a voice recording, image, music track or other intellectual property. Only upload material you have the right to use.
Provider retrieval uses short-lived signed upload links. Temporary copies are cleaned up after processing; private look galleries and provider assets have separate retention and deletion rules.
Read the storage details04 / C2PA CONTENT CREDENTIALS
A generated performance should carry its origin with it. Our export flow combines signed provenance with a visible AI label.
Illustration of the export process.
Not a certificate for a particular video.
The app prepares C2PA Content Credentials for generated exports, including individual parts and the joined video. They identify AI generation and connect the file to its reel code. Signing happens on our server; the signing key stays there.
If you turn the visible AI label off, the export must pass its embedded Content Credentials check. If embedding fails, the visible label is kept. The app also embeds and checks its own signed reel record.
Credentials document origin and file integrity; they don’t prove that a scene is true or prevent someone from copying, editing or stripping metadata. A validator’s trusted-signer status is separate from embedding a valid signature.
Understand the C2PA standard05 / PROTECTION IN LAYERS
Access checks, limited sharing and clear rules work together to reduce misuse.
Online app features check installation and purchase authorisation, using Apple App Attest or verified subscription receipts where appropriate. Rate limits help constrain repeated requests.
Provider API keys and signing keys stay in server secrets. Connections use HTTPS. Asset requests are scoped to their owner, and temporary retrieval links expire.
The app has no advertising or third-party tracking SDK. Optional activity counts start off. Operational records help us run the service; retention periods are published.
Impersonation, non-consensual likenesses, harassment, fraud, sexual content and using minors in generated reels are prohibited. Provider filters may refuse content. We can remove hosted links and suspend online access for abuse.
The app is for adults 18 and over. Age confirmation is self-declared. Read the acceptable-use rules
06 / REPORTING & TAKEDOWN
You don’t need to use the app to report a video, a privacy concern or a security issue.
We review the report, may ask for context, and can remove content we host or restrict the responsible user’s online access. Reported content is assessed against our terms and the circumstances.
For content hosted elsewhere, also use that platform’s reporting tools. We can’t remove copies from someone else’s service.
All three routes reach sachin@getconvi.com.
KEEPING YOU IN CONTROL
Open your Private Mic link in the Library and choose Take it down. Links also expire after seven days. Anyone with a live link can watch it, so share it thoughtfully.
Remove individual items, looks or your double. You → Delete everything removes local and iCloud material and requests server deletion, including your hosted links. The app reports anything it couldn’t complete.
Deletion can’t recall files other people already saved, cancel an Apple subscription or undo past provider training. BytePlus and older Higgsfield flows have different deletion and training terms.
Last reviewed 12 October 2026. This page describes current app and service protections. Availability can vary by app version and video provider.