01Information we process

Account data includes email, user ID and basic authentication details from enabled social sign-in. Service data includes subscription status, order and payment references, credit entries, generation records and support communications.

Media data includes uploaded photos, selected games and scenes, generated images and necessary file metadata. Infrastructure may also process IP addresses, browser details and request times for delivery, troubleshooting and abuse prevention.

02Why we process it

We use information to authenticate and maintain accounts, fulfill image requests, store and deliver results, administer subscriptions and credits, handle refunds and support, prevent fraud and meet applicable recordkeeping obligations. We do not display your uploads in our public gallery or sell your uploaded photos.

03Photos and AI providers

We validate and resize uploads, remove embedded metadata and store normalized photos privately in Cloudflare R2. When you generate, the photo, selected scene and instructions go to Replicate and Google for the current Nano Banana 2.1 model. Gallery examples are not sent as your identity reference.

Providers process data under their applicable terms and privacy arrangements. We cannot promise immediate deletion from their independent systems or backups, or make unverified zero-retention or no-training guarantees. Do not upload material you cannot authorize these processors to handle.

04Account, billing and other providers

Supabase PostgreSQL stores account, subscription and task/credit records; Better Auth manages sign-in sessions. GitHub sign-in shares the identifier and email needed for login; we do not request repository access. Cloudflare R2 provides private media storage.

Waffo Pancake provides checkout and subscription management. Full card details are entered on the payment service, not through our application. We keep references needed to link orders, manage subscriptions and reconcile payments. Providers and infrastructure may process data outside your country.

05Retention

Upload access lasts 3 days and generated result access lasts 30 days. After expiry, normal access stops and asynchronous cleanup follows; cleanup and backup removal may take longer. Download results you wish to keep before expiry.

Account, transaction, credit and dispute records are retained as needed for account operation, reconciliation, fraud prevention and applicable recordkeeping. Closing an account does not necessarily erase records needed for legal obligations or disputes. Independent providers have their own retention policies.

06Cookies and browser storage

Necessary cookies maintain sessions, verify sign-in flows and remember language. Theme preference is stored locally in your browser. We do not put uploaded photo files in localStorage. Blocking necessary cookies can prevent sign-in.

07Your choices and requests

View images and credit history and manage subscriptions in your workspace. Email support from your account address to request access, correction, export or deletion, or exercise other applicable privacy rights. We may verify ownership before responding and explain any records that must be retained.

Account deletion and stopping renewals are separate requests. Cancel renewal in subscription management as well, or explicitly request both in your email. Do not send passwords, full card numbers or identity-document copies unless necessary and a secure method is separately arranged.

08Security, children and updates

We use private storage, expiring media access, account permissions and server-side verification to reduce risk, but cannot guarantee absolute security. The service is for adults; do not upload children's photos.

Contact us promptly about a suspected data incident or non-consensual image processing. This page shows its update date. Registered operator information will be added before commercial launch.