Biometric Data Notice & Consent

Version 2026-10-04-draft

What we process

The photo you upload contains faces. To place you into a scene while keeping your face exactly yours, our AI providers process facial imagery during generation. This may be considered "biometric data" under laws such as the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, and Washington HB 1493.

Written consent

Before a photo leaves your device, we ask for two separate statements, each with its own checkbox, and we ask again for every photo. The first is your consent to this processing. The second is your confirmation that everyone in the photo has agreed and that, for each child in it, you are their parent or legal guardian or have their parent's permission. Checking the boxes is your written release for us and our processors to use the facial data in that photo solely to create and safety-check the images you asked for.

Retention and destruction schedule

• Original uploaded photos are permanently deleted within 24 hours of upload, whether or not you go on to make a photo. The only exception is a photo we are required by law to preserve and report.
• We do not create or store face templates, embeddings, or geometry, and we do not identify anyone.
• Finished images are kept for 90 days and then deleted automatically, or sooner if you delete your account.
• Deleting your account removes your stored photos from our systems immediately.
• Our AI providers may keep copies of what they process for up to 30 days before deleting them.

No sale, no profiting from biometrics

We never sell, lease, or trade biometric data, and we never use it to identify anyone, for advertising, or to train AI models. Our AI providers process your photo on our behalf to provide this service.

Withdrawing consent

Delete any photo from My photos, or your whole account from the Account page, at any time. If you are pictured in someone else's photo and want it removed, email support and we will take it down. Destruction follows the schedule above.