Privacy Policy
Last updated: February 15, 2026
1. Data Controller
Lukáš Krása
Jinočanská 68/16, 161 00 Prague 6
Company ID (IČO): 03804984
Email: [email protected]
Given the scope of operations, no Data Protection Officer (DPO) has been appointed. For all matters concerning personal data protection, please contact: [email protected]
2. What Data We Collect
Data Provided by the User:
- Email address (registration)
- Photographs (processed by the service)
- Payment details (processed by Stripe; we do not store card details)
Automatically Collected Data:
- IP address
- Browser and device type
- Usage data (processed photographs, consumed credits)
- Cookies and similar technologies
3. Purposes of Processing and Legal Basis
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the service | Performance of a contract |
| Processing payments | Performance of a contract |
| Customer support | Legitimate interest |
| Improving the service | Legitimate interest |
| Marketing (with your consent) | Consent |
| Legal obligations | Legal obligation |
4. Photo Processing
- Photographs are processed by an AI model (fal.ai) for the purpose of providing the service
- Photographs are stored in temporary storage with no guaranteed retention period
- We do not share photographs with third parties (except for AI service processing)
5. Data Sharing
We share data only with:
| Recipient | Purpose | Location |
|---|---|---|
| Cloudflare | Hosting, CDN, security | EU/US |
| Stripe | Payment processing | EU/US |
| fal.ai | AI photo processing | US |
| Resend | Email delivery | US |
6. International Data Transfers
For data transfers outside the EU, we use Standard Contractual Clauses (SCC) approved by the European Commission.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account and profile | Duration of account + 30 days |
| Photographs | Temporary storage, no guaranteed retention period |
| Payment records | 10 years (legal obligation) |
| Logs | 12 months |
8. Your Rights (GDPR)
You have the right to:
- Access your data
- Rectification of inaccurate data
- Erasure of data ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing
- Withdraw consent at any time
Contact: [email protected]
We will respond without undue delay, no later than one month from receiving your request. In justified cases, this period may be extended by an additional two months.
You may file a complaint with the Office for Personal Data Protection (www.uoou.cz).
9. Automated Decision-Making
The Service uses AI for automated photo processing. This processing does not produce legal or similarly significant effects on the user. It serves solely to provide the requested service (photo enhancement). You may reject the results of AI processing at any time and request reprocessing.
10. Rights for US Residents
California (CCPA/CPRA):
- Right to know what data we collect
- Right to deletion
- Right to opt-out of data sales (we do not sell your data)
- Right to non-discrimination
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA):
Residents of these states have the right to: access data, rectification, deletion, portability, and opt-out of targeted marketing. To exercise your rights, contact [email protected].
11. Children
The Service is not intended for children under 13 years of age. We do not knowingly collect data from children.
12. Security
- Encryption in transit (TLS)
- Encryption of stored data
- Cloudflare infrastructure with advanced protection
13. Security Breaches
In the event of a personal data breach that is likely to pose a high risk to your rights, we will notify you without undue delay via email. We will also report the incident to the Office for Personal Data Protection within 72 hours of discovery, as required by GDPR Art. 33.
14. Cookies
We use only essential cookies required for the service to function (authentication, session). We do not use any analytics, marketing, or tracking cookies.
15. Changes
We will notify you of changes by email or through a notice in the service.
16. Contact
Refund Policy
Last updated: February 15, 2026
Credits
Purchased credits are generally non-refundable.
Exceptions (refund possible):
- Technical error on our part that prevented the use of credits
- Accidental duplicate purchase (within 48 hours)
- Credits were not used at all and the request is within 14 days of purchase (EU consumers only)
Request procedure:
- Contact [email protected]
- Include: account email, purchase date, reason
- We will respond within 48 hours
Right of Withdrawal (EU)
EU consumers have the right to withdraw from the contract within 14 days without giving a reason. By purchasing credits, you expressly consent to the commencement of digital content delivery before the withdrawal period expires and acknowledge that you thereby lose your right of withdrawal (Art. 16(m) of Directive 2011/83/EU).
Processing Refunds
Refunds are processed through Stripe to the original payment method within 10 business days.