How we handle your photo

Draft, pending legal review. This page isn't final, and it may change.

Your photo, in short

Your photo is sent only when you use it.

  • Your photo stays on this device until you use it: when the app looks at it, or when you use Fix my photo or Make my image. Then a copy goes to our AI service.
  • Looking at your photo and Fix my photo keep no copy of it: it's deleted as soon as they're done.
  • Make my image keeps your image, a small copy of your photo, your choices, and the prompt for 30 days, or until you delete the image.
  • When you make several images at once, each photo waits on our server until its image is made.
  • The AI service may keep its own copy for up to 30 days to check for abuse, under its own rules.
  • Your photo goes to your image app only when you hand it over.

Look at new photos automatically

When you choose a photo, the app sends a small copy to our AI service once, to guess what's in it and what suits it, and nothing is kept.

When you write a prompt

Your photo stays on this device. Writing a prompt sends your choices and any words you type, never your photo. You take your photo to your image app yourself.

We keep each prompt the app writes, with any words you typed, for 7 days, so the same choices get the same prompt again. We keep it under a code made from your choices, with no link to you or your account, so we can't find it, download it, or delete it for one person.

When you choose Make my image

  • Before your photo leaves this device, the app makes it no larger than 2048 pixels on its long side and removes its hidden details, such as where it was taken.
  • We send your photo, your choices, and any words you type to an AI service, which makes the image. It checks them first and refuses some pictures.
  • We delete the photo you send from our servers when your image is done, and also when it fails or you cancel it.
  • When your image is made, we keep a small copy of your photo, about the size of the image, for 30 days, only to show your photo beside the result, when you open your image and on its share card. We delete it with the image: after 30 days, when you delete the image, or when you delete your account.
  • When your image is made, we keep the prompt we sent to the AI service to make it, with any words you typed, so you can copy it from Your pictures. We delete it with the image: after 30 days, when you delete the image, or when you delete your account. The same prompt also stays for up to 7 days among the written prompts described above, with no link to you.
  • When your image is made, we keep the choices it was made from, such as its filters, era, or weather, and any words you typed for them, but not your photo, so you can share its recipe from any device where you sign in. The share card shows your choices but not your words. We delete them with the image: after 30 days, when you delete the image, or when you delete your account.
  • We keep your new image for 30 days so you can download it, then delete it. Delete now deletes it sooner.
  • We also keep a small preview of your image, which the app makes, so Your pictures opens quickly. We delete it with the image: after 30 days, when you delete the image, or when you delete your account.
  • If a picture isn't made, we keep a record of the attempt, with its settings and the reason, but not your photo, for 30 days, so you can see why and try again. You can delete it in Pictures.
  • The AI service may keep its own copy for up to 30 days to check for abuse, under its own rules.

When you share a recipe

When you share a recipe, we keep its choices, such as its filters, era, or weather, and any words you typed for them, under a short code so the link works for anyone you send it to. The link carries your words so a friend gets the same mix, but the card image doesn't show them. The recipe has no photo and nothing that says who you are, so it belongs to no one: we keep it for as long as the link may be opened, and Delete my account doesn't delete it.

When you use Fix my photo

To suggest fixes, we send a smaller copy of your photo to our AI service. We don't keep it: it's deleted as soon as the check is done. Nothing is made and no credit is used.

  • Before the copy leaves this device, the app makes it no larger than 768 pixels on its long side and removes its hidden details, such as where it was taken.
  • We keep a record that a check ran and which fixes it suggested, with no photo and nothing that says who you are.
  • The AI service may keep its own copy for up to 30 days to check for abuse, under its own rules.

When you make several images

We send your photos and your choices to an AI service, one at a time. Each photo waits on our server until its turn, and we delete it when its image is made. We keep each image, a small copy of its photo, your choices, and the prompt for 30 days, or until you delete the image. The AI service may keep its own copy for up to 30 days to check for abuse.

A photo waits at most about 30 minutes. We also delete it when its image can't be made, or when you stop the rest.

When the app looks at your photo

To see what's in your photo and pick things that suit it, we send a smaller copy of it to our AI service, once when you choose the photo (unless you turn this off above) or when you use Surprise me. We don't keep it: it's deleted as soon as the look is done. Nothing is made and no credit is used.

  • Before the copy leaves this device, the app makes it no larger than 768 pixels on its long side and removes its hidden details, such as where it was taken.
  • We keep a record that a look ran, with no photo, nothing it said about the photo, and nothing that says who you are.
  • This device keeps what the look said about your photo, such as what's in it, indoors or outdoors, and the time of day, so the app doesn't look again. It's removed with the photo.
  • The AI service may keep its own copy for up to 30 days to check for abuse, under its own rules.

When you sign in with Google

When you sign in with Google, Google tells us your Google account's name, your email address when Google has verified it, and an id for your Google account. We don't receive your Google password, your contacts, or any other Google data. We use these only to recognize you when you sign in and to contact you about your account. Google learns that you signed in to Aemono. Delete my account deletes them.

When you sign in with Apple

When you sign in with Apple, Apple tells us an id for your Apple Account and your email address. If you choose Hide My Email, Apple gives us an address of its own instead, which forwards to your inbox, and we never see your real address. The first time you sign in, Apple may also tell us your name, if you choose to share it. We don't receive your Apple Account password or any other Apple data. We use these only to recognize you when you sign in and to contact you about your account. Apple learns that you signed in to Aemono. Delete my account deletes them.

Apple keeps its own list of the apps you use Sign in with Apple with. To remove Aemono from it, go to account.apple.com, then Sign-In and Security, then Sign in with Apple.

Your sign-in history

Each time you sign in, we keep a record of it: the time, how you signed in (such as with Google or Apple), the country, the kind of device (phone, tablet, or computer), the browser, and a scrambled code made from your network address, never the address itself. The code shows only when sign-ins come from the same network.

We use these records only to keep accounts safe and to stop abuse, such as one person making many accounts. We keep each one for 90 days. Delete my account deletes them, and Download my data includes them.

What we use to suggest things

So the app can suggest things later, such as what's popular this week or what goes well with your mix, we count which choices people use and how. A choice is something you add in the app, such as a filter, an era, a weather card, a part of one of our photos, or a ready-made mix. We never keep your photos, your prompts, or the words you type, only whether you typed any.

  • For everyone, we keep counts for each day: how often each choice is picked, taken out again, and used in an image that's made, downloaded, shared, or deleted within 10 minutes, and which choices are used together in an image. Each count notes the kind of photo it was used on, such as a person, an animal, or food, and whether it was your own photo or a sample, with no account, device, or address. We keep these counts for 400 days.
  • For your account, while you're signed in and the switch below is on, we also keep your history: each choice you use, the kind of photo you used it on, how many times you did each of those things with it, and when you first and last used it. We keep each choice in your history for 12 months after you last use it. We also use your history to show Your most used at the top of the gallery: the choices you used most in images you made in the last 60 days, for the kind of photo you have.
  • Download my data includes your history, and Delete my account deletes it. The counts for everyone stay, because they name no one.
  • When your browser sends Do Not Track or Global Privacy Control, nothing you do is counted, for everyone or for your account.

Use my activity for suggestions

This applies to your account once you sign in.

What the app counts

The app counts which choices people open and pick, for example how many times each filter is picked, and how many prompts are written and taken to an image app. Each count is a total for the day, with no account, device, address, photo, or text attached. When your browser sends Do Not Track or Global Privacy Control, the app sends nothing to count.

We count visits ourselves, without cookies: the screens you open, the site or app you came from, your country and city, your internet provider's name, your device type, system, and browser, your language, and how long you stay. We don't keep your IP address. A code that changes every day groups the screens of one visit, so we can't recognize you on another day. We keep these records 90 days, and totals without them for 25 months.

Your account

Your account keeps the name you sign in with, your email address when Google or Apple has verified it, your credits, and a list of what added or used them. It keeps your images, and the small copies of your photo, the choices, and the prompts that go with them, only for the 30 days above. While Use my activity for suggestions is on, it also keeps your history of choices, as What we use to suggest things says.

  • You can download your data from the Account screen with Download my data. The file holds your name, your sign-ins, every credit added or used, how many images you've made, with the time and size of those from the last 30 days, and your history for suggestions. You can download it once an hour.
  • You can delete your account from the Account screen with Delete my account. It deletes your account, your sign-ins, the credits you have left, your history for suggestions, and your images with the small copies of your photo, their choices, and their prompts, within a few minutes. Anonymous daily counts stay, because they name no one. Signing in again later starts a new account.
  • Neither reaches the written prompts kept for 7 days with no link to you, the recipes you share, kept with no link to you for as long as their links may be opened, or the copies other services keep under their own rules: the AI service keeps each request for up to 30 days, and our hosting service keeps its own logs.
  • Your choices and your photo on this device stay until you clear them. Delete my account can clear them too.
  • If you can't sign in, for example because your account is blocked, write to support@aemono.com and we'll send you your data or delete your account.

Your saved mixes

Your saved mixes are kept with your account, including any words you typed, until you delete them or your account. Download my data includes them.

Post and earn

If you apply to Post and earn, we keep the platform you chose, the link to your profile, the links to the posts you submit, and the dates.

We also keep each decision with the reason we gave you, the credits we added, and whether the email to you was sent.

We use these only to run the program: to review your application and your posts, to add your credits, and to tell you what we decided. The app never fetches your links. We open them ourselves, by hand.

We keep them while you're a member. If we decline your application or remove you, we keep them for 12 more months, then delete them. Delete my account deletes them, and Download my data includes them.

We email you when we decide on your application and when we decide on a post: you're in, your application wasn't approved, your post is approved, or your post wasn't approved. We send no other email.

The email goes to the address on your account, from hello@aemono.com, and your reply goes to support@aemono.com. If you signed in with Apple and chose Hide My Email, it goes to the forwarding address Apple gave us. If your account has no email address, we send nothing, and the Post and earn page shows the decision.