Privacy Policy

Current local demo

Photos stay in browser memory until you confirm creation. Signed-in uploads are decoded, checked and re-encoded to remove EXIF/GPS metadata, then stored under random keys in the private local data directory. Reading an upload requires a valid signed reference, its owning account and a live database record. Upload references expire after 24 hours. New uploads are registered for scheduled cleanup; legacy unregistered local files are not swept.

Providers and payment

The current workflow does not send images or topics to external video or moderation providers. It returns a labeled placeholder MP4. Checkout is disabled. The app stores account, task and credit-ledger records in this project's own local SQLite database.

Retention and deletion

New unused uploads expire after 24 hours. When a task is created, source photos are retained for seven days; results expire after thirty days. Access ends at expiry, and scheduled cleanup removes files afterward. Deleting a finished task immediately revokes task, source and result access and queues file cleanup. Active tasks cannot be deleted as a way to cancel generation. Minimal task and credit records remain; submitted support tickets are retained separately. Account-wide deletion, backup handling, notifications and production private object-storage validation remain launch requirements.

Before public launch

The operator, contact details, provider data locations, retention and training terms must be reviewed and published. Content is not automatically public or used for marketing. Analytics is disabled unless configured and consented to. This is a factual local-testing notice; jurisdiction-specific legal review is pending.