Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account registration data (email address, display name, password hash).
• Content you upload (images, prompts) for AI generation.
• Communications you send us via support channels.

1.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, timestamps, referring URLs, error logs.
• Device data: operating system, screen resolution, language preferences.
• Cookies and similar technologies (see Section 4).
• Usage telemetry: feature interactions, generation counts, session duration.

1.3 Information From Third Parties

• Authentication providers (Google, Telegram): name, email, profile picture as permitted by your provider settings.
• Payment processors: transaction identifiers and subscription status (not full card data).

2. How We Use Your Information

• To provide, maintain, and improve the Service and AI generation features.
• To process payments, manage subscriptions, and prevent fraud.
• To authenticate your identity and keep your account secure.
• To respond to support requests and send service-related notifications.
• To enforce our Terms of Service, Content Policy, and applicable law, including detecting and removing prohibited content (CSAM, NCII).
• To conduct analytics and research to improve recommendation quality and platform safety.
• To comply with legal obligations and respond to lawful requests from authorities.

We do not sell your personal information to third parties for their independent marketing purposes.

3. How We Share Your Information

• Service Providers: Cloud infrastructure, CDN, payment processors, email delivery, analytics providers — each bound by data processing agreements.
• AI Model Providers: Prompts and input images are transmitted to third-party AI inference APIs to produce generations. Refer to those providers' privacy policies.
• Legal Compliance: We may disclose data when required by law, court order, or to protect rights, safety, or property — including mandatory CSAM reports to NCMEC.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity.

4. Cookies & Tracking

We use essential cookies necessary to operate the Service (session tokens, CSRF protection, age-gate confirmation). We may also use analytics cookies to understand aggregate usage patterns.

You can disable non-essential cookies via your browser settings. Disabling essential cookies will impair Service functionality. We do not currently respond to Do Not Track signals.

5. Data Retention

We retain account data for as long as your account is active or as needed to provide the Service. Generated content associated with your account is retained for up to 90 days after account deletion unless otherwise required by law. Log data is retained for up to 12 months. Financial records are retained as required by applicable tax law.

6. International Transfers

Our infrastructure is hosted primarily in the United States. If you access the Service from the European Economic Area, United Kingdom, or other regions with data transfer restrictions, your data will be transferred internationally. We rely on Standard Contractual Clauses where required.

7. Your Rights

Depending on your jurisdiction you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data (subject to legal retention obligations).
• Portability: Receive your data in a machine-readable format where technically feasible.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdrawal of Consent: Where processing is based on consent, withdraw at any time without affecting prior lawfulness.

To exercise these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

8. Children's Privacy

The Service is strictly intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, contact us at [email protected] and we will promptly delete it.

9. Security

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encrypted storage at rest, and access controls. No security measure is perfect; please notify us immediately at [email protected] if you believe your account has been compromised.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries, data subject requests, or to report a concern: