Effective Date: April 19th, 2026
1. Introduction
Welcome to the AI photo generation service operated by Care Artificial Intelligence Research and Consulting LLC ("we," "us," "our," or the "Company"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy describes the types of information we may collect from you or that you may provide when you use our platform (the "Service") and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This Privacy Policy applies to information we collect through:
- Our website or web application providing AI photo generation services.
- Any other interactions you may have with us where we refer you to this policy.
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue using the Service.
2. Information We Collect and How We Use It
2.1 Uploaded Images, Face Data, and Persona Inputs
- We collect images and other media that you choose to upload to the Service.
- Some uploaded media may contain a person's face or other appearance-related information. We do not collect, generate, or store face geometry, faceprints, facial recognition templates, or other biometric identifiers separate from the uploaded image itself.
- We use uploaded media to provide the features you request, including image editing, virtual try-on, face transfer, chat-based generation, saved media, and persona training when you choose that feature.
- If you upload images to create a persona, we store the training images and related metadata in our Supabase-backed storage and database so the persona can be trained and reused for later generations.
- When uploaded media contains a person's face, we treat that content as face-related data and retain it only for the limited periods described in Section 4 below.
- By choosing to upload media or start persona training, you instruct us to process that content using the service providers described in this Privacy Policy.
2.2 Generated Images and Saved Media
- We may generate images or videos in response to your prompts and uploaded reference media.
- If you choose to save or favorite generated media, we store that media in Supabase so you can access it later.
- Images attached to chats may also be stored to support the chat session, related features, and user-initiated deletion flows.
2.3 Technical and Usage Data
We may collect non‐personal information such as browser type, operating system, referring URLs, and session data for analytics and troubleshooting. This information helps us improve and optimize the Service.
2.4 Third-Party AI and Model Processing
- We use third-party AI service providers to fulfill user requests. Depending on the feature or model selected, providers may include Fal.ai, OpenAI, xAI, and Anthropic.
- To generate, edit, analyze, or summarize content, we may send prompts, uploaded images, reference images, and related processing parameters to those providers.
- For persona training, we upload a ZIP file containing your selected training images to Fal.ai and submit a training job that returns a user-specific model artifact used to provide the persona feature.
- We do not sell face data, use uploaded images for identity verification, or create biometric profiles for facial recognition.
3. How We Share Your Information
3.1 Service Providers
We use third-party service providers to operate the Service, including Supabase for storage and database services, Fal.ai for image, video, and persona-model processing, and OpenAI, xAI, and Anthropic for certain language or multimodal tasks. We share only the information reasonably necessary for those providers to perform the requested service.
3.2 No Sale or Commercial Sharing
We do not sell your uploaded images, generated images, face data, or other personal data, and we do not disclose them for third-party commercial or marketing purposes.
3.3 Legal Compliance
We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
4. Data Retention
4.1 Face Data Retention
We may process photos and videos that contain a user's face in order to provide image generation, editing, virtual try-on, face transfer, chat-based generation, saved media, and persona features. We do not use uploaded media for identity verification or facial recognition, and we do not store biometric templates or faceprints derived from uploaded media.
- One-Time Uploaded Photos or Videos Containing Faces: Retained for up to 30 days after processing so we can complete the request, support retries, investigate abuse, and respond to customer support issues, then deleted or de-linked from active workflows unless you separately save the content in your account.
- Persona Training Images and Metadata: Retained for up to 90 days after upload so the persona can be trained, retrained, and used for follow-up generations that you request. We delete them sooner if you delete the related persona, remove the uploaded images, or delete your account.
- Derived Persona Model Artifacts: Retained only while the persona feature remains active for your account and deleted within 30 days after you delete the persona or your account so queued cleanup processes and backups can complete.
- Saved or Favorited Generated Media, Chat Attachments, or Other Saved Content Containing Your Likeness: Retained while your account remains active so you can access your saved content, and deleted within 30 days after account deletion or earlier if you delete the saved content yourself. If an account is inactive for 24 months, we may delete associated saved media as part of our storage minimization practices.
- Provider-Side Processing: When we use third-party AI providers to process face-related content on our behalf, we instruct those providers to process the content only as needed to provide the requested feature. Such providers may temporarily retain submitted content or derived artifacts for limited operational, abuse-prevention, or legal compliance purposes under their own policies.
4.2 Other Data Retention
- Other Data: Technical and usage data may be retained in aggregated, non‐identifiable form to help us improve our services.
5. Security Measures
We use a variety of technical, administrative, and physical safeguards to protect your data:
- Encryption: Where feasible, data in transit is encrypted using SSL/TLS protocols.
- Access Controls: Only authorized employees or contractors have access to systems storing limited amounts of personal data needed to operate the Service.
- Third‐Party Standards: Our service providers maintain their own security programs and are responsible for protecting the data they process on our behalf.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
6. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal data, such as:
- Access: Request a copy of any personal data we hold about you.
- Deletion: Request the deletion of your personal data, including saved media or persona-related uploads that we store in our systems.
- Withdrawal of Consent: If our processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at the email address below. We will respond within a reasonable timeframe, in compliance with applicable laws.
7. Children's Privacy
Our Service is not intended for individuals under the age of 13 (or the equivalent minimum age depending on your jurisdiction). We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected such data, we will promptly delete it.
8. International Transfers
Our servers and service providers may be located in different jurisdictions. If you access or use our Service from outside the United States, your information may be transferred across international borders and stored or processed in a country different from yours. We strive to ensure that transfers of personal data comply with applicable data protection laws.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we do, we will revise the "Effective Date" at the top of this policy. Your continued use of our Service following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, the data we hold about you, or to exercise your rights, please contact us at: okar.yigit@gmail.com