Legal

Privacy Policy

Effective June 22, 2026

1. Information we collect

• Account information. Your email address, and — if you sign in with Google — basic Google profile details. Optionally a display name, handle, and avatar you choose.
• Photos you upload. The face photos and any reference images you provide, and the AI-generated images created from them.
• Payment information. Credit purchases are handled by our payment provider, Polar. We receive confirmation of purchases but do not collect or store your full card details.
• Usage and activity. Records of generations, credit transactions, and notable account actions, plus basic technical/log data needed to operate and secure the Service.
• Cookies. Essential cookies that keep you signed in. See our Cookie Policy.

2. Facial images and sensitive data

The photos you upload contain facial images, which may be considered sensitive or biometric data under some laws. We use them only to generate the images you request. To do this, your photos are transmitted to and processed by third-party AI image-generation providers (currently Google (Gemini) and OpenAI). We do not use your photos to train our own models. The AI providers’ own handling of data is governed by their terms and privacy policies, which you should review.

We do not sell facial images, and we do not use them for advertising. You can delete your uploaded photos and generated images, or request deletion of your account, at any time (see “Your rights”).

3. How we use information

• to provide the Service — authenticate you, generate images, and show your results;
• to process credit purchases and maintain your credit balance;
• to secure the Service, prevent abuse, and enforce our Terms;
• to communicate with you about your account and important changes;
• to comply with legal obligations.

4. How we share information

We share information only with service providers that help us run the Service, including:

• Supabase — authentication and database;
• Cloudflare R2 — image storage;
• Google (Gemini) and OpenAI — AI image generation;
• Polar — payment processing;
• Resend — transactional email;
• Vercel and Inngest — hosting and background job processing.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer. We do not sell your personal information.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. Uploaded photos and generated images are retained until you delete them or delete your account, after which we delete or anonymize them within a reasonable period, except where we must retain certain records (for example, transaction records) to comply with law.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit or delete much of your data in the app, or contact us at rayrstudio@gmail.com to exercise these rights. We will respond as required by applicable law.

7. International transfers

We and our providers may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the effective date above and, for material changes, provide additional notice where appropriate.

Questions? Contact us at rayrstudio@gmail.com.