Privacy Policy

• Account data: your email address, name, and profile picture (if you sign in with Google). If you use a password, we store only a secure hash of it (Argon2), never the password itself.
• Your content: photos you upload, prompts you write, and the videos and images you generate.
• Payment records: the plan or pack bought, amount, payment ID and status. Card and bank details are handled by our payment processors; we never see or store full card numbers.
• Usage and technical data: IP address, device and browser type, and server logs that we use for security, fraud prevention and rate limiting.
• Product analytics (first-party): the pages you open and what you click on the site (for example template cards, the Generate button, and the pricing and credits buttons), how you first arrived (the referring website, campaign tags such as utm_source, and ad click IDs in the link you followed), and your device type, browser, operating system and country. Once you sign in, this is linked to your account. Only our own servers collect it; no third-party analytics service receives it. If your browser sends a Global Privacy Control or Do Not Track signal, we do not collect it.
• Support messages: what you send us through the contact form or by email.

• to create and manage your account and sign you in;
• to generate videos and images from your photos and prompts;
• to process payments, add credits and keep billing records;
• to keep the Service safe: moderating content, preventing fraud and abuse, and enforcing our Terms;
• to understand which pages, templates and features people use and where our visitors come from, so we can improve the Service and our marketing;
• to answer support requests and send you important messages about your account;
• to meet our legal, tax and accounting obligations.

We process your data on the basis of your consent when you sign up and use the Service, and where needed to comply with the law.

We share personal data only with service providers that help us run the Service, and only as much as they need:

• AI providers (fal.ai, Higgsfield, Replicate): receive your photo and prompt to generate the result.
• Cloudflare: stores media (R2), delivers it through its CDN, and protects the site.
• Amazon Web Services: hosts our servers in India and provides content moderation.
• Razorpay and Dodo Payments: process payments. Dodo Payments may act as merchant of record for international purchases.
• Google: if you choose Google sign-in.
• Authorities: when required by law, or to report illegal content such as child sexual abuse material.

We do not sell your personal data, and we do not use advertising trackers or third-party analytics. Content you share to Community is visible to other users until you unshare it.

Our servers are in India, but some of our providers (for example the AI providers and Cloudflare) process data in other countries. When data leaves India, we rely on providers that offer appropriate safeguards and transfer only what is needed to provide the Service.

• Account data: for as long as your account is active.
• Uploads and generated content: until you delete them, or until you delete your account.
• Payment records: for as long as tax and accounting laws require (in India this is commonly 8 years).
• Security logs: for a limited period, then deleted.
• Product analytics events: up to 13 months, then deleted.

You can do these yourself, at any time:

• Download your data from Settings.
• Delete individual creations from your assets.
• Delete your account from Settings. Your media is deleted and your personal data is anonymised. Payment and credit records are kept only as required by tax and accounting law, without your identifying details.

Under the Digital Personal Data Protection Act, 2023 you also have the right to access, correct and erase your personal data, to withdraw consent, to nominate someone to exercise your rights if you die or become incapable, and to have grievances addressed. Withdrawing consent means we can no longer provide the Service to you. To use these rights, contact us at [email protected].

We protect your data with HTTPS everywhere, hashed passwords, signed and expiring links for private media, and strict access controls. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a data breach as the law requires.

The Service is for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

We use only strictly necessary cookies to keep you signed in. Our first-party analytics uses your browser's local storage, not cookies. See our Cookie Notice for the full list.

We may update this policy from time to time. We will post the new version here and update the "Last updated" date, and for significant changes we will give notice on the site.

For privacy questions or complaints, contact our Grievance Officer: Grievance Officer, Mouse Art, Namchi, Sikkim 737126, India, [email protected]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

You can also reach us through our contact page.