Privacy Policy

LMH BACKYARD BUZZ LLC operates Warm Path: AI Video Studio. Our address is 6279 S Westridge St, Salt Lake City, UT 84107-7759, United States, and our contact for privacy matters is support@warmpath.net. References to “we” or “us” in this notice mean this company. Where data protection law uses the term controller, we are the controller for the purposes and handling described here.

The notice applies to the Warm Path Android app, its image-to-video, video-template and AI-image features, the website at https://www.warmpath.net, purchase administration and communications with us. Personal information includes information that identifies someone directly and information that can reasonably be connected to a person, such as a device reference, an identifiable photograph or an email conversation.

Warm Path is still in development. Google Play availability is coming soon; there is no published store link on this website. App-related passages describe how information is handled when the relevant functions become available. The website provides product and policy information, rather than accepting generation requests or payments.

This notice describes processing and available choices. It is not a request for unlimited consent, and viewing it does not replace a separate permission or disclosure required for a particular activity. Additional notices may explain a specific interaction without reducing the protections stated here. Regional rights below apply where the relevant law governs our processing of your information.

Some information is supplied deliberately, such as selected material, a purchase or a message. Other information arises when a device requests a page, the app communicates with service systems, a store returns a transaction response or Adjust attributes an installation. The information involved depends on the interaction. You do not need to submit a photograph or a support email address merely to read this website.

• Creation information means the whole set of information associated with a work: its prompt, input images or videos where supplied, output images or videos, generation settings and parameters, template selections, task identifiers, task status, timestamps, related metadata and associations. Copies, previews, thumbnails, caches and backups are included. These examples are not an exhaustive list and do not limit the definition to the image or video itself.
• App-user and installation records include relevant service or installation identifiers, preferences, settings, purchased entitlements and information used to administer your use of the app. No registration is required for such records to exist. A task reference or other information linking one of these records to a creation is also creation information.
• Transaction records include the item purchased, store order or transaction references, purchase dates, receipts or verification information, payment and refund status, and the entitlement associated with a purchase. Google Play handles payment through its own service and returns relevant information for verification and administration.
• Communications include your email address if you write to us, your questions and privacy requests, our correspondence, content reports, and the references or attachments you choose to send. Reports can be made from a creation's detail page inside the app. Creative material, screenshots of it and associated task information in these communications remain creation information.
• Service and technical records include IP address, device and browser characteristics, operating-system and app versions, request times, relevant page or feature interactions, errors, diagnostic information and logs concerning reliability, security or misuse. Any part that identifies or describes a specific creation is covered by that creation's removal deadline.
• Attribution records concern the source of an installation. Subject to availability and permission, they can include device or advertising identifiers, referral and channel details, IP address, version details and installation, first-open or session signals. The separate Adjust section explains the limits of this processing.

An enquiry should contain enough information to explain the problem, without unrelated documents or credentials. If further information is needed to find your records or verify a request, we ask for something relevant and proportionate. Supplying an optional attachment does not create permission for an unrelated use of its contents.

Android's system Photo Picker lets you choose the photographs made available to Warm Path. A chosen image is uploaded for the creative operation you request. Selecting a photograph is not the same as processing it entirely on the device: the generation work runs on servers we host and operate, using self-hosted models.

We do not send creative inputs, results or associated task information to a third-party AI generation provider. Other operational providers and the attribution service have separate roles described in this notice. The absence of an external AI generator should not be understood to mean that no provider handles any technical or operational information.

We do not identify people through facial recognition, extract facial geometry for identity purposes or produce biometric identifiers. A recognizable person's image can still be personal information even without biometric processing. The same information-handling protections apply to it as to other personal information in a creative request.

No user data is used to train AI models. This commitment covers prompts and media as well as app identifiers, diagnostics, transactions, reports and support conversations. Processing a request, investigating an error or reviewing a report does not make that information available for a training collection.

All information associated with a creation is removed within 36 hours from the start of its input upload. For a request without an upload, the period begins with prompt submission. Inputs, outputs and their associated records share that deadline. Generation finishing does not begin a new period; the retention section explains the full scope.

Only provide material you are entitled to use, including appropriate permission for another person's personal information. Avoid unnecessary confidential or sensitive details. A result can be inaccurate or reveal unexpected information, so review it before using or sharing it. Save an available result before its deadline if you want to keep your own copy.

Warm Path has no registration or sign-in. You are not asked to create a Warm Path password or connect a social login. References to an app user, user record or account-deletion control describe information associated with use of the app, rather than a separate login profile.

An app without a login can still process personal information. Device references, service requests, purchases and messages may relate to a person or installation. Relevant references help us deliver the requested operation, administer an entitlement or locate information for a support or privacy request. Information connecting those records to a creation is removed with the creation.

Your Google Play account is separate from these app records. A store purchase does not register a Warm Path login, and removing Warm Path data does not close your Google account or erase records Google holds independently. Google's own notice explains its payment and account processing. We do not need your Google password or authentication codes to investigate a purchase.

Warm Path purchases are one-time purchases, with prices and applicable purchase conditions shown in the app before confirmation. We do not publish a price list or accept payments on this website. Relevant transaction information is used to verify a purchase, provide the associated entitlement and reconcile a refund, reversal or billing discrepancy.

If you need purchase assistance, provide an available order reference and describe the issue. Remove unrelated information from any receipt or screenshot you send. Independent transaction and accounting records may be needed after creative data is removed, but they cannot preserve creation content or a link to a creation beyond its deadline. A payment question does not prevent you from making a privacy request.

The purposes below explain the work information supports. Where applicable law requires a legal basis, we assess that basis for the particular activity. A feature you request, a legal record-keeping duty and an optional tracking choice are not treated as the same permission.

• Delivering a creative request: receiving the selected material and settings, managing processing, communicating task status and returning the result. Processing necessary for a requested service can rely on performance of a contract or steps you ask us to take before entering one, where that basis applies.
• Operating the app and administering purchases: maintaining preferences and service records, providing purchased access, validating store responses and addressing refunds or reversals. Necessary processing may support the service contract; separate accounting, tax or consumer-protection duties may require specific records.
• Providing support and administrative communications: answering questions, diagnosing failed requests, addressing content reports, privacy and deletion requests, and communicating relevant service changes. The basis depends on whether the activity fulfils a request, meets a legal obligation or supports a legitimate operational interest.
• Attributing installations: using Adjust's necessary technical information to establish a referral, channel or campaign source. We apply the consent or other lawful basis required for the particular information and context. This purpose does not include creation analysis, creative-feature measurement or purchase-event tracking through Adjust.
• Reliability, protection and business administration: investigating faults, fraud, abuse or security incidents; enforcing terms; obtaining professional advice; and establishing or defending rights. Where we rely on legitimate interests, we consider whether your rights and interests outweigh the proposed processing and whether the law permits that basis.
• Meeting legal requirements: keeping necessary financial records and responding to valid legal obligations or public-authority requirements. A general reference to compliance does not extend the time for which creation information is held.
• Consent-based activities: obtaining a separate choice for device access, tracking, communications or another activity where permission is required. Reading this notice or continuing to browse does not supply that consent.

You may withdraw consent through the relevant available control or by contacting us. Withdrawal does not make earlier lawful processing unlawful. Some information is needed to carry out the generation or purchase you ask for; without it, we may be unable to perform that request. You can decline to include an unnecessary support attachment without giving up your right to contact us.

We may use genuinely anonymous or aggregated information to understand service performance and improve reliability. Replacing or hashing an identifier does not by itself make a record anonymous. Information that can still identify a person remains protected, and information associated with a particular creation remains subject to its removal deadline. Statistical use does not permit keeping a hidden copy of creation data.

None of these purposes permits AI training on user information. If we propose a materially different use requiring an additional notice, permission or legal basis, we take the required steps before making that use. A policy update alone does not authorize incompatible processing.

Adjust helps us understand where a Warm Path installation came from, such as a referral, campaign or acquisition channel. We use it only for installation/source attribution. It is not involved in generating media and does not evaluate the creative content you provide or receive.

Attribution involves technical information rather than an absence of data. Depending on what is available and permitted, signals can include device or advertising identifiers, a referrer or channel reference, IP address, operating-system, app or SDK versions, and installation, first-open or session signals. Applicable consent requirements and device privacy choices govern the use of these signals.

We do not send Adjust prompts, uploads, results, task records or any other creation information. It does not receive support messages or content reports, and we do not send it purchase events or use it to measure activity within creative features. Necessary attribution information and results may be exchanged with acquisition channels through enabled integrations, subject to the applicable choices and restrictions.

Attribution information follows retention arrangements for that purpose rather than the creation deadline. Device controls can limit available advertising identifiers, but resetting or restricting an identifier does not automatically delete records previously collected. Contact us to request access, deletion, an objection or an applicable advertising opt-out relating to Warm Path's processing. We involve the relevant provider when necessary to carry out a valid request.

The Warm Path website does not set cookies or run analytics or advertising trackers. Its page interactions are temporary and do not save your selections in persistent browser storage. Browsers can cache the site's pages, images and locally supplied fonts for display. Demonstrations on the site do not upload your material or run a generation task.

The app's technologies are separate from browser cookies. Local and service records support app functions, and the Adjust SDK handles installation attribution as explained above. A cookie control in a browser does not automatically disable an SDK installed with an app. Clearing local storage is also different from deleting information already received by a service.

For image selection, Warm Path uses Android's system Photo Picker. You choose the photos made available to the app. When another function needs device permission, permission is requested for that function; you can refuse or change it through the available Android controls. The associated operation may then be unavailable. Revoking access does not itself remove material previously uploaded, which is handled under our retention and deletion rules.

Use your browser's and operating system's settings to manage storage and privacy choices. Where the law requires separate consent for storing or accessing device information or for tracking, that requirement applies independently of this notice. A control affecting future access does not necessarily erase prior records; contact us if you also want to request their removal.

Following an external link takes you to another service's terms and privacy information. Google Play, Adjust and other independent destinations are responsible for the information they collect through your direct interaction with them. Their notices do not replace our responsibility for what we disclose to them or what is processed for us.

A disclosure must serve a relevant purpose described in this notice. Listing a category of recipient does not mean that every person in that category receives every type of information. We limit access to information needed for the activity and use appropriate protections for processing carried out on our behalf.

• Operational services: providers involved in hosting, storage, website delivery, communications, support and security may process relevant information to perform their work. Adjust receives the limited technical information described in the attribution section. These roles are distinct from an external AI generation service, which we do not use.
• Purchase administration: Google Play and relevant payment-related services may receive transaction, verification, entitlement, refund or dispute information needed to deliver a purchase, investigate a discrepancy or meet a platform requirement.
• Professional advice: legal advisers, accountants, auditors, insurers and similar professionals may receive information needed for advice, compliance, business administration or a claim, with appropriate confidentiality obligations.
• Legal and safety matters: we may disclose relevant records to a court, regulator, law-enforcement body or other recipient when a valid legal duty applies, or where disclosure is lawfully needed to protect people, investigate abuse or establish, exercise or defend rights.
• Business changes: a proposed or completed financing, acquisition, merger, restructuring or asset sale may require relevant information to be reviewed or transferred. Confidentiality and other applicable safeguards, required notices and existing privacy commitments continue to apply through that process.
• Your directions: information may be provided to an authorized person acting for you or to another recipient at your request. When you independently save or share a result, the recipient's subsequent handling of that exported copy is separate from our operation of Warm Path.

Providers processing for us must handle information for the authorized purpose with appropriate protection. Their copies of creation information are subject to the original removal deadline. An independent provider may also have separate legal responsibilities for records it holds for its own service, such as the store's own payment history.

We do not sell personal information in exchange for money. Certain laws also treat other disclosures, including some advertising-related exchanges, as a sale or sharing. The regional rights and privacy-signal sections explain the applicable options; the absence of a cash payment does not remove those rights.

A creation and all of its associated information have a maximum retention period of 36 hours, starting when the input upload begins. If the request has no upload, prompt submission starts that period. The input and any resulting output have the same deadline, even if generation completes later.

Removal covers the work itself and everything associated with it: prompts, input and output images or videos, settings, parameters, template choices, task records, IDs, status, times, metadata, associations and all other creation information. It reaches every system we control and every system processing this information for us, including databases, file storage, logs, previews, thumbnails, caches, backups and support or report attachments.

Moving a record, making another copy, opening a support case or conducting a safety investigation does not restart the period. A retained record may not preserve creation content, associated metadata or a link to the creation beyond that deadline. Neither a backup nor a separate financial or security purpose creates an exception for creation information.

• Independent app-user and preference records may remain as needed to operate the app and administer your use, until a valid deletion request or the end of the relevant need. Any references connecting them to a creation are removed by that creation's deadline.
• Independent transaction and entitlement records may be needed for verification, refunds, payment disputes, reconciliation, tax or accounting duties. A purchase record is not the same as a creation record: deleting a creation does not by itself erase a purchase history, but the financial record cannot retain the creation or its associated information.
• Independent support and reporting correspondence may be needed to resolve an issue, record the response or address a dispute. Creative attachments, task references and every other item of creation information within that correspondence are removed by the original deadline, even while the wider issue remains open.
• Independent diagnostic and security records may be retained for reliability, service protection, abuse prevention or a particular investigation. Their purpose determines how long they are necessary. Information about a particular creation inside a log or incident record remains subject to that creation's deadline.
• Independent Adjust attribution records are retained for the installation-source purpose under the applicable service arrangements and configuration, subject to valid privacy requests and legal requirements. These records do not contain creation information and do not inherit the creation storage period.

For independent records we consider the purpose, whether the matter has been resolved, applicable obligations and rights requests, and whether the need can be met with less identifiable information. When a record is no longer necessary, we delete it or make it genuinely anonymous. Any restricted retention or backup handling of an independent record must not preserve or restore deleted creation information.

Warm Path is not permanent storage for your creations. Save any available result you want to keep before its deadline. Copies you export to your own device or independently share elsewhere are outside our controlled systems and those processing for us. Removing information from Warm Path does not remove those separately held copies.

You can request removal of your Warm Path app-user data through either of the following routes. They are independent: email is available even if you can still use the app. No registration, sign-in or newly created profile is required to send a request.

• In the app, go to Personal Settings, select the deletion control, read the information shown and confirm. Save any available result you want to keep before confirming removal.
• By email, contact support@warmpath.net and ask to delete your Warm Path app-user data. Include an app-user or order reference if available to help locate the records. If you cannot access the app, explain that in your message; sending a request does not depend on reinstalling it.

Deletion includes the relevant app-user record, non-essential preferences and associated personal information, including all remaining creation content, associated records and copies. A control described as account deletion refers to these app records, since Warm Path has no separate login account. We give appropriate deletion instructions to processors acting for us.

We may need limited verification to connect a request with the correct records and protect somebody else's information. Any independent transaction, tax, security, support, attribution or other record retained for a necessary lawful purpose is limited to that purpose, rather than continued ordinary use of a deleted user record. We explain relevant retention when responding. It cannot retain creation content or associations after the creation deadline.

The routine 36-hour removal of creation information does not wait for a request, a support response or verification. After information is erased from our systems it is no longer available there. Clearing a cache or uninstalling the app is not the same as requesting deletion of service records.

Deletion does not close your Google account, erase Google's independently held records or automatically request a refund. A purchase issue and a privacy request can be handled separately; resolving one is not a condition for submitting the other. Exported files and copies independently shared outside our systems remain under the control of you or their recipient.

We use technical, organizational and administrative safeguards appropriate to the information and the risks involved. Connections between the app or website and our servers are encrypted in transit using HTTPS with TLS. Access is restricted to people and systems with a relevant operational need, and authorized handling is limited to the task concerned.

Our security work includes investigating faults and suspicious activity, responding to reported incidents and reviewing the handling of information by operational providers. Safeguards must remain appropriate to the service and its risks. No connected system can guarantee that unauthorized access, misuse, loss or another incident is impossible.

Protect the device you use and your store access. If you believe information has been exposed or notice a security problem, tell us what happened and provide an available app or transaction reference that helps identify the issue. Do not send passwords, payment-card security details or authentication codes. We assess incidents and notify affected people or authorities when applicable law requires it.

Information used in investigating an incident remains subject to the limits in this policy. In particular, incident handling cannot keep a creation, its metadata or its associations after the creation deadline. Only genuinely independent records can follow a separate necessary security-retention purpose.

Our company is based in Utah, United States. The service infrastructure and providers involved in operating Warm Path, including relevant Google Play and Adjust operations, may process information in other countries. Our postal address does not promise a particular storage location for every record, and the privacy protections and access rules in another country may differ from those where you live.

We apply the protections required for an international transfer under the law governing that information. Depending on the circumstances, a permitted arrangement may include a recognized adequacy decision, approved contractual protections or another lawful transfer mechanism. Where UK or European transfer rules apply, their safeguards apply to the relevant processing; our US establishment does not remove them.

You can ask for information about the safeguards relevant to your data, including how to obtain a description or copy where applicable. Necessary confidential details may be protected when responding without removing information rights that apply to you. A transfer does not change the allowed purpose or extend the deadline for deleting creation information across our systems and processors.

Anyone using Warm Path must satisfy the age and consent rules applicable to them. Where the law permits use by a young person only with a parent or guardian's permission, that permission must be obtained first. Nothing in this notice overrides an applicable age restriction or allows someone to bypass a required permission.

We do not knowingly collect children's personal information in breach of applicable requirements. If we learn that information was collected without necessary permission or another required legal basis, we take appropriate steps to stop that processing and remove the information as required. A parent or guardian can contact us to ask for review or deletion, with proportionate verification where needed to protect the child.

The creative functions do not require unrelated health records, identification documents, private financial statements or similar sensitive material. Avoid including these in a prompt, upload or support attachment. Be careful with information about other people and obtain the permissions needed for your use. An identifiable face remains personal information even though Warm Path does not carry out biometric identity processing.

To ask about your personal information or exercise a right, write to support@warmpath.net. Which rights apply depends on the relevant law, the type of processing and its legal basis. You do not need a Warm Path login to make a request. The available rights can include the following.

• Confirmation and access: ask whether information about you is processed, obtain a copy, and understand the relevant sources, purposes and recipients.
• Correction: ask for inaccurate information to be corrected, or information that is incomplete for its intended purpose to be completed.
• Erasure and restriction: request removal or limits on use, subject to the applicable conditions and exceptions for independent records, such as a specific legal obligation or claim.
• Portability: receive relevant information you provided in a usable format, or have it sent to another provider where the right applies and transfer is technically feasible.
• Consent withdrawal: withdraw a consent-based choice without affecting the lawfulness of processing before the withdrawal.
• Advertising and profiling choices: exercise applicable rights concerning sale, advertising-related sharing, targeted advertising or profiling with qualifying effects. California and Virginia rights are addressed separately below.

The right to object deserves separate attention. Where we rely on legitimate interests, you may have a right to object for reasons related to your circumstances. An applicable objection to direct marketing is not dependent on explaining a personal reason. You can also distinguish a request to stop a future use from a request to erase existing information, and request both where applicable.

We use proportionate verification to match the request to the right app-user, installation, purchase or support records. A representative may act on your behalf where permitted, with appropriate evidence of authority and any legally necessary verification. We do not require you to register a new login simply to ask about your data.

We respond within the applicable legal period. If an exception limits a request, or a refusal, extension or permitted charge applies, we explain the reason and the options available. You will not be unlawfully discriminated against for exercising a protected right. Any exception for an independent record does not extend the fixed creation deadline.

You may complain directly to the supervisory authority or regulator available under the law that applies to you. You can contact us first to seek a resolution, but doing so is not a prerequisite for an available regulatory complaint.

Some browsers provide a legacy Do Not Track preference. There is no single uniform implementation across services, so that preference is not treated as an instruction to delete every app record, disable every SDK or withdraw every separate consent associated with a device.

A legally recognized opt-out preference signal, such as Global Privacy Control where applicable, is different from legacy Do Not Track. We give a valid signal the effect required by the law that governs the relevant processing. Its scope depends on the applicable browser, device or context, and a signal does not automatically identify every independent app installation.

An applicable sale, sharing or targeted-advertising opt-out can also be sent to support@warmpath.net. Explain which service or available device record the request concerns so we can apply it appropriately. No sign-in is needed. Device restrictions on an advertising identifier can affect future availability without deleting previous records; use the deletion route as well if you want to request erasure.

When California privacy law applies to our processing, its scope, thresholds and exceptions determine the rights available. This section should be read with the categories, sources, uses, recipients and retention information above. Those disclosures concern information supplied by you, device and service interactions, purchase responses and attribution sources.

Relevant categories can include identifiers and contact details; commercial information such as purchases and entitlements; internet, app and technical activity; and visual content, prompts and correspondence you provide. The contents of material you choose can reveal other personal or sensitive information. These categories are used and disclosed for the purposes and recipient categories explained in this notice, with creation information subject to its stated deadline.

• Applicable rights include knowing and accessing personal information and information about its handling, correcting inaccuracies, and requesting deletion subject to statutory exceptions.
• You may exercise applicable rights to opt out of sale or sharing for cross-context behavioral advertising and to limit qualifying uses or disclosures of sensitive personal information.
• An authorized agent may make a request under the relevant authority and verification rules. Protected privacy rights can be exercised without unlawful discrimination.

We do not exchange personal information for money. However, California's sale and sharing definitions can cover certain other disclosures. If attribution information exchanged through an enabled acquisition-channel integration is covered, an applicable opt-out can be made through our contact address or a legally recognized preference signal. Those integrations remain subject to relevant privacy choices; they do not receive creative or support information or purchase events from us.

We verify requests where needed using information proportionate to the request, and explain any applicable reason that prevents full completion. A request about sensitive material does not mean you must submit another copy of that material. Describe the concern first so that locating or verifying the relevant record does not unnecessarily expose more information.

If the Virginia Consumer Data Protection Act applies, eligible residents have rights within its scope and exceptions. The information-handling sections above explain the processing to which those rights relate; describing a conditional right does not mean that every form of processing mentioned below takes place in Warm Path.

• You may confirm whether personal data is processed and access it, correct inaccuracies, request deletion and receive an applicable portable copy of information you provided in a usable format.
• Where applicable, you may opt out of targeted advertising, sale of personal data or profiling for decisions with legal or similarly significant effects, and exercise protected rights without unlawful discrimination.
• You may appeal a refusal of a privacy request through the same contact route used to make the request.

Send requests to support@warmpath.net. To appeal, reply to our decision or email that address with “Privacy appeal” in the subject, explaining what you want reconsidered. We review the appeal and communicate the outcome and reasons within the applicable legal period. If it is denied, we provide the available method of contacting the Virginia Attorney General to submit a complaint.

The date displayed on this page identifies the current version. We may update the notice as features, operational arrangements, information handling or legal requirements change. Material changes receive additional notice where required. Changing a page is not a substitute for a new consent or another legal step required for a new purpose.

Changes do not remove rights relating to information already processed or turn a fixed creation deadline into indefinite storage. We keep the notice aligned with the app's actual handling, including provider roles and deletion practices. An independent provider may update its own notice separately; that does not replace our obligation to explain and protect the information we handle.

For privacy questions, access or deletion requests, objections, appeals and security concerns, contact support@warmpath.net. Postal enquiries can be addressed to LMH BACKYARD BUZZ LLC, 6279 S Westridge St, Salt Lake City, UT 84107-7759, United States. Our official website is https://www.warmpath.net.

Describe the issue and include a relevant app-user or order reference if available. A reply email address is a way to communicate with you, not evidence of a registered Warm Path login. Do not send store passwords, authentication codes, full payment details or unrelated identity documents.

You can report a creation from its detail page without leaving the app, or contact support with a description of your concern. Avoid forwarding unlawful material or unnecessary sensitive information when an explanation is sufficient. Creation information in a report, screenshot or attachment still follows the original deadline. The support and deletion pages below explain the practical routes, which remain available independently of a purchase dispute.