Privacy: what happens to your photo

Draft for the MVP. Have this reviewed before launch (subprocessors, GDPR/CCPA/BIPA for face images, contact details).

Encrypted in transit. Photos are sent over HTTPS.
Not stored. Photos are processed in memory and not written to disk on our servers. Your browser keeps the photo and result for up to 1 hour so you can adjust and download, then clears them.
Not used for training. We don't use your photos to train AI models, or share them with other companies for their own use.
You're in control. Use Delete now on the result page whenever you like.
Location data removed. Downloads are re-encoded in your browser, so GPS and other EXIF data are not included.
Accounts. If you create an account, we store your email, credit balance and purchase history. Photos are still not saved.

How this build handles files

Uploads live only in the memory of a single request and are never written to disk, logged or cached. If a hosted GPU provider is enabled, it must not retain inputs or outputs, and it will be listed here as a subprocessor. Server-side storage (for re-download links) is not part of this build.

Contact

Contact details to be added before launch.