Privacy

The short version

The photo refresher runs entirely in your browser and sends us nothing at all — no account, no upload, no copy. Everything below applies only if you sign in and generate photos.

What we collect

• Your identity. When you sign in with Google we receive your email address and a Google account identifier. We do not receive your password, your contacts or anything else from your Google account.
• The photos you upload and the photos we generate from them.
• Your credit history — what you bought, what each generation spent, and any refund.
• Technical logs kept by our server and by Cloudflare, including IP addresses, for security and for finding faults.

We do not use advertising or analytics trackers, and there is no cookie banner because the only cookies we set are the ones that keep you signed in.

Why, and on what legal basis

Your identity, your photos and your credit history are processed to provide the service you asked for — that is performance of a contract. Security logs are processed on the basis of our legitimate interest in keeping the service working and free from abuse.

Who else processes it

• Supabase — sign-in and your account identity.
• Cloudflare R2 — storage for uploaded and generated photos.
• fal.ai — runs the image generation and writes the listing text. Your photo is sent there through a link that expires after fifteen minutes.
• Polar — takes the payment. Polar is the seller of record, so your card details go to them and never reach us. We never see or store a card number.

Some of these providers process data outside the European Economic Area. We do not sell your data to anyone, and no one on that list is permitted to use your photos for anything other than performing the task we ask of them.

How long we keep it

• Photos you upload are deleted 30 days after upload.
• Photos we generate are deleted 90 days after generation.
• Your account and credit history are kept while your account exists.

Deletion of the files is automatic — a job runs every hour and removes what has expired.

Your rights

You can see everything we hold, take a copy of it, correct it, or have it erased. Two of those you can do yourself, immediately, from your account page: download a copy of your data, or delete your account and every photo with it. You also have the right to complain to your national data protection authority.

Contact

Write to hello@wornfy.com for anything on this page, including a request we have not built a button for.