Privacy Policy

Account information. When you create an account we collect your email address and authentication identifiers. We do not store passwords in clear text.

Billing information. Subscription payments are processed by Stripe. We never receive or store full card numbers — Stripe handles all payment data under PCI-DSS standards. We retain limited transaction metadata (plan, status, invoice ID).

Prompts & generated content. Text prompts you submit and designs generated by the AI are associated with your account so you can access your history and we can enforce fair use, billing and safety policies.

Usage data. Page views, device type, browser, approximate location (from IP) and interactions with the app.

Google Analytics 4. We use GA4 to understand how visitors use the Service. GA4 may set cookies and collect anonymized usage data.

Meta / Facebook Pixel. We may use the Meta Pixel to measure the effectiveness of advertising and improve relevance of ads shown on Meta platforms.

Cookies. We use strictly necessary cookies for authentication and session management, plus analytics cookies as described above. You can control cookies through your browser settings.

To provide, operate, improve and secure the Service; to process subscriptions and billing through Stripe; to generate AI designs from your prompts; to communicate service updates; to detect fraud and abuse; and to comply with legal obligations.

Designs are generated by AI models based on the prompts you provide. Generated content may be stored to power your design history and to enforce safety, copyright and fair-use policies. We may use aggregated, de-identified data to monitor and improve quality.

We share data only with vetted processors strictly to operate the Service: our cloud infrastructure provider, Stripe (payments), Google (analytics), Meta (advertising measurement) and our AI model providers. We do not sell your personal data.

We apply industry-standard administrative, technical and organizational measures to protect your data — including encryption in transit, access controls and row-level security on user data. No system is 100% secure; you use the Service at your own risk.

Subject to applicable law (including GDPR and CCPA where relevant), you may request access, correction, export or deletion of your personal data by contacting us. We will respond within the timeframes required by law.

We retain account and generated content for as long as your account is active. After account deletion, we may retain limited records required for legal, tax or fraud-prevention purposes.

The Service is not directed to children under 16, and we do not knowingly collect data from them.

We may update this Policy from time to time. Material changes will be announced via the Service or by email.

For privacy questions or data requests, contact us at podfriendlyofficial@gmail.com.