Privacy Policy
Last updated: October 29, 2026
This policy describes how Bonito Bonito AI ("the service") handles data when you use our AI baby dance video generator. It covers the photos adults submit, the generated Bonito Bonito dance videos, and the account and payment information needed to provide the service.
Adults and children's photos
The service is intended for adults aged 18 or older, including parents, legal guardians and adults who have a parent or guardian's permission to use a child's photo. It is not intended for children to create accounts or make purchases themselves.
Only submit a child's photo if you have permission for it to be processed into an AI video. Permission to process a photo does not automatically mean permission to publish or share the result. If you believe a child's photo was submitted without the required permission, contact us to request a review and removal.
What we collect
- Account information — when you use an available Google or GitHub sign-in option, we receive your email address, display name, avatar and a provider account identifier. We also record the sign-in method and IP address to operate and protect your account.
- Photos you upload — the baby photo you submit when you start a generation. Selecting a photo for preview alone keeps it in your browser; starting generation sends it for processing and storage.
- Generated videos and task information — the videos created from your photo, generation status, timestamps and any failure information needed to deliver and support your work.
- Orders and credits — records of credit packs you purchase and credits spent or returned.
- Basic technical logs — standard server logs (such as IP address and timestamps) used for security and abuse prevention.
How photos and videos are used
We use your photo to generate your dance video and, when storage succeeds, keep a copy so you can revisit your work. Generation is processed through KIE (kie.ai) using the Kling motion-control model. We send your photo and our preset motion reference to KIE and retrieve the generated result. KIE and the model infrastructure it uses process these inputs to provide generation. See KIE's Privacy Policy.
We do not train models on your photos or videos ourselves, and we do not sell them. This statement is about our own use of your media; it is not a guarantee about a processing provider's independent retention or model-training practices.
Our hosting, database and file-storage services also process the information needed to run the site and store your works. Service providers may process data outside your country. We do not automatically publish your uploads or results in a public gallery. Playback and downloads through our website require the account that owns the work; processing providers and authorized service operators may access data as needed to provide and support the service.
How long we keep them
Works remain in your account until you delete them or request removal, subject to storage and service availability. A result may initially be served from the provider while our stored copy is being finalized. Download a copy of any video you want to keep; the service is not an indefinite backup service.
You can delete completed or failed works from My Works. Generations still running or being verified cannot be deleted there until their status is resolved. A failed generation's credit return must also be settled before deletion. Contact us if you need help with a pending task or removal request.
Deleting a work removes it from your works list and blocks further access through our media endpoints. We then attempt to delete the photo and video from our storage. File cleanup can be delayed by storage errors or retries, so deletion does not mean that every stored copy disappears immediately. Contact us if you have a concern about remaining copies.
Provider-held copies follow the provider's retention and deletion practices. Expiration of a temporary media link does not establish that the underlying data has been deleted; we do not promise a fixed provider deletion time or automatic deletion from their systems when you delete a work here.
Order, credit and limited task records may remain after media deletion for accounting, fraud prevention, reconciliation and support. Account deletion is a separate request; it does not automatically remove records we must retain to meet legal obligations or resolve a dispute.
Payments
When checkout is available, credit pack payments are processed by PayPal. We do not receive or store your full card number. We receive payment status, transaction identifiers, payer details returned by PayPal, and the order information needed to add or reconcile your credits. PayPal handles payment data under its Privacy Statement. Purchase refunds and generation credit returns are explained in our refund terms.
Cookies, analytics and advertising
We use cookies to maintain your sign-in session and browser storage for preferences and, during checkout, to remember which page led to a purchase. You can manage cookies and site storage in your browser settings; blocking essential cookies may prevent sign-in.
This version of the service is configured to use the following analytics tools on product pages. They help us understand visits and product use; actual collection depends on your browser and whether their scripts load. Google Analytics loads only after you allow optional analytics. Use “Analytics preferences” on product pages to change your choice.
- Google Analytics — page visits, device and interaction data, including checkout events. With your permission, it uses cookies to distinguish visitors and sessions. We exclude photos, videos, private media links and login/payment query parameters, and do not enable advertising personalization. See Google's Privacy Policy.
Google AdSense advertising is not enabled in this version of the service.
Your choices
To request access to, correction of, or deletion of your account data, contact us using the account email associated with the request. We may ask you to verify account ownership before making changes. Do not email passwords, full payment-card details or additional children's photos to verify a request.
For individual works, use the deletion controls and limitations described above. To report an unauthorized upload of a child's photo, identify the relevant work or account if you can do so without sharing more sensitive information.
Changes to this policy
We may update this policy as the service changes. The revision date appears at the top of this page, and material changes will be explained here.