Privacy Policy

We collect the minimum needed to run the Service:

• Account data — your email address and display name, via Firebase Authentication (email/password or Google sign-in).
• Generation data — the prompts, settings, and any images, video, or audio you upload, plus the AI-generated outputs and their status/history.
• Usage & credits — your credit balance, purchases, and a record of generations you run.
• Technical data — standard server logs (IP address, timestamps, basic request metadata) used for security and debugging.

We do not collect or store your payment card details. Payments are handled entirely by Lemon Squeezy (see below).

• To provide the Service — authenticate you, run generations, show your history, and manage your credits.
• To process purchases and grant purchased credits.
• To maintain security, prevent abuse, and debug problems.
• To respond to your support requests.

We do not sell your personal data, and we do not use your prompts or generated content to train our own models.

The Service relies on these processors, each with their own privacy practices:

• Google Firebase — authentication, database, file storage, and hosting.
• PiAPI — the AI generation provider. The prompts and media you submit for a generation are sent to PiAPI and the underlying model providers (e.g. Kling, Veo, Sora, Flux, Gemini) to produce your result.
• Lemon Squeezy — our merchant of record for payments. They process your payment and collect any required billing/tax information. We receive only confirmation of a completed order.

You retain rights to the inputs you provide. Generated outputs are produced by third-party models and are subject to those providers' terms. We store your inputs and outputs so you can access your generation history and download results. You can request deletion of your content and account at any time (see Section 8).

We keep your account and generation data for as long as your account is active. Server logs are retained for a limited period for security and debugging. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain records to comply with legal or accounting obligations (e.g. purchase records).

We use a single secure, httpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Data is stored on Google Cloud / Firebase infrastructure and transmitted over HTTPS. We restrict write access to server-side code. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Depending on your location (e.g. under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights — or to delete your account — email gheorghecurcadeveloper@gmail.com.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about privacy? Contact gheorghecurcadeveloper@gmail.com.