Privacy Policy

Introduction

WePics (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at wepics.app and the WePics iOS app.

Information We Collect

• Account data: the email address you use to sign in (web), or your anonymous RevenueCat ID (iOS); minimal profile data such as your locale and country code.
• Photos you upload: the portrait photos you provide for AI generation. These are processed by our AI provider (Replicate · bytedance/seedream-4.5) solely to fulfill your generation requests and are stored securely in our cloud storage.
• Generated images: the AI-composited images we return to you.
• Usage & technical data: request logs (IP address, user agent, timestamps), device information, error reports. Used for security, abuse prevention, and operational monitoring.
• Payment data: when you purchase a Credit Pack, payment is processed by Creem as our merchant of record. We do not see or store your credit-card details — we receive only the order confirmation and product purchased.

How We Use Your Information

• To provide and maintain our service (sign you in, render images, deliver credits).
• To generate AI couple/wedding portraits based on the photos you upload.
• To process transactions and prevent payment fraud.
• To send transactional emails (sign-in magic links, payment receipts via Creem).
• To run automated content moderation on generation prompts (via the Creem Moderation API) to prevent abuse and protect our community.
• To enforce our Terms of Service and Acceptable Use Policy.

Sharing Your Information

We do not sell user data. We share information only with the third-party processors we depend on to run the service:

• Supabase — authentication, database, file storage (US/EU regions).
• Cloudflare — web hosting, edge functions, DDoS protection.
• Replicate — AI image generation. Your uploaded photos are transmitted to Replicate solely for the duration of a generation request and are not retained by Replicate.
• Creem — payment processing and prompt content moderation.
• Resend — transactional email delivery (magic-link sign-in).
• RevenueCat — iOS subscription management and entitlement state.

We may also disclose information to comply with legal obligations (court orders, subpoenas), to protect our rights and the safety of our users, or to investigate violations of our policies.

Data Security

We use administrative, technical, and physical security measures to protect your personal information, including TLS encryption in transit, encryption at rest, row-level security policies on our database, scoped service-role keys, and content-moderation gating on AI generation. No system is perfectly secure; please notify us at [email protected] if you suspect a security issue.

Data Retention & Deletion

• Automatic deletion: photos you upload and AI-generated images are automatically deleted from our servers after 30 days of inactivity.
• Manual deletion: you can delete all your data at any time through Settings → “Delete account & data”. Once deleted, your photos, generated images, account record, and purchase history are permanently removed.
• Payment records: Creem may retain transaction records as required by tax and financial regulations even after you delete your WePics account.
• Anonymous logs: aggregated, anonymized request logs may be retained beyond 30 days for security analytics and abuse prevention.

Your Rights

Depending on your jurisdiction (GDPR / CCPA / PIPL etc.), you have the right to access, update, port, or delete your personal information; restrict or object to certain processing; and lodge a complaint with a data-protection authority. To exercise these rights, use the in-app “Delete account & data” control or email us at [email protected].

Children’s Privacy

WePics is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us so we can delete it. Uploading photos of minors to generate adult-style portraits is strictly prohibited under our Acceptable Use Policy.

International Transfers

WePics operates globally. Your information may be transferred to and processed in countries other than your own (primarily the United States and the European Union). We use standard contractual clauses and adequate-protection mechanisms required by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the service after the change date constitutes acceptance of the revised policy.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].