Privacy Policy

What we collect

When you sign up we store your email, display name, and the authentication token issued by the sign-in provider (Google OAuth or email + password). When you create an image, we process your prompt, the model and size you chose, any reference photos you upload, and the generated image. We log the IP address and approximate location of each request for fraud and abuse prevention and to enforce daily free limits.

How we use it

The free model (FLUX.2) runs on our own GPU server. Premium models run at third-party AI image providers, which receive your prompt and any reference photos needed to create the image. We also run automated safety checks on uploaded photos, prompts and generated images. The finished image is saved to our storage (Cloudflare R2) so you can view and download it. We do not use your uploads or images to train any model.

Advertising and cookies

We do not show ads on AI Photo Generator. We use cookies that are needed to keep you signed in and to protect the service from abuse (for example, Cloudflare’s bot check). If we ever add advertising, we will update this policy first.

Retention

Uploaded reference photos are kept long enough to create your image and are eligible for automatic deletion after 24 hours via a storage lifecycle rule. Generated images stay in your gallery until you delete them — the trash icon on any result removes the active image files used to serve it — or until you close your account.

We may retain a limited, access-controlled sample of uploads or results for longer when it is needed for internal safety and quality evaluation. We minimize associated account information, restrict access, do not publish these samples, and do not use them to train a model. You may ask us to delete data associated with your account at any time.

You can request deletion of your account and all associated data by emailing the address at the bottom of this page.

Sharing

We do not sell your data. We use the following infrastructure, systems, and service providers solely to operate the service:

• Cloudflare — hosting, network, R2 storage, Hyperdrive caching.
• Supabase — managed PostgreSQL database for accounts and generations.
• AI image-generation providers — third-party processors that run the premium models (such as Nano Banana, GPT Image and Seedream), reached through an API service. They receive the prompt and reference photos needed to create the image you asked for.
• Content-safety systems and providers — self-hosted systems and, where needed, service providers that run automated moderation on uploaded photos and generated results.
• Google — Google OAuth when you choose Google sign-in.
• Stripe — payments. We never see or store your full card number.
• Resend — sends account and receipt emails.

Your rights

You can access, export, or delete your data at any time. Email us at the address below and we will respond within a reasonable window.

Security

Traffic is encrypted in transit (HTTPS). Storage at rest is encrypted by the respective providers (Cloudflare R2, Supabase PostgreSQL). Passwords are hashed; we never store plaintext credentials. No system is invulnerable — if you believe an incident has occurred, please email us so we can investigate.

Changes

We may update this policy as the service evolves. The “Last updated” date at the top reflects the most recent change. For material changes we will notify signed-in users by email.

Contact

Questions, requests, or concerns: support@aiphotogenerator.studio.