Privacy policy

Christmas AI Photo turns a selfie you upload into Christmas photos. Your face is personal data, so we keep what we collect small, use it only to make your photos, and delete your selfie quickly.

Your uploaded photo

• Used only to make your photos. Your selfie is sent to our image model provider only to generate the Christmas photos you ask for.
• Never used for training. We do not use your photos to train or improve AI models, and we do not build a face profile or biometric template of you.
• Deleted after 7 days. When you upload, we convert the photo to JPG and remove its metadata (EXIF, including GPS location and camera details). The stored copy is private and is deleted automatically 7 days after upload.
• Private. Uploads and results are stored in a private bucket and shown only to your signed-in account through short-lived links. There is no public gallery.

What else we collect

• Google sign-in: your name, email address and profile picture, to create your account.
• Usage records: the scenes you choose, the photos generated for you, your credit history, and the IP address of requests, used for rate limits and abuse prevention.
• Payments: handled by Stripe. We receive the purchase record (pack, amount, status) but never your full card details.

Google user data

• When you choose “Sign in with Google”, we request only the basic openid, email and profile scopes. We receive your name, email address, profile picture and whether your email is verified.
• We use this data only to create and secure your account, show who is signed in, link your credits, purchases and private photos to you, and prevent abuse.
• We do not sell Google user data, use it for advertising, or share it with anyone except the service providers listed below that run the site for us. We do not access your Gmail, Drive, contacts or any other Google data.
• You can revoke access at any time at myaccount.google.com/permissions, and ask us to delete your account data by email (below).

Who processes it

• Google (sign-in, and analytics if enabled), Stripe (payments), Replicate (image generation: your selfie and the scene prompt are sent to the model), Cloudflare R2 (private storage), and our database and hosting providers.

How long we keep it

• Uploaded selfies: 7 days. HD photos: at least 30 days, then they may be deleted, or sooner if you delete them. Account and purchase records: as long as needed for your account and legal obligations.

Children

The service is not for children. Do not upload a photo of a child on their own.

Your choices

• Delete a photo: open it in My photos and choose “Delete this photo”. Its files are removed from storage straight away.
• Delete your account: at the bottom of the Credits page. This removes all your photos and any stored selfie, and your name, email and profile picture. We keep purchase and credit records without your name or email, for accounting, refunds and abuse prevention, and a one-way hash of your email so a new account with the same email does not get another free preview. Stripe keeps its own payment records as the law requires.
• For anything else, including a copy of your data, email hello@christmasaiphoto.com.