Privacy Policy

1. Data we collect

• Account data: your email address, name and avatar if you sign in with Google, chosen language, and plan.
• Content you provide: prompts, uploaded images, and the files generated for you.
• Transaction data: purchases, subscription status, and credit balance history. Card details are processed by our payment providers and never touch our servers.
• Technical data: IP address, browser information, and usage logs needed for security, rate limiting, and abuse prevention.

2. How we use your data

We do not sell your personal data and we do not use your uploaded photos or generated results to train our own models.

• To provide the Service: run your generations, store your files for your plan’s retention period, and maintain your credit balance.
• To process payments and prevent fraud and abuse.
• To send transactional emails (account, billing, security).
• To improve the Service using aggregated, non-identifying usage statistics.

3. Sharing with service providers

To operate the Service we share the minimum necessary data with processors acting on our behalf:

• AI model providers (e.g. Kie.ai) — receive your prompts and uploaded images to perform generations;
• Supabase — authentication and database hosting;
• Vercel — application hosting; Cloudflare — DNS and media delivery (R2 storage);
• Payment providers (e.g. Stripe) — payment processing and billing;
• Resend — transactional email delivery.

4. Storage and retention

Generated files are stored for the retention period of your plan (listed on the Pricing page) and are deleted automatically afterwards. Account data is kept while your account exists. If you delete your account, we delete or anonymize your personal data within 30 days, except records we must keep for legal or accounting reasons.

5. Cookies

We use only functional cookies: session authentication and your language preference. We do not use third-party advertising cookies.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us at support@nanobananalab.io — we respond within 30 days.

7. Children

The Service is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data.

8. Changes

We may update this Policy from time to time; the “Last updated” date reflects the latest version. Material changes will be announced on the site or by email.