Privacy Policy

Account data: your name, email address and a bcrypt hash of your password. We never store your password in a readable form.

Content data: the images you upload, the images generated from them, and the text you enter (custom instructions, campaign briefs, ad copy).

Usage data: credit transactions, render history, and standard server logs including IP address, for security and abuse prevention.

Payment data: if you buy credits, your card details are entered on Stripe's own checkout page and are never seen or stored by us. We receive only the outcome of the payment and the plan purchased.

Mobile app data: the photo you choose to upload, and nothing else from your device. See “The mobile app” below.

We do not use third-party advertising or analytics trackers, and we do not sell personal data.

To provide the service you asked for (performing contract): storing your files, generating images, metering credits.

To keep the service secure and prevent abuse (legitimate interests).

To meet legal and accounting obligations.

AI providers. To generate an image, the source image and prompt are sent to the configured AI provider. To generate ad copy, the campaign brief is sent to Anthropic (Claude). These providers process the data to return a result.

Stripe, our payment processor, if you buy credits. Stripe receives your email address and the amount, and handles your card details directly under its own privacy policy. We never receive your card number.

Our email provider, if you use the contact form, in order to deliver your message to us.

Infrastructure providers used to host the application and store files.

Nobody else, unless we are legally required to disclose.

Generated images are retained for 7 days by default and then purged.

Source uploads are kept while the associated render exists, and are deleted when you delete the render.

Account records and credit ledger entries are kept while your account is open, and afterwards only as long as needed for accounting and legal purposes.

Uploads and renders are stored outside the public web root and are served only through an authenticated route that checks ownership on every request. A file is readable by a third party only if you explicitly publish it.

Passwords are hashed with bcrypt. Website sessions use signed, HTTP-only cookies. The mobile app uses a signed access token held in the device keychain (iOS Keychain / Android Keystore), not in general app storage.

Repeated failed sign-in attempts from the same network are rate limited, and sign-in gives the same response for an unknown email as for a wrong password, so the service cannot be used to discover whether an address is registered.

Photos. Choosing a picture uses your device's own photo picker, which hands the app only the single image you select — the app is never granted access to your photo library at all, so it cannot read, scan or index anything else in it. If you prefer to take a new picture instead, the app asks for camera permission.

Saving results. If you choose to save a finished image, the app asks for permission to add it to your camera roll. It only ever writes the image you asked it to save.

Location. Photo location metadata is not requested and is not used.

On-device storage. The app stores your access token in the device keychain, plus ordinary app caches. Signing out deletes the token from the device.

No tracking. The app contains no advertising, analytics or tracking libraries, no advertising identifier is collected, and no data is shared with data brokers.

Deleting the app removes the token and local caches from your device. To delete the account and its content, use the website or contact us.

Depending on where you live you may have rights to access, correct, export, delete or restrict processing of your personal data, and to object to processing.

To exercise any of these, contact {{CONTACT_EMAIL}}. You can delete individual renders yourself at any time from your gallery.