Privacy Policy

Information we process

• Sign-in uses Google only. We request the openid, email, and profile scopes and store the Google account identifier and verified email to create or recognize your TokMeme account. We do not read Google Drive, Gmail, or contacts, and we do not store a password.
• When you create, we store prompts, the selected model, aspect ratio, task status, reference images, generated results, and credit charges and grants.
• Essential cookies keep you signed in and remember the interface language. Analytics cookies stay off until you allow them. Names and durations are listed on Cookie notice.
• If Google Tag Manager is enabled, analytics and advertising cookies stay off before you consent and after you decline. Google may still receive cookieless visit signals. We do not send your account email or creation content to Google Analytics.
• For purchases, Creem handles checkout and payment details. This site stores the product, order, subscription status, and credit ledger, and does not receive full card numbers. Checkout sends your account email and internal user id to Creem so the payment can be applied to your credit account.

Purposes and providers

We use this information to sign you in, save drafts and media, screen and submit generation jobs, show results, calculate credits, process payments, and investigate failures. We do not sell personal information.

Before a generation job is submitted, the prompt and an internal user id are sent to Creem for content screening. After it passes, the prompt and reference media are sent to Kie, which provides generation. Uploaded images and generated results are stored in a private Cloudflare R2 bucket, separate from the public homepage media. Reading them requires sign-in and an ownership check.

Google, Creem, Kie, and Cloudflare may process this information outside your country or region. If the providers change, we will update this page.

Retention, security, and deletion

Sign-in sessions last up to 30 days. Session tokens are stored as hashes, and the cookie is HttpOnly. Accounts, creations, and media are kept for as long as needed to provide the service. There is no self-serve deletion control yet. Media objects are private, and another signed-in user cannot open them by knowing the resource id.

Email liyanan1219@gmail.com to request access, correction, or deletion of your account and related data. We first confirm that you control the account. Records required by law, or needed to handle a dispute, may be kept.

Children and changes

This service is not directed to children under 13. We do not knowingly collect personal information from children.

When a practice changes in a material way, we update the date on this page. If you do not accept an update, stop using the service.