Let's talk about your photos.

Accounts and sign-in

We use Google or GitHub sign-in and store the provider's account identifier and verified email address. We request only sign-in permissions, do not read your email, cloud files or repositories, and do not retain provider access tokens. Sign-in uses necessary HttpOnly cookies and request limits. If email sign-in is enabled, Resend delivers verification codes and Cloudflare Turnstile helps prevent abuse. There are no advertising trackers.

Optional website analytics

We load Google Analytics 4 only after you consent to analytics. Analytics cookies measure page views, creation starts, completed previews, completed stories and downloads. Analytics stays off before consent and after refusal. Refusing does not affect sign-in, creation or downloads. You can withdraw consent at any time through Analytics settings in the footer.

We do not send photos, names, email addresses, dates, messages, story or order identifiers, URL parameters or gift tokens to Google Analytics. Gift, login and checkout pages do not load analytics. Analytics cookies are set for up to 180 days, and your consent choice is saved in this browser. Google provides analytics and may process technical and usage data abroad. See the Google Privacy Policy. Advertising personalization and Google signals are disabled.

Photos and AI generation

Both people in the photos must be at least 18 and consent to uploading and creation. Data is stored in Cloudflare D1 and photos in a private R2 bucket. During generation, reference photos are sent to fal, a third-party AI generation service. Anyone holding a temporary fal URL may be able to access its image. Deleting a story here does not mean third-party copies are deleted at the same time.

Content safety screening

Before generation, text you enter, including names, keepsake messages and custom destinations, is sent to Waffo for prompt safety review, with additional Google Gemini text screening through fal / OpenRouter. Prompt review does not send reference photos to Waffo. Both text reviews must explicitly approve before generation continues. Third-party processing and retention are subject to their policies.

Before creation and delivery, photos and scene text are screened by fal's image safety classifier and Google Gemini visual models through fal / OpenRouter. These services may process photos and text; we cannot guarantee their copies disappear immediately when you delete a story here. We store only content fingerprints, moderation categories, status and timestamps, not free-form responses from moderation models. Related moderation records are deleted with a story. Screening can make mistakes and does not verify identity, adult age or consent.

Who can see your photos?

Your account manages your own stories. Anyone with a gift link can view finished images, but cannot view original uploads or manage the story. Revoking the link prevents future access, but cannot recall downloads or screenshots. Joining the beta does not grant us permission to use your photos in public marketing.

Retention and deletion

There is currently no fixed automatic deletion period. Download your results promptly and delete unwanted photos from the story page. Deletion blocks further access and removes images from our storage; a background service retries if storage fails. Stories with unconfirmed payments require order resolution first so a later payment does not leave you without delivery.

After a story is deleted, we retain necessary account, allowance and order records to prevent repeated free claims and handle payment disputes. These exclude deleted photos and messages. Request account or other data deletion through the contact page.

Payment and contact information

Checkout is handled by your choice of Stripe (Managed Payments) or Waffo Pancake (WeChat Pay). We send your checkout email and necessary order and account identifiers to the selected payment provider to reconcile payments and credits. Reference photos are not sent to payment checkout. Stripe and its Managed Payments service process payment data under their policies. See the Stripe Privacy Policy.We do not store credit card details. We retain order identifiers, products, amounts, currencies and payment status. The contact form is used to address your request. Signing in or purchasing does not automatically subscribe you to marketing emails.