Privacy policy

Account data (name, email, password hash), the photos you upload, the prompts you write, the images we generate for you, and standard technical logs (IP address, browser type, pages visited).

To provide the service (process uploads, run generations, store your gallery), to secure accounts, to provide support, and to improve the product. We do not sell your personal data, and we do not use your uploaded photos to train AI models without your explicit opt-in consent.

We rely on vetted providers for hosting, object storage, AI image generation, email delivery, analytics, and payments. Each processes data only on our instructions under a data processing agreement. Some providers may process data outside your country; where required, transfers are safeguarded by standard contractual clauses.

We use strictly necessary cookies for sign-in, plus optional analytics cookies to understand usage. Optional cookies load only after you consent via the cookie banner; you can change your choice any time.

Your uploads and generated images are kept while your account is active. When you request deletion, the account cancels immediately and data is removed after a 14-day grace period (to handle billing disputes), except data we must legally retain.

Depending on your jurisdiction (including GDPR regions), you can access, export, correct, or delete your data, and object to or restrict certain processing. Contact support@goodesign.si to exercise any right. If you are in the EU/EEA and believe we mishandled your data, you may lodge a complaint with your supervisory authority.

Passwords are stored only as modern hashes; traffic is encrypted in transit; storage is encrypted at rest. No system is perfectly secure — we monitor, patch, and limit access on a need-to-know basis.

The service is not directed at children under 16, and we do not knowingly collect their data.

We'll post updates here and, for material changes, notify account holders by email before they take effect.