Privacy Policy

This policy covers the website and the generation platform operated by the company named at the end of this page. Where this policy says "we", it means that company. Where it says "your content", it means the files you upload and the images and videos generated on your account.

We collect four kinds of information, and nothing that is not on this list is collected deliberately.

We do not sell personal data. We do not use your content to train our own models, and we do not license it to anyone else for that purpose.

• To run the service you asked for — generating, storing and delivering your content, and keeping your credit balance correct. Basis: performance of a contract.
• To take payment and keep the financial records the law requires us to keep. Basis: contract, and legal obligation.
• To keep the platform safe — detecting abuse, enforcing the content policy, and meeting reporting obligations where they apply. Basis: legitimate interests, and legal obligation.
• To stop the bonus credits a new account can receive — from a signup offer or a referral link — being claimed over and over from one device, or many times over from one internet connection. Basis: legitimate interests — our interest in not funding the same person many times, weighed against a check that stores nothing on your device and produces a code identifying nobody.
• To fix things — diagnosing errors, measuring capacity, and understanding which parts of the product fail. Basis: legitimate interests.
• To tell you about the product, where you have asked us to. Basis: consent, withdrawable at any time.

Running a generation means sending your inputs to a model provider. We use a small number of processors, each under a written agreement, and each only for the purpose named.

• Model providers — receive the inputs for a generation you request, and return the output. They do not receive your account identity.
• Hosting and storage — hold your account record, your files and our logs.
• Payment processors — take payment and hold the card or wallet details. We never see or store a full card number.
• Email and messaging — deliver the emails listed under "Emails we send", such as sign-in codes and receipts.

When you ask us to edit your material, the edit is made with AI tools. The files you share with us — your footage, and the faces, voices and music in it — are processed by those tools only to make your edit, and kept only as long as that takes, as our Terms say.

• Sign-in codes, when you ask for one.
• Receipts for payments, and notices when a prepaid plan is about to end or has ended.
• Messages about something you asked for, such as updates on an editing request or posts from a blog you subscribed to.

Each of these is part of a service you are using or asked for. We do not send advertising for anyone else.

• A welcome email, once, after you first sign in: a few templates you can start from with what one run costs, our smallest credit pack, and our editing service where we offer one.
• Only if you ticked the box when you signed up: one reminder two days after signing up if you have not generated anything yet, and one reminder when a purchase you started has not been paid two hours later — at most one of those a week.

The box is unticked unless you tick it. If you tick it, a cookie named signup_consent carries your answer from the address step to the code step: it cannot be read by scripts, lasts at most an hour, and is deleted when you sign in with the code, which is when we record your answer. Every one of these emails has an unsubscribe link, and your mail app’s own unsubscribe button works too; either stops them at once, and does not stop receipts or sign-in codes. We keep the date you agreed and the date you unsubscribed for as long as the account exists, as the record of what you chose. Basis: consent for the reminders, withdrawable at any time.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where consent is what we relied on.

You can close your account from your account settings without contacting us. Your profile is erased and your sign-in is permanently blocked, so the account cannot be used again. What you generated on it is removed from your account and retained on our systems for safety, moderation and fraud prevention; write to us if you want it erased as well. If a legal hold applies to your account, closure is refused with the reason shown rather than failing silently.

• Data is encrypted in transit, and at rest in our storage provider.
• Access to production data is limited to the people who need it, and every administrative action against an account is written to an append-only audit record.
• Your content is not readable by other users. Sharing is opt-in and produces a link you control.
• No security is absolute. If a breach affects you and the law requires us to tell you, we will.

Some tools work with images of people — a reference photo, a character sheet, a face to keep consistent between generations. Those images are processed to fulfil the generation you asked for, and for nothing else.

• We do not use images of faces to identify people, and we do not build biometric profiles or templates from them.
• Where a model provider requires a face image to be registered with it before generating, that registration is deleted as soon as the generation finishes — whether it succeeded or failed.
• We do not use your images to train models. See the terms for the full statement.
• You are responsible for having the consent of any real person whose likeness you upload — the content policy sets out what happens when that is not the case.

We set three cookies that are required for the product to work: a session cookie so you stay logged in, a preference cookie for your language, and a preference cookie for light or dark. None of them is used for advertising. The ones below are not required for the product to work, and are described so you can see exactly what they do.

There is a fourth cookie, and only if you arrive on a link we have shared somewhere — a post, a profile, a card. It is called ref_src, it holds the name of that link, and its whole content is a label we chose, such as reddit-august: everyone who followed the same link carries the same value, and it is not an identifier for you. It lets us see which of the places we posted actually brought people, which is otherwise unknowable to us. It cannot be read by scripts or by anyone else’s site, it lasts seven days, and it is deleted when you create an account. We are not going to call it strictly necessary — it is there for our benefit rather than yours, and if you would rather not have it, remove the part of the address that begins ?ref= before you open the link.

We also note where your first visit came from, in a cookie called ft_src. It is set once, on the first page you open, and holds: the campaign tags the link carried (utm_source, utm_medium, utm_campaign and utm_content), the click reference an ad network adds to its links if there was one (gclid from Google, fbclid from Facebook and Instagram), the page you landed on without the rest of its address, the name of the site that sent you, and the time. It cannot be read by scripts, it lasts 30 days and is never renewed. If you create an account in that time, we copy it to your account so we can see which places bring people who sign up and buy, and delete it from your browser; the copy is deleted if your account is deleted. At the same moment we note on your account the browser number from the _ga cookie described below, so that a payment made later without your browser, such as a subscription renewal, can be counted in Google Analytics. For up to ten minutes after you sign up, a cookie named ga_signup holding only the word email or google tells the next page to count the signup; that page deletes it as soon as it reads it. Like ref_src, these are for our benefit rather than yours, and we do not call them strictly necessary.

We also measure how the site is used, with Google Analytics. It counts page views and records which pages are opened, from which country and on what kind of device. It sets a cookie of its own, named _ga, which holds a random number identifying your browser — not you, and not anything you have told us — so that two visits from the same browser can be recognised as one person rather than two. It is not used for advertising and is not shared with advertisers.

There is one place where we do look at the characteristics of the device you are using: when an account is created. Your browser calculates a single value from things it can observe about itself — the size and colour depth of your screen, your time zone and languages, how many processor cores it has, and how it draws a small test image — and sends us that value. This is browser fingerprinting, and we would rather name it than describe it as something milder.

We use it for one purpose only: to check whether the bonus credits a new account can receive — from a signup offer or a referral link — have already been claimed from the same device. We also count, against an irreversible code made from your internet address in the same way, how many times those credits have been claimed from one connection recently — not to identify you, but because one person opening many accounts uses one connection to do it. If they have, the account is still created and works normally — only the bonus credits are withheld, and we tell you so. Nothing is written to your device to do this: the value is calculated fresh each time and never stored on your machine. We do not keep the value your browser sends either. We convert it into an irreversible code using a secret key that never leaves our systems, and keep only that code, which cannot be used to identify you, to recognise you on other sites, or for advertising.

Because those codes are what stop one device or one connection claiming the bonus credits again and again, they outlive the account they were recorded against. When an account is deleted the link between the code and any person is severed, and what remains says only that some device once claimed the bonus. If you believe bonus credits were withheld from you in error — a shared computer at home, in an office or in a library is the obvious case — contact us and we will apply them by hand.

We set no advertising cookies and share no analytics data with advertisers.

The service is not for anyone under 18. We do not knowingly hold data belonging to a minor, and an account we believe belongs to one is closed and its content removed.

When this policy changes materially we will say so in the product before the change takes effect. The date at the top of this page is always the date of the version you are reading.