Privacy Policy

1. Scope and current service

This policy covers the public website, Google and email-code accounts, free and paid image generation, support communications and Waffo checkout. It does not describe the model publisher as the operator of this independent studio. Payment-related processing occurs when you subscribe to a paid plan.

2. Information we process

We process information you provide, your verified email and, when you choose Google sign-in, basic account information from Google, and technical information needed to deliver and protect the service.

• Generation information: your submitted reference image, prompt, chosen visual style, ratio, generation settings, request identifier, status, timestamps and output image.
• Account information: your verified email address, our account identifier and guest-gallery ownership links; Google’s account identifier and display name when you choose Google sign-in. Email login uses short-lived browser-bound codes stored as hashes. We do not request your Google password or access to Gmail, Drive, Contacts or your private Google files.
• Technical and security information: network/IP information, browser and request metadata needed by the hosting provider, an essential random browser identifier, session tokens stored as hashes where applicable, and keyed hashes used for trial-abuse controls. The generation database stores a keyed hash of the network address rather than the raw IP address; that hash is pseudonymous, not guaranteed anonymous.
• Support information: your email, message, optional attachments, transaction or generation identifiers, and the correspondence needed to answer a request. Please send only what is necessary.
• Payment information: the account/order identifiers, subscription plan and billing interval, amount, currency, entitlement, payment/refund status and transaction reference needed to fulfill and reconcile the order. Payment and billing details entered into hosted checkout are handled by the checkout provider; we do not collect full card numbers or security codes on our application servers.

3. Why we use information

We use the information to provide requested generation and downloads; verify sign-in and protect sessions; associate unexpired guest images with your chosen account; enforce trial and capacity limits; respond to support and privacy requests; investigate abuse, errors and security incidents; and meet applicable legal duties. For purchases, it is also used to verify payment, deliver credits and resolve billing or refund requests.

Where a legal basis is required, processing to deliver your requested service relies on performance of the service agreement; essential security and proportionate abuse prevention rely on legitimate operational interests where that basis is available; legally required records rely on applicable legal duties; and optional Google Analytics interactions and source-attribution cookies rely on your choice. Where local law requires consent or another specific basis, that requirement applies. We do not use studio data to make decisions determining eligibility for employment, lending, housing or comparable high-impact outcomes.

4. Service providers and disclosures

We share the information necessary for each requested function. Providers may process some data for their own security, legal or service-management purposes under their policies.

• Cloudflare: website delivery, network security, application execution and storage of account/session and temporary generation data. Privacy information: www.cloudflare.com/privacypolicy/.
• Google Identity Services: sign-in and the Google account chooser/One Tap. Basic account details are sent to us only after you choose to sign in. Google may process network and browser information when its sign-in service loads. Privacy information: policies.google.com/privacy.
• Kie AI: when you confirm Generate, your prompt, settings and any selected reference image are sent to Kie and its model service to produce the requested result. Reference images are uploaded to Kie temporary file storage for processing. Our generation request does not include your login email or payment details. Selecting a file alone keeps it local; pressing Generate submits it. Provider retention is independent of our temporary studio storage. Kie privacy information: kie.ai/privacy-policy. Media and task-log retention information: docs.kie.ai/getting-started.
• Plausible Analytics and Google Analytics: page and usage measurement as explained in the analytics section. Provider policies: plausible.io/privacy and policies.google.com/privacy.
• Waffo Pancake, during checkout: hosted checkout and payment processing as identified on the checkout page and receipt. Payment, fraud prevention, tax, refund and legally required records can be handled by Waffo in its own role. Review www.waffo.ai/privacy and the buyer terms shown at checkout.
• Resend: your email address and a short-lived sign-in code for requested email login, or your email address, message and page path when you use the support form. Codes expire after 10 minutes and are stored only as hashes in our application; delivery providers may retain delivery records under their policies. Privacy information: resend.com/legal/privacy-policy. Our support email service also processes messages and attachments you choose to email to us. Content reports and relevant available prompts, outputs and technical records may be reviewed by the operator to investigate safety or rights concerns. Please do not email highly sensitive information or payment credentials.

5. Prompts, outputs and model improvement

We do not train our own AI models on your private prompts or generated images and do not automatically publish them in our gallery. Public examples are created by our team; publishing a user’s work requires specific permission.

The model provider independently receives and processes generation inputs and outputs. Kie publishes separate retention periods for generated media and task logs in its API documentation. Our 24-hour studio access window applies to this website and is separate from the provider’s retention schedule. Review docs.kie.ai/getting-started and the provider’s privacy policy for its current handling practices.

Do not submit confidential documents, credentials, sensitive personal information or another person’s information without the necessary legal basis and permission. Text-processing requests send the submitted prompt and settings to the configured provider. Reference images are initially previewed locally. Clicking Generate from image sends the selected photo and instructions to Kie for the requested transformation. Uploading alone does not spend credits; confirmed processing reserves one credit, returned if the task fails. Local reference copies are removed from job storage after provider submission; provider retention follows its own policy.

6. Analytics and your choices

When enabled, Plausible provides aggregate page and interaction measurement without setting analytics cookies. Requests can still include technical/network information needed by the provider to produce those measurements. Cookie-free measurement does not mean no data is transmitted.

When Google Analytics is enabled, Google Analytics 4 loads in advanced Consent Mode with analytics storage denied by default. Before a choice, or after Basic visits only, this website sends basic page-view signals without Google analytics cookies. These requests can expose network information to Google. Optional sign-in, generation, example and subscription-choice events, and first/latest-source attribution, are sent to Google only after you allow analytics. Advertising storage, advertising personalization and Google signals are disabled in our tag configuration.

When Google Analytics is enabled, a choice panel appears automatically on the first visit. You can revisit it using Change your Google Analytics choice on this page. Choosing Basic visits only withdraws permission for future optional Google interaction events and clears the accessible attribution and Google analytics cookies. It does not disable basic cookieless page views, Plausible measurement, essential session storage or processing required for a requested sign-in or generation. Browser privacy settings and script blockers may additionally prevent third-party requests.

Analytics events do not include your image prompts, generated-image bytes, email address, Google account ID or payment-card information. Public page locations and validated campaign labels may be measured. We do not sell your personal information or share it for cross-context behavioral advertising, and our application does not use advertising remarketing tags.

7. Cookies and browser storage

Essential cookies protect sessions and result access; optional analytics/attribution storage follows the Google choice described above. Blocking essential cookies may prevent account login or access to guest results.

8. Retention and deletion

Guest results are accessible through the creating browser session. Signing in links that unexpired guest gallery to your account, so you can revisit it after sign-in on another device. Clearing cookies can remove access to unlinked guest results. Generation prompts, settings and output images become inaccessible 24 hours after the request is created. Scheduled cleanup removes them from active application storage; operational delays and platform backups can retain copies beyond the access deadline. This is temporary storage, so download images you want to keep. An expired image cannot necessarily be recovered for an access or export request.

Account profiles and ownership links remain while the account is maintained, until a verified deletion request or another applicable retention decision. Session and sign-in records expire as described above and are removed through scheduled or request-driven cleanup. Signing out does not delete the account. Minimal successful-trial claims, including pseudonymous account/browser/network references, are retained separately while needed to enforce the one-image policy or address abuse. We review continued need when handling a deletion or privacy request.

Support, security and any transaction/refund records are kept for as long as reasonably needed to resolve the issue, meet applicable accounting or legal duties and handle a live dispute. A deletion request may not remove a record we must legally retain or a minimal anti-fraud record where permitted. We will explain an applicable exception and restrict remaining use. Provider-managed analytics, payment records and backups follow the applicable provider’s retention settings and legal duties; this application’s cookie expiry does not erase all provider-held data.

9. Your rights and how to contact us

Depending on the law that applies, you may request access, correction, a copy, deletion, restriction or objection to certain processing, withdrawal of consent, and information about disclosures. You can request account closure or privacy assistance at lanmeiop@163.com. Use the account email where possible and describe your request. We may reasonably verify that the request concerns your account; do not send a password, full payment-card details or identity documents unless a separate, necessary verification process has been explained.

We aim to respond to a verified request within 30 days or the shorter period required by applicable law. If an extension or an exception applies, we will explain it. You may also complain to the competent privacy authority where applicable. Exercising a privacy right does not itself result in discriminatory treatment. If you request information held independently by Google, Kie or Waffo, you may also need to contact that provider.

You may change optional Google Analytics consent without closing your account. Withdrawing consent applies prospectively and does not make prior lawful processing unlawful. Account deletion can remove access to images and purchased entitlements; we will first address outstanding orders, legally required records and any applicable refund rights.

10. Processing locations and transfers

Cloudflare’s distributed infrastructure and providers such as Google, Plausible, Kie and Waffo can process information in other jurisdictions. This website does not promise that all data remains in one country.

Where a cross-border transfer is subject to applicable legal safeguards, we and the relevant provider must use the required legal basis, safeguards or consent. Contact us before using the service if you require a particular data location or transfer arrangement; we have not represented that this public studio provides a dedicated regional hosting or enterprise processing agreement.

11. Security and disclosures required by law

We use HTTPS, signed guest identities, Secure/HttpOnly session cookies, server-side token verification and private image-access checks to reduce unauthorized access. No online service is completely secure. Keep your Google account, email inbox and device secure and download results only to trusted devices.

We may disclose limited information where required by a lawful request, to establish or defend legal rights, or to investigate fraud and protect people or the service, subject to applicable law. If the service is transferred to a new operator, relevant records may transfer with it; we will provide notice and preserve applicable rights.

12. Children

The account, generation and purchasing service is intended for adults aged 18 or older. We do not knowingly solicit personal information from children. If you believe a child has supplied personal information, contact lanmeiop@163.com so we can investigate and take appropriate action.

13. Policy changes and contact

We will update the version and date when our practices change. A material change will receive prominent notice through the website or available account contact before it takes effect where required, and we will obtain a new consent if applicable. This policy is a transparency notice; continued browsing is not a substitute for consent where consent is required. Operator: Leo Ray, individual operator. Privacy, security and account requests: lanmeiop@163.com. Terms of Service: neloimage.com/terms.