St Luce Innovations · Updated October 16, 2026 · Version 2026-10-16
Privacy policy
Your photos deserve privacy, too. Here is what stays on your device, what is sent for AI processing, and what we keep to run your account.
Who operates this app
Face Protection Program is operated by St Luce Innovations. Contact us about this policy or your information at NDStLce+FPP@gmail.com.
Photos and face processing
Choosing a photo opens it in your browser. Local blur and the illustrated demo run on your device. The app does not upload the full original photo as a separate file or maintain a photo gallery on our servers.
If you enable AI processing and generate a replacement, the browser sends a crop around each selected face, an editing mask, and our editing instructions to our server and then to OpenAI. A crop can include surrounding people, clothing, and background context. If a selection covers most of a photo, its crop can contain much of that photo. OpenAI returns a generated image, which passes through our server to your browser for local compositing and download. Our ordinary photo-editing workflow does not save these image payloads in its database or file storage. This is separate from the administrator-managed featured examples described below.
Do not treat this as a promise of immediate deletion by every provider. OpenAI processes API inputs and outputs under its API data controls, including applicable safety monitoring, retention, and legal exceptions. API data is not used to train OpenAI models by default unless the API customer opts in. We do not use your photos to train our own models or identify the people in them.
Featured examples
Administrators can separately upload before-and-after image pairs for the homepage showcase. These files and their titles and captions are stored by the app. Drafts are restricted to administrators; publishing makes both images, including the original before photo, publicly viewable. Administrators must confirm they have permission to display the images and the people shown. Uploads are resized in the browser and embedded image metadata is removed before storage. Unpublishing removes public access through the app, and removing an example initiates deletion of its stored image files. Previously downloaded copies cannot be recalled. Administrative change records are retained without storing image contents in those records.
Account, usage, and payment information
We keep your account identifier, email, display name, account timestamps, generation attempts and their outcomes, model and token counts, credit transactions, and promotional coupon redemptions. Supabase handles account authentication, passwords, confirmation messages, and password resets. Our application account database does not contain your plaintext password.
Stripe processes checkout and billing management. We store Stripe customer, checkout, invoice, and subscription identifiers, plan status, billing-period dates, cancellation status, and credit balances. Card entry takes place with Stripe; the app does not store full card numbers or CVCs. Stripe may collect the billing and fraud-prevention information described in its privacy policy.
If you contact support, we receive the information you choose to send, such as your email, issue description, and payment reference. Avoid sending photos, passwords, payment card details, or API keys unless a secure, necessary method has been agreed.
Why we use this information
We use information to provide the requested edits, authenticate users, maintain credits, process payments and refunds, resolve support requests, protect the service, and meet legal obligations. We do not sell personal information or share it for cross-context behavioral advertising. We do not add advertising trackers to the editor.
Providers and browser storage
Service providers include Supabase for authentication, Stripe for payments, OpenAI for AI processing and hosting services, and Cloudflare infrastructure for hosting and database operations. Google Fonts and the esm.sh CDN supply interface resources. These services can receive technical information such as IP address, request timestamps, device/browser information, and security logs when used. Providers may process information in the United States or other countries where they operate.
The browser stores authentication session information so you can remain signed in. Signing out ends the app session; browser controls can clear local storage. The editor holds the current image in browser memory, and downloaded images are saved wherever you choose on your device. External services may use their own necessary cookies or similar technologies.
Retention and security
We retain account, usage, credit, billing, and support records while needed to operate the service, reconcile payments, prevent abuse, resolve disputes, or satisfy legal obligations. The app does not currently apply a fixed automatic deletion period to account and credit records. Provider logs and backups may follow separate schedules. We use HTTPS, verified account access, server-side credit checks, and restricted handling of service credentials; no service can promise absolute security.
Your choices and requests
You can use the illustration without submitting a real photo, choose local blur instead of AI, and decide which crops to submit. You can update account details in My account and manage subscriptions through Manage billing / cancel. For access, correction, export, or deletion requests, contact NDStLce+FPP@gmail.com. We may verify account ownership, explain any records we must retain, and respond in line with applicable law. Deleting an account and canceling a paid subscription are distinct actions; request cancellation as well if needed to stop renewal.
The service is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us. We will assess the request and applicable deletion obligations.
Changes
We will update the date on this page when the policy changes and give additional notice when required. Material new uses of information will be handled with any notice or consent required by law.