Privacy Policy

1. Data we process

Account data includes email, profile details, password hashes where applicable, sign-in identifiers and session records. Google or GitHub sign-in supplies the identity information authorised during sign-in. We do not receive your password for those providers.

Service data includes prompts, uploaded reference files, generated media, model settings, task identifiers, status, credit usage and relevant technical diagnostics. Support messages include the information and attachments you choose to send. Avoid submitting unnecessary sensitive personal information or content you are not authorised to share.

Billing records include plan, payment status, amount, currency, order identifiers and subscription dates. Waffo and its payment partners collect payment details; LoveImage does not store full card numbers or security codes. Infrastructure providers may process IP addresses, request details and security logs.

2. Purposes and legal bases

We use data to create accounts, fulfil generation requests, deliver files, administer credits and subscriptions, answer support requests and prevent abuse. To stop one person collecting the signup bonus many times, addresses on known temporary-mail services and “+” aliases on public mail services are refused; a verified new account is counted against its network address and email domain for up to two days; we keep a normalised form of your address (for example without dots or a “+tag” for Gmail) to recognise the same inbox signing up again; and an email domain that produces many accounts in a day may be blocked from new signups for up to 30 days. Where GDPR-type rules apply, service delivery relies on contractual necessity; security and fraud prevention on legitimate interests balanced against your rights; legally required records on legal obligations; and optional tracking on consent where required.

3. AI processing and model training

LoveImage AI does not use your content to train its own AI models. To generate or edit media, we send the required prompts, reference files and generation settings to external services that provide API access, model hosting and inference for the selected tool. These services may forward the request to the selected model’s infrastructure. Available models include OpenAI, Google, ByteDance and Alibaba models; the developer of a model may differ from the service hosting or processing the request. Processing takes place outside LoveImage’s systems, and retention and model-improvement practices depend on the services used. We do not promise zero retention or no training by every external service. Contact us before submitting information that requires special processing terms.

4. Recipients and service providers

We share prompts, reference files and generation settings with external API access, model hosting and inference providers to fulfil generation and editing requests. These include fal and Replicate for supported image-processing tools, and API access services for other selected models. We share data as needed with Waffo Pancake for purchases, hosting/database/storage and email providers for operation, and Google or GitHub when you choose their sign-in. Cloudflare R2 may store uploaded and generated files where configured. Content-safety processing may send prompt text to Waffo’s moderation service. Each recipient receives data relevant to its function.

We do not sell personal information or share it for cross-context behavioural advertising. We may disclose information to comply with valid legal requests, protect users and the service, or carry out a business transfer with appropriate notice and safeguards. Your content is not automatically published to a public gallery by generating it.

5. Cookies and analytics

Necessary cookies and local storage support sign-in, security and preferences. The free no-sign-up trial sets a necessary device cookie and, to keep its daily limit fair, counts renders against that cookie, a hash of browser characteristics (such as screen size, time zone and how the browser renders text) and your network address; these counts expire within two days and are not linked to an account. The trial is protected by Cloudflare Turnstile, which processes browser signals to tell people from automated traffic. Optional analytics, if enabled, may use Plausible, Google Analytics or Microsoft Clarity to understand usage. Analytics may process device, browser and usage information; it should not be treated as collecting no personal data. Our analytics controls let you accept or reject optional analytics and change that choice later. Rejecting optional analytics does not prevent core use.

6. Retention and deletion

Keep your own copies of important files. Free-plan generated files are subject to a 30-day retention limit; paid-plan files are retained while the account and applicable service remain active, subject to deletion requests and legal or security needs. Files older than the free limit may be removed after a plan ends. Scheduled cleanup means deletion is not necessarily instantaneous at the limit.

Account deletion begins a 30-day recovery window; signing back in during that window can restore the account. Scheduled cleanup then removes account data and stored files. Temporary guest uploads are eligible for cleanup after 48 hours, and images made in the no-sign-up trial after 24 hours — unless you sign in on the same device within that time, in which case they move into your account and follow its retention (on a shared device, into whichever account signs in there). Payment providers may retain their own transaction records for legal obligations; their retention is separate from deletion of your LoveImage account.

Operational, support and security records are kept only for as long as needed for their purpose, incident handling or applicable obligations. Provider-managed logs and backups have separate retention cycles. Contact us for information about a specific record; we do not promise immediate erasure from every provider’s backups.

7. Your choices and rights

Settings provides an export of available account, generation, credit and billing records and an account-deletion request. The export is not a copy of every infrastructure log or support message. You may also email [email protected] to request access, correction, deletion, portability, restriction or objection where applicable. We may verify identity and explain any legal exception.

You may withdraw optional consent without affecting prior lawful processing, and complain to your competent data protection authority. Where US state privacy rights apply, you may request access, correction or deletion and appeal a denied request by replying to our decision; we do not discriminate for exercising these rights.

8. Security

We use access controls, hashed passwords where applicable, expiring sessions or tokens and restricted access to stored media. No transmission or storage system is completely secure. Report a suspected security issue to [email protected] without accessing or disclosing another user’s data.

9. International processing

The service operates from the United States and uses providers that may process data in other countries. Their locations and applicable laws may differ from yours. Where legally required, cross-border processing must be supported by an appropriate transfer mechanism. Contact support for the safeguards applicable to your request; this policy alone does not establish a contractual transfer mechanism.

10. Age restriction

The service is for adults aged 18 or over. We do not knowingly collect children’s data. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. Contact and updates

Contact LoveImage AI, United States, at [email protected] for privacy questions. Material updates will be notified through the service or account email, with the revised date shown on this page.