Privacy Policy
Information we collect
Account information: your email address, and your name if you provide one. If you sign in with Google, we receive your email address, name and profile picture from Google.
Usage information: the prompts you submit, the generation settings you choose, the images you generate, and your credit transactions. This is what makes your history, favourites and ledger work.
Technical information: standard request data such as timestamps and error diagnostics, used to keep the service reliable and secure.
How we use your information
To provide the service: generating images, storing them privately for you, tracking your credit balance and letting you sign in.
To protect the service: detecting abuse, enforcing rate limits and investigating errors.
To communicate with you: transactional email such as confirmation and password reset messages, and replies when you contact support.
Your images and prompts
Generated images are stored in private storage scoped to your account and served through short-lived signed links. Other users cannot browse or access your gallery.
Prompts are sent to our AI model provider to produce your images. We do not sell your prompts or images, and we do not publish them.
Deleting an image from your gallery removes both the stored file and its database record.
Data retention
We keep your account data, images and credit history for as long as your account is active. If you ask us to delete your account, we remove your personal data, images and prompts, retaining only records we are required to keep for accounting or legal reasons.
Third parties
We rely on infrastructure providers for hosting, authentication, database and storage, and on an AI model provider to generate images. These providers process data on our behalf under their own security commitments.
We do not sell personal information, and we do not use your prompts or images for advertising.
Security
Access to your data is enforced at the database level with row-level security policies, so requests can only ever read rows belonging to the authenticated account. Credentials are handled by our authentication provider and never stored in plain text.
Your rights
You can access your data in the app at any time, correct your profile details, delete individual images, and request full account deletion. Depending on where you live you may also have rights to data portability or to object to certain processing.
Children
The service is not intended for anyone under 13, and we do not knowingly collect information from children.
Changes to this policy
If we make material changes we will update this page and, where appropriate, notify you by email. Continuing to use the service after a change means you accept the updated policy.
Contact
Questions about privacy or a data request? Email Info@xmdigitalservices.com.
Data controller: XM DIGITAL SERVICES LLC, 30 N GOULD ST STE N, SHERIDAN, WY 82801.