Skip to content

Privacy Policy

Last updated: February 2026

1. Data We Collect

  • Account data: Email address, display name, authentication provider (Google)
  • Usage data: Prompts, generation metadata, pick choices, credit transactions
  • Generated content: Images generated through the Service (stored in Cloudflare R2)
  • Payment data: Processed by Stripe. We do not store credit card numbers.
  • Analytics:Anonymous, cookieless usage analytics via Vercel Analytics & Speed Insights

2. How We Use Your Data

  • Provide and improve the Service
  • Route prompts to appropriate AI models
  • Use pick data to improve model selection (aggregated, not individual)
  • Process payments and manage subscriptions
  • Send transactional emails (account, billing)
  • Detect and prevent abuse

3. Data Retention

  • Images:Free tier: 7 days. Basic: 30 days. Pro & Ultra: 90 days.
  • Generation metadata: Retained indefinitely for routing improvement.
  • Account data:Deleted when you delete your account — including your generated images and videos, uploaded reference photos, character & brand-kit assets, and your Stripe customer profile.
  • Billing records: Paid invoices are retained by our payment processor (Stripe) for the period required by applicable tax and accounting law, even after you delete your account. We cannot delete these earlier.

4. Third-Party Processors

  • Supabase — Database and authentication (EU Central)
  • Cloudflare R2 — Image storage
  • Stripe — Payment processing
  • fal.ai, OpenAI, Google — AI image generation (prompts are sent to these providers)
  • Anthropic — Content moderation
  • Vercel — Application hosting
  • Vercel Analytics & Speed Insights — Anonymous, cookieless usage and performance metrics
  • Sentry — Error tracking

5. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your account and all associated data
  • Export your data in machine-readable format (JSON)
  • Object to processing for analytics purposes

You can exercise these rights through the Settings page or by contacting us.

6. Cookies

We use only essential cookies, for authentication. Our usage analytics (Vercel Analytics) is cookieless and does not track you across sites, so there are no analytics or advertising cookies to consent to.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security in the database, and secure authentication flows. We do not store passwords in plain text.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.