Privacy

What this service stores, why, and for how long.

What is collected

• Your brief. The text you type, and anything in it. It is sent to the AI providers listed below and stored with your project.
• Your designs. The generated files, including a replay record containing the brief and the prompts behind the design.
• Your account. A signed browser cookie holds your guest balance. When email sign-in is enabled, Supabase verifies your email and the server links its verified identity to your designs and credits. Session cookies are inaccessible to page scripts.
• Purchases. When payments are enabled, Stripe processes checkout. The server stores the purchase reference, package, amount, currency and credit-accounting status. Card numbers are handled by Stripe, not stored by this app.
• A hash of your network address. Stored salted and one-way, only to check whether a welcome allowance has already been issued to that connection. The address itself is not kept.

What is not collected

This app does not store card numbers or account passwords. It does not include advertising or analytics trackers. Your email is handled by the configured sign-in provider and displayed to you while signed in.

Who your brief is sent to

Generating a design means sending your brief to third-party model providers — Anthropic for the design and review models, and whichever image or video provider you select, which may include OpenAI, Google, or fal.ai. Their own terms and privacy policies govern what they do with it. Do not put confidential information, personal data about other people, or patient information into a brief.

How long it is kept

Finished projects are deleted automatically after the retention period shown on the site. Account records persist while the account is in use. Server logs are short-lived and are not used to build a profile of you.

Who can see your design

Project pages are served at unlisted addresses. Anyone with the link can open one, so treat the link as the secret. The replay file in particular contains your original brief.

Your choices

A guest account cannot be recovered after its cookie is lost. When sign-in is enabled, link your browser account before clearing cookies to recover it using your email. To request removal of a project or account, contact the operator using the details below.