Privacy, in plain words.

What we store

When you sign in with Google, we store the account details needed to identify you, such as your name, email address, and Google account identifier. We also store your uploaded photos, swap results, credit transactions, and subscription references.

Who processes your information

The service uses Railway for application hosting, PostgreSQL for account and job data, Cloudflare R2 for photo storage, Google for sign-in, and Stripe for payments. Payment card details are handled by Stripe. The face-swap processing provider has not yet been connected; its identity and processing practices will be described here before launch.

Photo retention

Our configured retention target is 24 hours for original uploads after processing finishes, 30 days for results saved to an account, and 24 hours for guest files. You can download or delete saved photos earlier. Deletion removes access immediately and queues removal of the stored file.

Cookies and trial access

Essential cookies keep you signed in and remember your anonymous free trial. We use security and rate-limit signals to protect accounts and limit automated trial usage.

Account deletion

You can request deletion from your account settings. Cancel an active subscription first. Your account access is disabled and photos are scheduled for removal; some payment and audit records may need to remain for accounting and dispute handling.

Before launch

The published policy will include the operating business, contact address, applicable retention obligations, and instructions for privacy requests. Do not upload sensitive photos to a development environment.