Privacy Policy

1. Introduction

This Privacy Policy explains how GenderFlip collects, uses, discloses, and protects information when you use our adult-only AI image transformation service at genderflip.org.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, authentication records, and account preferences
• Transaction Information: Order, product, amount, currency, payment status, and processor reference; payment processors receive card or payment credentials directly
• Uploaded and Generated Images: Source photos, generation settings, and resulting images
• Support and Safety Information: Messages, content reports, appeals, consent confirmations, and related task references

2.2 Automatically Collected Information

• Usage Data: Features used, task status, credits used, and service interactions
• Device and Log Data: Browser type, operating system, IP address, request time, and referring URL
• Safety Audit Data: Moderation provider and model, decision, category scores, task status, and enforcement action
• Cookies: Data used for authentication, security, preferences, and analytics where permitted

3. How We Use Information

We use information to:

• Provide the Service: Authenticate users, process images, deliver results, and maintain credit balances
• Process Payments: Create orders, reconcile payments, provide receipts, prevent fraud, and handle disputes or refunds
• Protect Users: Moderate source images, generation instructions, generated output, and public-gallery submissions
• Operate and Improve: Diagnose failures, measure performance, support users, and improve product reliability
• Communicate: Send transactional messages, security notices, support responses, and legally required notices
• Comply with Law: Keep records, respond to lawful requests, enforce our Terms, and protect legal rights

4. Image Processing, Storage, and Retention

Retention

• Images: Retained only as reasonably needed for delivery, account features, troubleshooting, safety, legal obligations, or until a valid deletion request is completed
• Safety and Transaction Records: May be retained longer when needed for fraud prevention, abuse investigations, disputes, accounting, or legal compliance
• Deletion Requests: Use the contact form at genderflip.org/contact and choose “Delete my data”. Some records may be retained where required by law or necessary to protect the Service and its users

5. Service Providers and Recipients

We disclose information to providers only as needed to operate the Service:

• AI Generation: FAL and the selected model provider receive approved images and generation instructions
• Content Safety: OpenAI receives images and text needed for multimodal moderation
• Payment Processing: The processor shown at checkout, currently Creem or Stripe, processes payment details and transaction events
• Infrastructure: Cloudflare R2 stores images, Supabase hosts account and application data, and Vercel hosts the application
• Analytics and Communications: Configured analytics and email providers process limited usage or contact data for their stated purpose

6. Data Sharing and Disclosure

We do not sell personal information. We may disclose it:

• To Service Providers: Under terms that limit use to providing their services
• For Legal and Safety Reasons: To comply with law, respond to lawful requests, investigate abuse, or protect people, rights, and systems
• For Business Transfers: In a merger, acquisition, financing, reorganization, or asset sale, subject to applicable notice requirements
• With Your Direction: For example, when you choose to publish a generated image to the public gallery

7. Your Privacy Rights

Depending on your location, you may have rights to:

• Access: Request a copy of personal information we hold about you
• Correction: Correct inaccurate or incomplete information
• Deletion: Request deletion, subject to legal and safety exceptions
• Portability: Request eligible data in a portable format
• Objection or Restriction: Object to or restrict certain processing where applicable
• Appeal: Ask us to review a content-safety or privacy decision

To exercise a privacy right, or to appeal a safety decision with the task reference, use the contact form at genderflip.org/contact.

8. Data Security

We use safeguards designed to protect information, including:

• HTTPS/TLS encryption in transit
• Authentication and access controls
• Server-side payment and credit enforcement
• Content moderation before provider spending and public publication
• Restricted database access and audit records
• Monitoring, backups, and incident response procedures

No system is completely secure. Please use a unique password and contact us if you believe your account or image has been misused.

9. Children's Privacy

GenderFlip is not intended for anyone under 18. Do not upload images of minors. If you believe information about a minor has been submitted, use the contact form at genderflip.org/contact immediately so we can investigate and take appropriate action.

10. International Data Transfers

Our providers may process information in countries other than yours. Where required, we use contractual and other safeguards recognized by applicable data-protection law.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Functions: Authentication, security, checkout continuity, and preferences
• Analytics: Understanding product performance and usage where permitted
• Fraud Prevention: Detecting automated abuse and suspicious transactions

You can control non-essential cookies through available consent controls or your browser. Disabling essential cookies may prevent account or checkout functions from working.

12. Changes to This Privacy Policy

We may update this Policy as the Service, providers, or legal requirements change. We will post the updated date and provide additional notice when required by law.

13. Contact Us

For privacy requests or questions, contact us: