Privacy Policy

Last Updated: May 30, 2025

Welcome to PhotoFuture! We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

a. Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Account Information: When you register using Google Single Sign-On (SSO), we collect your email address and Google ID as provided by Google to create and manage your account.
  • Uploaded Content: We collect the face photographs you upload and the text prompts you provide for the purpose of generating avatars.
  • Payment Information: When you purchase credits, we use Stripe, a third-party payment processor. We do not directly collect or store your credit card information. Stripe processes your payment details, and we may receive information such as your purchase tier, credits purchased, transaction amount, and a Stripe Session ID for record-keeping.

b. Usage Data

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

2. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

  • Create and manage your account.
  • Provide the core service of generating AI avatars based on your uploaded photos and prompts. This involves sharing your uploaded images and prompts with our AI service provider (Replicate API).
  • Process payments for credit purchases through Stripe and maintain a record of your transactions.
  • Manage your credit balance.
  • Display your generated avatars and generation history.
  • Notify you about updates to our Service.
  • Monitor and analyze usage and trends to improve your experience with the Service.
  • Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
  • Respond to your comments, questions, and provide customer support.

3. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

a. By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

b. Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including:

  • AI Model Provider (Replicate): Your uploaded face images and text prompts are sent to Replicate's API to generate the avatars. Replicate's use of your data is governed by their privacy policy.
  • Payment Processor (Stripe): Your payment information is processed by Stripe for credit purchases. Stripe's use of your data is governed by their privacy policy.
  • Cloud Hosting Providers: Our application and your data (including user accounts, job details, input/output image paths) are hosted by cloud service providers (e.g., Supabase).

c. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. Data Storage and Security

We use administrative, technical, and physical security measures to help protect your personal information. We store your account information, avatar job details (including prompts, input image paths, and output image paths), and purchase history in our database (Supabase).

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information.

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

5. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

  • The right to access – You have the right to request copies of your personal data.
  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

6. Cookies and Tracking Technologies

We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Service to help customize the Service and improve your experience. When you access the Service, your personal information is not collected through the use of tracking technology. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Service.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • By email: mrphuripat.sunopak@gmail.com