Summary

We collect and process only the minimum data necessary to generate images and to operate the Service securely and reliably. You choose which model provider handles your request. Your content is transmitted to that provider and processed under their privacy policy. Processing occurs in the United States.

We do not sell your personal information, we do not use it for advertising, and we avoid retaining it longer than needed.

Scope

This Policy explains how we handle information when you use the Service, including our website, API, and any related apps or interfaces.

Information We Collect

We collect only what is needed to fulfill your requests or is technically required:

1. Content you submit

   Prompts, parameters, and any files or images you upload to generate outputs.

2. Generated outputs

   Images produced by the Service (kept only if you choose to save/download or as transient cache to complete delivery).

3. Technical and usage data (minimal)

   IP address, timestamps, request/response size, model selection, error codes, and similar diagnostic data needed to provide, secure, rate‑limit, and debug the Service.

4. Support communications (optional)

   If you contact us, we process the information you provide to resolve the issue.

Note: Prompts and uploads may include personal data if you include such information in them. Please avoid submitting sensitive personal data unless strictly necessary.

Why We Use Your Information (Legal Bases)

• Performance of a contract – to generate images you request and deliver the Service.
• Legitimate interests – to keep the Service secure, prevent abuse, measure reliability, and improve stability (without profiling or advertising).
• Consent – where you opt into optional features (e.g., saving galleries, email updates). You may withdraw consent at any time.

We may also process data to comply with legal obligations (e.g., valid law‑enforcement requests).

Model Providers and Where Your Data Goes

You choose the model used for your request; your content is sent to the corresponding provider:

• openrouter.ai → Gemini Image Model(s)
• OpenAI → Image Model(s)
• fal.ai → Various Image Models

Each provider processes your content according to their privacy policies and terms. Processing takes place in the United States. Where possible, we configure providers to minimize retention and to opt out of training on your content. However, retention and usage are ultimately governed by each provider’s policy.

International Data Transfers

Your data is transmitted to and processed in the United States and/or the European Union (EU/EEA) by the providers listed above and by our infrastructure partners, including Cloudflare (for CDN, edge security, and performance). Where required, transfers outside your region are supported by appropriate safeguards (e.g., Standard Contractual Clauses) or other valid transfer mechanisms provided by those providers.

Retention

• Content (prompts/uploads/outputs): Stored only transiently to fulfill your request and deliver the output. Default transient cache up to [24 hours]; after that, we delete it unless you explicitly save it.
• Logs/diagnostics: Minimal technical logs retained for [30 days] to ensure security, reliability, and abuse prevention, then deleted or anonymized.
• Support tickets: Kept for [12 months] unless you request earlier deletion (subject to legal holds).

You can request deletion at any time (see Your Rights below).

Cookies and Similar Technologies

We use only strictly necessary cookies or local storage needed to operate the Service (e.g., session management, rate limiting, model selection). We do not use cookies for advertising. If we introduce analytics, we will update this Policy and provide controls.

Security

We use reasonable administrative, technical, and organizational measures to protect data, including encryption in transit (TLS), least‑privilege access, and auditing. No system is 100% secure; you are responsible for using strong authentication and safeguarding your devices.

Children’s Privacy

The Service is not intended for children. If you are under the age of 16 (or the age of consent in your jurisdiction), do not use the Service. If we learn we have collected data from a child, we will delete it.

Your Rights

Depending on your location, you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your data protection authority.

To exercise these rights, contact [email protected]. We may need to verify your identity to process your request.

California/US Disclosures (CPRA and similar laws)

We do not sell or share personal information for cross‑context behavioral advertising. We process only what is necessary to provide the Service and for security/fraud prevention. You may exercise access/deletion/opt‑out rights via [email protected].

Third‑Party Subprocessors (Overview)

We update this list as providers change. Material changes will be reflected in this Policy.

Automated Decision‑Making / Profiling

We do not use automated decision‑making that produces legal or similarly significant effects about you. Model outputs are generated purely to fulfill your request.

User Responsibilities

• Do not upload content you do not have the right to use.
• Avoid submitting sensitive personal data where possible.
• Respect third‑party rights and applicable laws.

Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new effective date. If changes are material, we will provide additional notice where required.

Contact

If you have questions or requests about this Policy or our data practices, contact:

Mirko Jahn

Email: [email protected]