Privacy policy.
Last updated 8 October 2026
You trust us with your photos. The short version: free filters never leave your device; AI photos are made only to give them back to you, are private to your account and are deleted after 30 days; we never sell your data and we don't use your photos to train AI.
Who is responsible
Računalniško programiranje, Tomaž Ovsenjak s.p., Mlajtinci 15, 9226 Moravske Toplice, Slovenia ("we"). Questions or requests: [email protected].
What we collect, and why
- Free filters and Beautify: nothing. The photo is edited in your browser and is never uploaded. Beautify finds faces on your device with Google's open-source MediaPipe, loaded from our own server.
- Your email address: to create your account, send sign-in codes, and send emails about your plan (welcome, plan ended). No marketing emails unless you separately agree.
- Photos you upload for AI looks, and the photos we make from them: to make your edit and show it in your gallery. We keep both for 30 days after you make them, then delete them automatically. You can delete any photo earlier in the app.
- Your plan and payments: which plan you have, its status and invoices, so we know what you may do and to keep records the law requires. Card details are entered on Stripe's page; we never see them.
- Technical data: a scrambled (hashed) version of your IP address when you ask for a sign-in code, to stop abuse; and a session cookie that keeps you signed in. We don't use advertising cookies.
- Where you came from: if you arrived from a link with a campaign tag (or another website), we store that tag with your account to see which channels work.
Legal bases (GDPR): providing the service you asked for (Art. 6(1)(b)); records the law requires (Art. 6(1)(c)); security and abuse prevention, our legitimate interest (Art. 6(1)(f)).
AI processing
When you create an AI photo, your photo and the look's instructions are sent to fal.ai, which runs the image model that makes your edit. We ask fal.ai not to keep the request in its history and to delete its temporary copy of the result within an hour; we copy the result to our own storage straight away. We don't use your photos to train AI models, and we don't use them in our marketing.
Photos of other people
Only upload photos of other people if they agree — for a child, only if you're their parent or guardian.
Who helps us
- Hetzner Online GmbH, Germany: our server and database.
- Cloudflare, Inc. (USA): storage for photos (R2) and site images.
- fal.ai (Features & Labels, Inc., USA): runs the AI image models.
- Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA): payments and invoices.
- Resend, Inc. (USA): sends our emails.
- Google LLC (USA): only if you choose "Continue with Google" to sign in.
Transfers to the USA are protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep things
- AI photos and the photos they were made from: 30 days.
- Sign-in codes: one day.
- Your account: until you delete it (Settings → Delete my account), which deletes your photos at once.
- Invoices and payment records: as long as tax law requires (in Slovenia, 10 years).
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to processing, and take your data elsewhere. Write to [email protected]. You can also complain to a data protection authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec).