Photos and outputs are private. Generation providers process authorized inputs. Account data supports login, billing and delivery. Optional analytics requires consent. Contact support to request deletion.
Identity, email and profile
Google supplies a verified email and basic profile when enabled. Email sign-in uses an expiring, single-use code. You can choose a nickname, private avatar, language and appearance preference. Existing identity and billing records are retained when you link an account. Security sessions can be reviewed and revoked.
Service providers and payments
Inputs and prompts are sent to the configured AI and review services to fulfill your request. Payments are processed by the chosen payment channel. We store payment identifiers, amounts and entitlement records, never full card details. Cloudflare provides infrastructure and email delivery when configured. A queued email does not establish delivery.
Retention and requests
Generated files expire after the configured delivery period. Unassociated inputs are cleaned after the upload retention window. Running and uncertain tasks protect referenced inputs. Profile avatars are retained separately until replaced. Browser drafts expire after 24 hours. Security and transaction records may remain necessary for dispute resolution and applicable obligations. Contact support to request access, correction or deletion; requests are reviewed manually.
Optional subscriptions and measurement
Registration does not subscribe you to marketing email. An explicitly requested Newsletter or Waitlist requires email confirmation and offers unsubscribe links. Optional analytics and advertising measurement are disabled by default. If enabled, the privacy controls describe the choices before measurement tags load; declining does not block creation or payment. Prompts, media, names and email addresses are excluded from measurement events.
Anonymous referral records
When enabled, the server records successful public HTML GET requests with the time, public path and referring domain only, including known AI platform classification. It does not store complete referring URLs, query parameters, IP addresses, raw user agents, cookies or visitor identifiers. DNT and Global Privacy Control requests are excluded. Known bot and test samples are excluded from ordinary source totals. These are page-request counts, not people or sessions. Missing referrers remain unknown. Records expire after 90 days by default; no data is sent to Google by this feature.