Privacy Policy

Last updated: Oct 02, 2026

This Privacy Policy explains how StudioGenie.app (“StudioGenie,” “PortraitsGenie,” “we,” “us,” or “the Company”) collects, uses, shares and deletes information when you use StudioGenie (the “Service”).

The Service includes the StudioGenie website and web app, and any mobile application we operate that links to or incorporates this Privacy Policy, whatever name, branding or app store listing it is published under. This Privacy Policy applies to those apps in the same way.

1. Information We Collect

1.1 Account information

When you sign up, our authentication provider (Clerk) collects and manages your email address, your name (if provided) and your sign-in credentials. We keep a matching account record with your credit balance and generation history.

You can sign up or sign in with Google or Apple. If you do, that provider shares your name and email address with us through Clerk so we can create or match your account. With Sign in with Apple you can choose to share a private relay address (ending in @privaterelay.appleid.com) instead of your real email; if you do, that is the address we receive and use.

1.2 Photos, prompts and generated images (individual AI tools)

  • Uploaded photos: photos you submit to a tool such as Photo Studio, Style Transfer, Outfit Try-On, Photo Enhancer or Text to Image.
  • Prompts: any text instructions you write.
  • Generated images: the images the Service creates for you.

1.3 AI Photo Packs

To create an AI Photo Pack you upload several photos of yourself. We use them to train a private AI model that creates the photos in your pack. That model is used only for your pack.

  • Before you add photos, we ask you to confirm that the photos are of you, that you are 18 or older, and that you agree to this processing. We keep a record of that confirmation: your account, the date, and the exact wording you agreed to.
  • When you add a photo, our pack provider (Astria) checks it for problems such as blur, more than one person, or sunglasses, and whether it matches the option you chose (man or woman). That check can also estimate other characteristics of the person in the photo. We do not keep or use those estimates; we only use the quality results to tell you whether a photo will work.
  • We use your pack photos only to create the pack you order. We do not use them to identify you, and we do not sell them.

1.4 Payment information

Purchases on the website are processed by Stripe. We never receive or store your full card number. We keep a record of each transaction (amount paid, any discount or refund, what you bought, the date, and Stripe’s reference) to maintain your balance and orders and for accounting.

If you buy in one of our mobile apps, the purchase is processed by Apple or Google under their terms.

1.5 Usage and device information

  • Server logs and security: when you use the Service, our hosting provider records technical information such as your IP address, browser and device type, the pages and features you request, and timestamps. We use it to run, secure and debug the Service. We also briefly keep counts of requests per account and per IP address to enforce rate limits; these counts are deleted within 24 hours.
  • Error reports: if something breaks, our error-monitoring provider (Sentry) receives technical details about the error and the request that caused it.
  • Analytics: in the web app (app.studiogenie.app) we use PostHog to understand how the Service is used: which pages are viewed, which features and buttons are used, and when key events happen, such as signing up or completing a generation. When you are signed in, analytics events are linked to your account ID. We do not send your email address or your photos to PostHog.

1.6 Content reports

If you report content through our report page, we collect your name, email address, your relationship to the person shown, the links and description you give us, and your typed signature. We use them only to review the report, act on it and contact you about it.

1.7 Emails and contacting us

We send service emails, for example to tell you an AI Photo Pack is ready, through our email provider (Resend). We do not send marketing emails.

If you use the contact form on our website, we receive your name, email address and message so we can reply. The form is protected from spam by Cloudflare Turnstile and delivered to us through Resend.

2. How We Use Your Information

We use the information above to:

  • Provide the Service, including generating and storing the images you request and creating your AI Photo Packs;
  • Run your account, credit balance, orders and generation history;
  • Process payments, refunds and promotional discounts, and prevent fraud;
  • Keep the Service safe, including checking requests against our content rules (see section 3) and enforcing rate limits;
  • Send you service emails about your account, orders and packs;
  • Monitor, debug and improve the Service, including through analytics.

We do not use your uploaded photos or generated images to train our own AI models, and we do not sell your personal information.

3. Automated Content Checks

To keep the Service free of nudity, sexual content and other prohibited content (see our Terms of Service):

  • Before a generation starts, the prompt you write is checked automatically against a list of prohibited terms. A request that breaks our rules is refused and you are not charged.
  • The AI models that create your images also apply their own safety filters, and may decline a request. When that happens, the credits are returned to your balance.

When a request is refused, we record that it happened, the kind of rule involved, and the account. We do not keep a separate copy of the prompt for this.

If you are in the European Economic Area or the United Kingdom, we rely on:

  • Performance of a contract to provide the Service you signed up for and the things you buy;
  • Consent to process the photos you upload for an AI Photo Pack. You can withdraw it at any time by deleting your account or by contacting us (see section 7); withdrawing does not affect processing that already took place;
  • Legitimate interests in keeping the Service secure, preventing fraud and abuse, enforcing our content rules, and understanding and improving how the Service is used;
  • Legal obligations for keeping financial records.

5. How We Share Your Information

We do not sell your personal information or share it for advertising. We share it only with the service providers who run the Service for us, when the law requires it, or in a business transfer.

5.1 Service providers

ProviderWhat they do for usWhat they receive
ClerkSign-in and account security, including bot protectionEmail, name, sign-in details, device and browser information
NeonDatabase hostingAccount, order and generation records
VercelWebsite and app hosting, file storage, server logsPhotos and generated images we store, logs
ReplicateRuns the AI models behind the individual toolsUploaded photos, prompts, generated images
GoogleProvides AI models we run through Replicate for image editing and generationUploaded photos, prompts, generated images
Topaz LabsProvides the photo-enhancement model we run through ReplicatePhotos you enhance
AstriaTrains the private model for each AI Photo Pack, generates the pack, and checks pack photos for qualityYour pack photos, the model trained on them, the generated pack photos
StripeWebsite paymentsPayment details, email, what you buy
Apple / GooglePayments in our mobile appsPurchase details, under their own terms
PostHogProduct analyticsUsage events linked to your account ID
SentryError monitoringTechnical details of errors
ResendService emails, contact-form delivery and content-report notificationsYour email address and the email or message content
CloudflareSpam protection on our website contact form (Turnstile)Browser and device signals

Each provider processes the data on our behalf to provide its service, under its own terms and privacy policy.

5.2 Other disclosures

  • Legal requirements: we may disclose information if required by law, subpoena or other legal process, or to protect the rights, property or safety of StudioGenie, our users or the public. This includes reporting apparent child sexual abuse material to the authorities.
  • Business transfers: if we are involved in a merger, acquisition or asset sale, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. How Long We Keep Information

InformationHow long we keep it
Account informationWhile your account is open. When you delete your account, see section 7.
Photos you upload to an individual tool (website)Not stored by us. They are sent to Replicate to run your generation. Under Replicate’s data retention policy, it deletes a generation’s inputs and outputs after about an hour.
Photos you upload to an individual tool (mobile apps)Stored for up to 1 day, then deleted automatically.
AI Photo Pack photos and the model trained on themDeleted automatically within 30 days. Our copy of your photos is deleted as soon as the pack is finished, cancelled or refunded. If a pack fails, we keep them so it can be retried, for up to 30 days. The private model, and Astria’s copy of your photos, are deleted 7 days after your pack is finished.
Generated images, including AI Photo Pack photos30 days, then deleted automatically. Download the images you want to keep. After that, your history shows the generation as expired.
Prompts and generation history (the record that a generation happened)While your account is open. Prompts are erased when you delete your account.
Photo consent recordsKept as a record of the consent you gave.
Content reportsKept as a record of the report and what we did about it.
Transaction and credit recordsKept after account deletion as our financial records, for tax, accounting and fraud prevention.
Rate-limit countsUp to 24 hours.
Server logs, error reports and analyticsAs set by Vercel, Sentry and PostHog’s retention for our account.

Your images are stored at unique, randomly generated web addresses that aren’t published or listed anywhere. Treat an image’s address like a password: anyone who has it can view the image until it’s deleted.

7. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict certain processing, and to withdraw consent.

You can do most of this yourself:

  • Delete your account: on the website go to Account (app.studiogenie.app/account); in our mobile apps use Delete account in Settings. Deleting your account:

    • deletes your stored generated images, AI Photo Pack photos and any uploaded photos we still hold;
    • deletes the private models trained for your AI Photo Packs;
    • erases your name, email and prompts, and cancels any pack still being made;
    • deletes your sign-in account with Clerk.

    We keep your transaction and credit records, and your photo consent records, as described in section 6. Stripe keeps its own records of your payments. Our database provider keeps a short history for disaster recovery, which expires on a rolling basis. Any unused credits are lost when you delete your account.

  • Download your data: on the website, Account lets you download a copy of your account details, credit history and generation history as a file.

For anything else, including deleting analytics data linked to your account, contact us at support [at] studiogenie.app. We will respond within the time the law requires.

California residents: you have the right to know what personal information we collect, use and disclose, to request its deletion or correction, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in the CCPA.

8. Cookies and Similar Technologies

  • Essential: Clerk sets cookies that keep you signed in and protect sign-in from abuse. The Service does not work without them.
  • Analytics: in the web app, PostHog uses a cookie and your browser’s local storage to recognise your device between visits so we can measure usage. You can block or delete these through your browser settings.

We do not use advertising cookies.

9. Children’s Privacy

The Service is only for people aged 18 or older. It is not directed at anyone under 18, and our Terms of Service prohibit uploading photos of anyone under 18. If we learn that we hold personal information of someone under 18, we will delete it. Contact us at support [at] studiogenie.app if you believe this has happened.

10. Security

We use commercially reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International Data Transfers

We and our providers process information in the United States and in other countries where those providers operate, which may have different data protection laws from yours. Where the law requires it, these transfers rely on the safeguards in our providers’ data processing terms, such as standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or with a notice in the Service before it takes effect. The “Last updated” date at the top shows the latest revision.

13. Contact Us

Questions about this Privacy Policy or your information: support [at] studiogenie.app