Privacy Policy
Last updated: September 30, 2026The short version
We collect what we need to run the service, nothing more. Your email if you sign up — we use it for your account and, now and then, to email you about Promly (one click unsubscribes). The prompts you submit, any reference images you upload (including face references), and the images you generate when you use the studio. Payments go directly to Polar — we never see your card. For traffic measurement we use privacy-friendly, cookieless analytics (Plausible and Vercel) that count visits in aggregate and never identify you — no ad pixels, no cross-site trackers. We don't sell your data.
Who we are
Promly ("we," "us," "our") is operated by Erez Haim. We build an AI image studio that turns a description into generated images, using image models including OpenAI's GPT Image 2.5, Google's Nano Banana family, and Black Forest Labs' FLUX.2. Our website is promly.ai.
For privacy questions, email legal@promly.ai.
What we collect
Here is everything we store, why, and where:
| Data | Why | Where it lives |
|---|---|---|
| Email address | Account identity, sign-in via magic link, and the emails described in Emails we send | Supabase (auth + your row in pl_users) |
| OAuth profile (Google or Discord) | Sign-in if you choose social login. We receive your email and display name only — never your password | Supabase auth, scoped to your row |
| Prompts you submit | To tune them and generate images — the core service | Sent to Anthropic (Claude Haiku) for prompt analysis, then to the active image model (GPT Image 2.5 / Nano Banana / FLUX.2) for generation. See "Third parties & cross-border data transfer" below for jurisdictions. Stored in your account history so you can revisit past work |
| Reference images you upload (including face references) | Used as visual input to the image model you choose, in any Kit that takes an image. Claude Haiku also reads the image when you tap Ideas, use the Describe Kit, or upload an image on the Studio launcher to pick a Kit | Sent to the provider that runs the model you chose: fal (GPT Image 2.5, the Nano Banana family) or Black Forest Labs (FLUX.2), or OpenAI directly when fal is unavailable; and to Anthropic for the features above. Stored in your account history so you can reuse them; deleted when you delete the generation or the account |
| Images you upload to animate (Video Kit) | Used as the first frame of a short video clip. Sent to the video model you chose — FLUX 3 Video (Black Forest Labs) or Seedance 2.5 (ByteDance, via WaveSpeed) | Hosted on our storage only while the clip is being made and deleted automatically as soon as the clip finishes (whether it succeeds or fails). The finished clip is stored in your history like any other generation, until you delete it or the account |
| Generated images and clips | So you can view, download, and reuse them | The file is stored on Cloudflare R2 and served from images.promly.ai; the record of it is your account history in Supabase, scoped to your row. Deleted from both when you delete the generation or your account |
| Plan and usage state | Track which plan you're on (Free, Starter, Pro, or Studio), your remaining subscription Pixels, and any top-up Pixel balance with its expiry date | Supabase (pl_users, pl_subscriptions, pl_credits) |
| Payment state (subscription ID, order ID, status) | Match your Polar checkout to your account; renew, refund, expire | Supabase. We never see or store your card number — Polar handles all card data and is PCI DSS Level 1 |
| Network address (IP) you sign up from | To stop automated mass signups and free-Pixel farming: we check how many accounts one network has opened recently, and your account keeps the address it was created from so repeat abuse can be spotted | Supabase. The signup-log entry is deleted after 30 days; the copy on your account row is deleted with your account |
| A one-way hash of your email address | So an account that is deleted and opened again with the same address does not receive the free welcome Pixels a second time | Supabase. It holds no readable address and is kept after you delete your account — matching it requires already knowing your address |
| Browser session token | Keep you signed in between visits | Your browser (localStorage and an sb-…-auth-token cookie set by Supabase) |
That's the complete list of what we store about your account. For traffic measurement we use cookieless, aggregate analytics (Plausible and Vercel Web Analytics + Speed Insights) that don't identify you individually — no behavioral tracking, ad pixels, retargeting, or fingerprinting.
What we don't collect
- We don't track you across other websites
- We don't use Google Analytics, Segment, Mixpanel, or any cross-site or profiling analytics — only cookieless, aggregate visit measurement (Plausible and Vercel)
- We don't run Facebook, Twitter, Reddit, or LinkedIn pixels
- We don't store your credit card number — Polar handles all payment data
- We don't collect your name, phone number, or address unless you email us directly
- We don't build profiles or sell data to third parties
Third-party services
Promly is a small operation that relies on a few specialized services. Each handles a slice of the product and has its own privacy policy:
- Anthropic — runs Claude Haiku, our primary prompt-tuning model. When you submit a prompt, we send the prompt content to Anthropic's API for processing. Claude Haiku also reads images: one you upload to the Describe Kit, your reference image when you tap Ideas, one you upload on the Studio launcher to pick a Kit, and generated images we check for quality. Those images are sent to Anthropic's API too. Anthropic Privacy Policy →
- OpenAI — makes GPT Image 2.5, the Studio's default image model, which we reach through fal (see below). If fal is unavailable, the same request (your prompt and any reference images) goes to OpenAI's API directly. OpenAI also runs GPT-4o-mini, our prompt-analysis fallback when Anthropic errors, which receives prompt text only. OpenAI also voices Reel voice-overs: the text you write for one is sent to OpenAI's API. OpenAI Privacy Policy →
- Black Forest Labs (BFL) — runs FLUX.2 (image generation) and FLUX 3 Video (the Video Kit's "Animate" and "Dream" clips). When a FLUX model is active, your prompt content and any reference or source images are sent to BFL's API. FLUX 3 Video clips carry BFL's C2PA Content Credentials (a machine-readable "made with AI" record); we keep it intact. BFL Privacy Policy →
- WaveSpeed AI (WaveSpeedAI PTE. LTD., Singapore / WaveSpeedAI LIMITED, Hong Kong) — runs Seedance 2.5 by ByteDance for the Video Kit's camera-move clips (Orbit, Push in, Reveal). Your source image and the motion instruction are sent to WaveSpeed's API; WaveSpeed states generated media is kept on its side for up to 7 days. WaveSpeed Privacy Policy →
- FLUX model licence (BFL API Terms). Generations using FLUX models (shown as "Flux," "Flux · Fast," "Flux · Flex," or "Flux · Max" in the Studio) and FLUX 3 Video clips made in the Animate Kit are processed under Black Forest Labs' API Terms of Service. Under §2(b) of those terms, BFL receives a perpetual, irrevocable, sublicensable licence to use your inputs and generated outputs, including for model training. There is no opt-out from this licence while using FLUX-powered generation; BFL's own privacy policy offers a training opt-out by email, which Promly has not requested at this time. Full terms: bfl.ai/legal/flux-api-service-terms →
- Seedance 2.5 via WaveSpeed. WaveSpeed states it uses your data only to produce the output and may use aggregated, non-identifying "resultant data" to improve its service; ByteDance's video-model terms state that inputs are not used to train its base models without consent. WaveSpeed Terms →
- Replicate — a standby route for Seedance video (the Video Kit's camera-move clips). While it is active, your source image and motion instruction are sent to Replicate's API. Replicate Privacy Policy →
- fal (Features & Labels, Inc.) — the model-hosting platform behind GPT Image 2.5 (the Studio's default image model), the Nano Banana family, Ideogram, Seedream, Grok Imagine and the Video Kit's Edit tier. Your prompt, any reference images, and the source clip for an edit are sent to fal's API. For a model made by another company, fal may pass them on to that company to produce the result (for example OpenAI for GPT Image 2.5, Google for Nano Banana, SpaceXAI for Grok Imagine). fal is also a standby route for Seedance video: while it is active, your source image and motion instruction are sent to fal's API. fal Privacy Policy →
- SpaceXAI (formerly xAI) — makes Grok Imagine, which we reach through fal (see above). When Grok Imagine is the active model, fal passes your prompt on to SpaceXAI to produce the image. SpaceXAI Privacy Policy →
- Recraft Inc. — runs Recraft V4 (image generation). Your prompt content is sent to Recraft's API when it is the active model. Recraft Privacy Policy →
- Cloudflare — stores and serves your finished images and clips (R2 object storage behind the images.promly.ai domain). Cloudflare Privacy Policy →
- Supabase — handles authentication and stores your account data, plan state, and generation history. Hosted on AWS. Supabase Privacy Policy →
- Polar — processes payments, subscriptions, and refunds. PCI DSS Level 1. We never touch your card data. Polar Privacy Policy →
- Google — makes the Nano Banana family, which we currently reach through fal (see above). Google's own API is a standby route: while it is active, your prompt content and any reference images for Nano Banana are sent to Google directly. Also used if you choose Google sign-in (we receive your email and name only in that case). Google Privacy Policy →
- Discord — only if you choose Discord sign-in. Same scope: email and username. Discord Privacy Policy →
- Resend — sends Promly's emails on our behalf: sign-in links and account notices, and the product emails described in Emails we send. We send your email address and the message content; no other account data. Resend Privacy Policy →
- Vercel — hosts the website and provides cookieless, aggregate Web Analytics + Speed Insights (visit and performance counts; no personal data, no cross-site tracking). Also keeps standard server logs (IP, user agent, request path) for operational purposes. Vercel Privacy Policy →
- Plausible — privacy-friendly, cookieless website analytics (aggregate visit counts only; no personal data, no cross-site tracking, EU-hosted). Plausible Privacy Policy →
Third parties & cross-border data transfer
When you generate an image with Promly, your prompt text and any reference images you upload (including images that may contain your face or the faces of others you have permission to upload) are sent to one or more of the following third-party AI providers to produce the requested output:
- OpenAI, Inc. (United States) — makes GPT Image 2.5, which we reach through fal. If fal is unavailable, your prompt and reference images go to OpenAI's API directly. OpenAI also voices Reel voice-overs: the text you write for one is sent to OpenAI's API. OpenAI Privacy Policy →
- Google LLC (United States, with global infrastructure) — makes the Nano Banana family, which we reach through fal. Google's own API is a standby route that receives your prompt and reference images directly only while it is active. Google Privacy Policy →
- Black Forest Labs GmbH (Germany, EU) — for image generation when FLUX.2 is the active model, and for FLUX 3 Video clips (the Video Kit's Animate and Dream clips), which receive the image you animate. BFL Privacy Policy →
- Anthropic, PBC (United States) — for prompt analysis, quality checks on generated images, and reading the images you give it in the Describe Kit, in Ideas and on the Studio launcher (Claude Haiku 4.5). Anthropic Privacy Policy →
- fal — Features & Labels, Inc. (United States) — the hosting platform we call for GPT Image 2.5 (the Studio's default image model), the Nano Banana family, Ideogram, Seedream, Grok Imagine and the Video Kit's Edit tier. When one of those is the active model, your prompt content, reference images and (for an edit) your own source clip are sent to fal's API, and fal may pass them on to the company that makes the model. fal is also a standby route for Seedance video: while it is active, your source image and motion instruction are sent to fal's API. fal Privacy Policy →
- SpaceXAI LLC (United States; formerly xAI) — makes Grok Imagine, which we reach through fal. When it is the active model, your prompt is passed through fal to SpaceXAI. SpaceXAI Privacy Policy →
- Recraft Inc. (450 Townsend St, San Francisco, CA, United States) — for image generation when Recraft V4 is the active model. Recraft Privacy Policy →
- WaveSpeedAI PTE. LTD. (Singapore) / WaveSpeedAI LIMITED (Hong Kong) — for video generation when Seedance is the active model. Your source image and motion instruction are sent to WaveSpeed's API. WaveSpeed Privacy Policy →
- Replicate, Inc. (United States) — a configured fallback route for Seedance video. It receives the same source image and instruction whenever it is the active route. Replicate Privacy Policy →
- Cloudflare, Inc. (United States) — not a model provider: this is where your finished images and clips are stored and served from (R2, behind the images.promly.ai CDN domain). See the note on image URLs below. Cloudflare Privacy Policy →
About your image links. A finished image or clip is served from images.promly.ai at an address built from two random identifiers. It is not listed or searchable and it is not signed, which means anyone you give the link to can open it, without signing in, for as long as the file exists. Treat the URL like the image itself. Deleting the generation, or your account, deletes the file. A copy our CDN has already cached can still load at that address for up to 4 hours afterwards.
These transfers leave Israel and the European Union. None of the listed destinations has an EU adequacy decision for personal data. Promly relies on the following safeguards: (a) explicit consent given by you at signup and again at the moment you upload a face reference; (b) standard data processing terms offered by each provider through their enterprise / API agreements; (c) data minimization (we send only the prompt text and reference images you provide — we do not send your email, IP address, or other account metadata to these providers).
You may withdraw consent at any time by deleting your account, which deletes all generations and references. Note that AI providers may retain inputs for short durations per their own policies (see the privacy policies linked above for current terms). Promly does not have a contractual right to compel deletion at the provider level beyond what those providers offer publicly.
We use these providers' API endpoints, not their consumer chat products. Each provider's terms govern whether your inputs may be used for model training and other purposes — see the linked policies above for current terms (note that one or more providers may train on inputs by default). As a precaution, do not paste secrets, credentials, or anything you wouldn't want a third-party processor to see: once a prompt is submitted, the active provider receives it in full.
Cookies and browser storage
Promly uses the bare minimum:
- Supabase auth cookie (
sb-…-auth-token) — keeps you signed in. Strictly necessary for the service to work. Cleared when you sign out. - localStorage — Supabase auth library uses localStorage to refresh your session token. Stored in your browser; never sent to us as a cookie.
That's it. Our analytics (Plausible and Vercel) are cookieless, so there are no analytics cookies, no consent-banner tracking cookies, and no third-party advertising cookies. There's nothing to consent to beyond the strictly-necessary sign-in cookie above.
Emails we send
Account emails. Sign-in links and codes, receipts and billing notices, and notices about changes to your account or to this policy. They are part of running your account, so they still arrive if you unsubscribe from everything else.
Product emails. A welcome email when you join, a reminder if you haven't made your first image yet, a note when your Pixels run low, and occasional news about Promly — a new Kit, a new feature, free Pixels. We send them to account holders, no more than a few times a month. If your account was opened on or after September 30, 2026, news and offers reach you only if you ticked the box for them when you signed up. Every one has an Unsubscribe link: one click stops all of them, and you can also ask us at legal@promly.ai.
Links in product emails may carry a campaign tag (for example utm_campaign=winback) so we can count how many visits an email brought. Your address is used only by Promly and by Resend, which delivers our email. We never sell it or share it with anyone for their own marketing.
Your rights
Regardless of where you live, you can:
- See your data — your account state and generation history are visible from your account. For anything else, email us
- Delete your account — use the danger-zone card in your account, or email us. We delete your row in
pl_users, your generation history, the image and clip files themselves, and your likes on community prints. Polar transaction records remain for the legal retention window noted below, the signup-log entry expires on its own 30-day schedule, and the one-way email hash described above is kept - Export your history — email us and we'll send a JSON dump within 14 days
- Cancel your subscription — manage via the Polar customer portal linked from your account, or email us
- Stop product emails — the Unsubscribe link in any of them, or email us (see Emails we send)
If you live in the EU (GDPR), UK (UK GDPR), California (CCPA/CPRA), Brazil (LGPD), or Israel (PPL 5741-1981), you have additional statutory rights. Use the contact email at the bottom of this page with your request and we'll respond within 30 days.
Data retention
- Account data — retained until you delete your account
- Generation history (your prompts, images and video clips) — retained until you delete it or delete the account; you can clear individual items from your gallery in the Studio at any time. A copy our CDN has already cached can still load for up to 4 hours after the file is deleted
- Signup network address (IP) — the signup-log entry is deleted after 30 days; the copy on your account row is deleted with your account
- One-way hash of your email address — kept after you delete your account, so the free welcome Pixels are granted once per address
- Images you upload to the Video Kit — deleted automatically the moment the clip settles (success or failure); they are your uploads, not our generations, and we keep no copy
- Payment records — Polar retains transaction records as required by financial regulations (typically 7 years). We retain the subscription/order IDs that link your Polar account to your Promly account; we delete those when you delete your account
- Server logs — Vercel keeps standard request logs; we don't use them beyond operational debugging
Children
Promly is for adults: you must be 18 or older (or the age of majority where you live) to use it. We don't knowingly collect data from anyone under 18, and uploading images or personal data of anyone under 18 is not permitted. If you believe we hold such data, use the contact email at the bottom of this page and we'll delete it.
Changes to this policy
If we change this policy, we'll update the "Last updated" date at the top. For material changes, we'll notify account holders by email. We won't reduce your rights without notice.