Privacy Policy

Effective date: 2026-11-13

AI Photo Combiner is operated by an individual based in Hong Kong. Contact: aiwebbase@gmail.com ("we", "us"). For the personal data described here we are the data controller, except for purchases: those are sold to you by Waffo.com Limited as merchant of record (see "Who processes it"). Questions and data requests: aiwebbase@gmail.com.

What we collect

Data you give us:

The two photos you upload (Image 1 and Image 2), including file size, format and upload time.
Your instruction text (sent to Waffo for content-safety screening), and any preset you click.
The images we generate for you.
Messages you send to support.

Data from Google when you sign in: your name, email address, Google account ID (the "sub" value), profile picture URL, and whether the email is verified. We never receive your Google password and cannot post, read mail, or see your other Google data. The only scopes we request are openid, email and profile.

Data from a guest session: if you generate without signing in, we set a random session ID in a first-party cookie and record your IP address, browser and device type. This is what lets a guest use the free allowance and keeps it from being farmed.

Attribution data: when you arrive from a campaign link (utm_source, source, ref, from, src or referer) or another website, we store that source and the referring page URL in a first-party cookie, and record it with your account at sign-up. We also record the two-letter country code Cloudflare derives from your connection, and keep source, referrer and country on sign-in and admin audit records for acquisition reporting and abuse review.

Data from Waffo.com Limited (payments): the email used at checkout, order ID, product and image pack, amount, currency, tax and billing country, payment status, and any refund or chargeback record. We do not receive or store your card number, CVC, or full billing address; those go directly to Waffo.com Limited.

Technical and moderation data: IP address, user agent, request timestamps, image balance changes, error traces, and the automated moderation verdict on your instruction and output.

We do not ask for your real name, postal address or phone number. Please do not upload identity documents, payment cards, medical records, or images of anyone who has not agreed to appear in a generated picture.

How we use it

Produce your image: send both photos and your instruction to the AI model provider. Lawful basis: performance of a contract.
Store your history and let you download results. Lawful basis: performance of a contract.
Grant, deduct and restore images; stop repeated free-account abuse. Lawful basis: contract and legitimate interests (fraud prevention).
Screen prompt text before generation using Waffo's content-safety service, and have our AI model provider screen input images and outputs for prohibited content. Lawful basis: legal obligation and legitimate interests.
Run, secure, debug and rate-limit the service. Lawful basis: legitimate interests.
Answer support, refund and deletion requests. Lawful basis: contract and legal obligation.
Keep invoices and accounting records. Lawful basis: legal obligation.
Email you service notices, such as a finished generation or a policy change. Lawful basis: contract.

We do not sell your personal data. We do not share it with advertising networks or data brokers. We do not use your photos, instructions or outputs to train our own models. We send them to our AI model provider only to generate the image you requested. We do not use your data for automated decisions that have a legal effect on you beyond image accounting and abuse prevention.

Who processes it

Waffo.com Limited (Waffo Pancake, waffo.ai): merchant of record, payment provider and content-safety screening service. It receives your payment and billing data, the email used at checkout, and your prompt text for content-safety screening. Waffo.com Limited is the seller of the image pack you buy: it charges your card, calculates and remits tax, issues the receipt, and handles refunds and chargebacks. Its own privacy policy at https://www.waffo.ai/privacy applies to that purchase. We receive the order record described above.
Google LLC: identity provider. It receives your Google sign-in token and returns your name, email and account ID.
Cloudflare, Inc.: application hosting, object storage, CDN, transactional email and security services including Cloudflare Turnstile for bot protection. It processes requests and logs, uploaded photos and generated results at rest, the email address and message for service emails, and the bot-challenge data needed for guest generation.
Yir (Sungerine Labs LLC, yir.ai): generative model provider. It receives the two photos and your instruction for the single generation requested. See https://yir.ai/privacy. Yir states that it does not use your prompts or generated results to train models.

We also disclose data where we are legally required to, and to our professional advisers under confidentiality. If we are sold or merged, your data may transfer to the acquirer under the same terms, with notice.

International transfers

Our providers process data in the United States and the European Union. Where data from the EEA, the UK or Switzerland is transferred outside those areas, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), together with each provider's data processing agreement.

How long we keep it

Generated results and the input images attached to them: kept on our servers for at most 7 days for signed-in users and at most 3 days for guests, and then deleted automatically, or immediately when you delete the result.
Uploaded images not attached to a generated result: kept until our upload cleanup removes them or you ask us to delete them.
Guest results and guest session: the guest cookie lasts up to 400 days; clearing it ends your access but does not by itself delete stored files.
Account record (email, Google ID, image balance): while your account is open; deleted on request, except for records we must keep by law.
Instructions and moderation verdicts: kept for abuse prevention and to defend legal claims until you ask us to delete them or close your account.
Attribution: the landing cookie lasts up to 90 days; the source, referrer and country stored on your account are kept while the account is open.
Server and error logs: kept for a limited period for security and debugging.
Purchase, invoice and tax records: kept as long as tax and accounting law requires, typically 7 to 10 years. Held by Waffo.com Limited and by us, and these survive account deletion.

When you ask us to delete data, we delete it or, where deletion is not technically possible in a backup, isolate it until the backup rotates.

Security

Data is encrypted in transit with TLS and encrypted at rest by our storage provider. Access to production systems is limited to the people who need it and protected by keys stored outside the codebase. No system is perfectly secure: if a breach is likely to result in a high risk to your rights, we email you without undue delay and notify the competent authority where the law requires it.

Cookies

We use first-party cookies only. There are no advertising cookies, no cross-site tracking pixels, and no third-party analytics that profile you. Cloudflare Turnstile is used for bot protection and is a strictly necessary security service; it may set the security cookies needed to complete its challenge.

session: keeps you signed in after Google sign-in. Lasts while you are signed in.
guest: a random ID so a guest can use the free allowance and we can prevent repeated free allowances. Lasts up to 400 days.
attribution: remembers the first campaign source or external referrer for up to 90 days so we can tell which channel brought you. It is first-party, is not used for advertising or profiling, and the site works without it.

The session and guest cookies are strictly necessary to provide the service you asked for. The attribution cookie is optional; you can block or delete it in your browser without losing sign-in, images or generation. There are no advertising cookies, no cross-site tracking pixels, and no third-party analytics. If we later add further analytics or advertising, we will ask for consent first and update this section before switching it on.

Your choices

Access and portability: email aiwebbase@gmail.com and we send you the account data we hold, including your instructions and a list of your generations, in a machine-readable format.

Correction: email aiwebbase@gmail.com and we correct account data that is wrong.

Deletion: email aiwebbase@gmail.com to delete your account or individual data. We delete the account record, uploads, results and instruction logs, except records tax and accounting law requires us to keep. A guest can delete everything by clearing cookies for this site, or by emailing us with the guest cookie value.

Objection and restriction: you can object to processing based on our legitimate interests, and ask us to restrict processing while we look into a complaint.

Written requests: we answer within 30 days. If we refuse, we tell you why and how to appeal.

EEA, UK and Switzerland

You may complain to your local supervisory authority. We are the controller of your data; our contact for privacy is aiwebbase@gmail.com.

California and similar US state laws

You have the right to know what we collect and who we share it with, to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. We do not sell personal data and we do not share it for cross-context behavioural advertising; we do not use sensitive personal information beyond providing the service. You can use an authorised agent; we may ask for proof of authorisation.

Your face and likeness

We do not build face-recognition templates or a biometric database. The photos you upload are processed to render your result and nothing else. If you appear in a photo somebody else uploaded, email aiwebbase@gmail.com with the URL and we remove the upload and any output made from it, without requiring an account.

Children

The service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we close it and delete the data.

Changes to this policy

We post a new version with a new "Last updated" date. If a change materially affects your rights, we email you or show a notice on the site at least 14 days before it takes effect.

Contact

AI Photo Combiner is operated by an individual based in Hong Kong. Email: aiwebbase@gmail.com.