Your likeness

• We use uploaded source photos only to deliver your requested generations and never to train models. If a video is sent to our backup video provider, that provider's terms allow it to use what it receives to improve its models (see Subprocessors).
• Uploaded source photos are deleted 30 days after they were last used (a daily scheduled job), together with any copy registered with our video provider, unless a lawful exception applies (legal hold, fraud, or safety investigation). Content sent to our backup video provider is kept and deleted under that provider's own terms.
• Generated outputs are user-managed through studio history and export controls.
• You can request deletion via in-app controls or a formal privacy request.

Security controls

• TLS 1.3 encryption in transit.
• AES-256 encryption at rest for stored assets.
• Security and operational logs retained on a proportionate rolling basis.
• Sub-processors (Supabase, Stripe, Google Cloud (Vertex AI), Google (Gemini API), fal.ai (Features and Labels Inc.), Cloudflare, Vercel, Upstash, Google Workspace (Gmail SMTP relay), Sentry, Google Analytics (Google LLC), Google Ads (Google LLC), OpenAI, BytePlus (ByteDance group) — ModelArk, Higgsfield (Higgsfield Inc.)) listed with regions and transfer mechanisms in our Sub-processors page.

Retention summary

We apply data minimization by default. Uploaded source images are kept only as long as needed for generation and lawful operations. Billing records follow statutory accounting periods. Full category breakdown:

Your rights

• UK and EU users: access, rectification, erasure, restriction, portability, and objection where applicable under GDPR.
• Submit a privacy request for DSAR or deletion workflows — identity verification may be required.
• Report abuse (NCII, impersonation, child safety) through the dedicated abuse channel.