Privacy
This page describes how the software actually behaves. Have it reviewed by counsel before you launch commercially.
What we store
The portrait photo you upload, the portraits generated from it, and the settings used to generate them. Uploads are limited to 10 MB and must be JPG, PNG or WEBP.
Metadata is stripped
EXIF data - which can include GPS coordinates and device identifiers - is removed from your photo before it is stored. Original filenames are discarded.
Who can see your images
Only you. Images live in private storage buckets with no public URLs. Viewing one requires an ownership check followed by a signed link that expires after 300 seconds. No other user can see your images, and they are never shown in any gallery.
Retention
Uploaded photos are deleted automatically 30 days after upload. Generated portraits are kept until you delete them. Deleting removes the stored file itself, not just the database record.
Training
Your photos are not used to train any model, by us or on our behalf.
Third-party image providers
To generate a portrait, your photo and the assembled instructions are sent to a third-party image-generation provider (OpenAI or Google, depending on configuration and availability). Their handling of that data is governed by their own terms.
Content provenance
Generated images carry provenance markings applied by the provider that rendered them. Images from Google's models include an invisible SynthID watermark; images from OpenAI include C2PA content credentials in their metadata. These markings identify the image as AI-generated and cannot be removed by us. The provenance applied to each portrait is shown on its detail page.
Consent
You must confirm at upload that you are the person in the photo or have their permission. We record when that confirmation was given.