Privacy Policy

1. Information We Collect

We collect the following information depending on your sign-in method:

• Google sign-in: Name, email address, and profile picture (provided by Google)
• Email sign-up: Name, email address, and password (your password is securely hashed using bcrypt and never stored in plain text)

This information is used solely to provide personalized features such as saved prompts, favorites, and custom tags.

2. How We Use Your Information

• To authenticate your identity and provide access to your account
• To save and sync your prompt configurations, favorites, and settings
• To store images you upload associated with your saved prompts
• To improve our service and user experience

3. Data Storage

Your data is stored securely in our PostgreSQL database. Passwords are hashed using bcrypt (cost factor 12) and are never stored or transmitted in plain text. Uploaded images are stored in Amazon S3 with encryption at rest. We do not sell, trade, or otherwise transfer your personal information to third parties.

4. Cookies

We use session cookies for authentication purposes only. These cookies are essential for the service to function and cannot be opted out of while using the service.

5. Third-Party Services

• Google OAuth - for Google sign-in authentication
• Amazon S3 - for image storage
• Amazon SES - for sending transactional emails (email verification, password reset)
• Google AdSense - for displaying advertisements (may use cookies for ad personalization)

6. Your Rights

• Account deletion — You can delete your account at any time through the profile menu in the app. Click your profile icon, then select "Delete Account."
• Immediate deletion — Upon account deletion, the following data is permanently and immediately removed:
  • Saved prompts and all attached images
  • Favorite tags
  • Custom tags and custom categories
  • Category settings (order, visibility preferences)
  • Uploaded images (permanently deleted from Amazon S3 storage)
• Data portability — You may request a copy of your data by contacting us before deletion
• Right to access — You may request details about what personal data we hold about you

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all data is removed immediately and permanently. No backup copies are retained after deletion.

8. Contact

If you have questions about this Privacy Policy, please contact us at siwooeo@gmail.com.