Privacy Policy

1. What we collect

· Account data — your email address, used for sign-in, transaction notices and support.

· Photos you upload — used as the source and the fitting frame for generation.

· Generated results — the images and videos you produce, and the settings behind them (scene, style, pose and so on).

· Transaction records — time, amount, item, and credit movements. Card numbers never reach our servers; they are handled directly by the payment provider.

· Usage records — timestamps and action types, kept for error diagnosis and billing accuracy.

· Browser local storage — interface preferences such as language and grid density. These stay in your browser and are not uploaded.

2. Why we collect it

To provide the service: generating images, keeping your gallery, metering credits correctly, and handling transactions and support.

We do not use your photos or generated results in marketing material unless you separately agree.

We do not sell your personal data.

3. Third parties that process your data

To deliver the service, the following providers process your data to the extent necessary:

· Supabase — authentication, database and file storage.

· Google (Gemini API) — image generation and likeness scoring. Photos you upload and results you generate are sent to this service for processing.

· fal.ai — video generation. When you use video features, the corresponding images are sent to this service.

· Stripe — payments outside Taiwan.

· ECPay — card payments in Taiwan.

These providers may operate servers outside Taiwan. By using the service you understand and agree to this cross-border processing as necessary to provide it.

4. Retention and deletion

Your photos and generated results are kept for as long as your account exists.

You can delete individual images at any time in My Photos. Deleted files are removed from storage; copies in backups expire on the normal rotation.

You can write to us to delete your whole account and its data. We complete this within 30 days of the request, except for transaction records we are required to retain under tax law.

5. Your rights

Under Article 3 of the Taiwan Personal Data Protection Act you may: enquire about, review, obtain a copy of, supplement or correct, request that we cease collecting, processing or using, and request deletion of, the personal data we hold about you.

Write to andrew@efloop.com and we will respond within 30 days.

You may decline to provide some data, though this may prevent us from offering the corresponding features.

6. Security

Your original photos are held in non-public storage and reached only through authorised links after you sign in.

Row-level security keeps one account’s data invisible to another.

We will never ask you for a password, card number or verification code by email or phone.

7. Minors

The service is for people aged 18 or over. We do not knowingly collect personal data from minors.

If you become aware that a minor is using the service, please tell us and we will disable the account and delete the associated data.

8. Changes to this policy

We may revise this policy. Revisions take effect when published on this page, and the “last updated” date above is changed accordingly.

If a revision materially changes the purposes of collection or the third parties involved, we will also notify you by email.