Privacy Policy

Last updated: 8 October 2026. Data controller: Rosario Vitale, sole proprietor, Genoa, Italy. Contact for privacy requests: see the contact page.

What we collect

• Account: your email address and a hashed access key.
• Usage: your credit ledger (grants, purchases, spends, refunds) and job records (preset used, timestamps, a hash of your prompt — not the prompt text itself).
• Content: photos you upload (auto-deleted within 24 hours) and generated outputs (kept in your gallery until you delete them or your account).
• Gallery sharing (optional, consent): only if you tick the consent box and share an output, we store a public copy of that image together with its full prompt text (your account and email are never shown). Before publishing, the prompt is checked by our filters and by an AI safety classifier run on Cloudflare Workers AI, and the image by an AI safety classifier run by fal.ai. We keep the date and the version of the consent text you accepted. You can withdraw consent at any time from the app (My shared shots → Remove): the public copy is deleted immediately. When a share is withdrawn or rejected we delete its prompt text and keep only its status, date and reason code. Outputs generated from an uploaded photo cannot be shared.
• Gallery reports: if you report a gallery item we store your reason text with the item (deleted 30 days after the decision) and a daily counter linked to your IP address for 48 hours, only to limit abuse of the report button.

How generations are processed

Your descriptions and uploaded photos are sent to our AI infrastructure providers (fal.ai; hosting and storage on Cloudflare) to produce the output. Payments will be processed by Stripe; we never see your card details. These providers process data under their own data-processing agreements and standard contractual clauses.

What we do NOT do

• We do not sell your data.
• We do not use your uploads or outputs to train AI models.
• We do not show your content to other users — unless you explicitly choose to share an output to the public gallery.

Your rights (GDPR)

You can request access, rectification, deletion or export of your data at any time via the contact page. Deleting your account removes your outputs, uploads, and account data; ledger records required for accounting are kept as legally required.

Cookies

The site itself uses only technical storage (your access key in your browser's local storage). No advertising or profiling cookies.