Terms, privacy and refunds

Privacy Policy

1. What we collect

Account (optional): with Google sign-in we receive your email, name and profile photo URL. Shooting data: camera video and voice travel directly between users (P2P) or via an encrypted relay, and are never stored on our servers. During a shoot, the video that travels is your original camera feed before background removal; the background is removed on the receiving device's screen — meaning your peer's device does receive your original feed, just like a regular video call. A finished strip is stored only if you choose to save it to your gallery. Payment details (card numbers, etc.) are collected and processed directly by our payment provider Dodo Payments (Polar for earlier payments); we keep only order and settlement records.

2. Purpose and retention

Account and gallery data are used only to provide the service and are deleted when you delete your account. Payment and transaction records are retained for 7 years in de-identified form as required by commerce and tax law, then destroyed.

3. Saving and consent

Saving a photo taken by two people requires consent from both, verified server-side. Gallery photos are visible only to you and can be deleted at any time. We do our best to keep your gallery photos safe, but we can't guarantee they'll never be lost, for example in a service outage. Save the ones that matter to your device with the download button — downloading is always free.

4. Overseas processing and third parties

When you use AI polish, the finished strip image is sent to OpenAI OpCo, LLC (servers in the US, Image API) for processing. A strip taken by two people can be sent only after both people agree. When you use "frame from a friend's photo", your photo, reduced on your device to 1024 pixels on the long side, or a character image is prepared for pose generation. A cut-out of a person made on your device (or the reduced original for characters and when the cut-out fails) is sent to Google or OpenAI OpCo, LLC, depending on the layout and poses, to create the pose panels; and the finished panels, together with a reduced copy of the person image, are sent to OpenAI OpCo, LLC to check the result (all on servers in the US). We do not store the uploaded photo; only the finished frame is saved to your private gallery. Per the paid API policy, images sent are not used for model training. Camera frames from the shoot (such as your room) are never sent. Other processors: Supabase Inc. (account/gallery hosting, Seoul region), Dodo Payments, Inc. (payments, Merchant of Record), Polar Software Inc. (earlier payments and their refunds, Merchant of Record), Cloudflare Inc. (video/voice relay when P2P fails — nothing stored), Vercel Inc. (web hosting and visit analytics).

Overseas transfer details (Korean Personal Information Protection Act, Article 28-8(2))

Items: the images described above (including the faces in them)
Country: the United States (Google may also store or cache data transiently in other countries where it has facilities)
When and how: when you start AI polish or frame creation, over an encrypted connection (HTTPS)
Recipients and contacts: OpenAI OpCo, LLC (privacy@openai.com); Google LLC and its affiliates (legal-notices@google.com; for Gemini API paid services billed to a Korean account, the contracting entity is Google Cloud Korea LLC)
Purpose: the polishing, photo check, pose-panel creation and result check described above
Retention: after returning the result, OpenAI keeps abuse-monitoring logs for up to 30 days (longer if required by law or reasonably necessary to protect its services or third parties from harm), and Google keeps logs for a limited period to prevent prohibited use and for required legal disclosures; neither uses them to train models or improve products.
How to refuse, procedure and what happens: no request is needed: if you don't use AI polish or frame from a friend's photo, no photos or images are sent to OpenAI or Google. You only lose those two features; shooting, saving and downloading work as before.

5. Your rights and contact

You may request access, correction or deletion of your personal data — send it from the Contact page (choose “My data”) and we handle it within 10 days. Deleting your account destroys your personal data; transaction records are kept de-identified per section 2. Privacy officer: Kortress (contact email below). Cookies are used only to keep you signed in.