Privacy Policy — Your Images and Your Data

Last updated: October 28, 2026

Summary

• Your images: an image you upload is stored in private cloud storage and sent to a third-party AI processing provider to be enlarged. Only your signed-in account can download the result.
• How long we keep it: a daily cleanup removes source images once they are older than 24 hours. Finished results stay while your account exists.
• Training and sale: we do not use your uploads or results to train our own models, and we do not sell or publish them.
• Deleting your account: you can do it yourself in Security settings.
• Questions: use the contact page.

Your images and results

You need to be signed in to upload. The file goes into private storage that is not publicly readable. To enlarge it, we give our AI processing provider a temporary link to the source image, together with the processing settings, such as the mode and the scale factor. We do not send your name or email address.

The finished result is copied into our private storage and shows up in your History page. A daily cleanup removes source images older than 24 hours. When it is needed to fix a problem or keep the service secure, we may look at your uploads and results.

Other information we collect

To run the service we collect:

• Account details: your name, email address and a hashed password, or the name, email address and profile picture Google shares if you sign in with Google.
• Credits and upscale history: your credit balance and the settings, image dimensions and status of each upscale.
• Payment records: Stripe handles your card details, and our servers do not store them. We keep references to your Stripe customer record, plan, amount and status.
• Messages you send us: the name, email address and message from the contact form.
• Technical data: your IP address, browser details and request records, used to keep accounts secure, prevent abuse and fix errors.

We use this information to run the service, take payments, answer you and keep the site secure.

Reward fairness and anti-abuse records

To apply the rules of the free daily credits, which the Terms of Service describe, we keep a few limited records. When you create an account, a sign-up record holds your sign-up method, the page language, a two-letter country code and purpose-separated irreversible keyed hashes derived from your email address, IP address, browser details, email domain and the random browser identifier described in the Cookie Policy. We do not store the raw IP address, browser details or browser identifier in this record. When you collect the free daily credits, short-lived counters built from one-way hashes limit how many accounts can collect from one browser or network on the same UTC day, and they are removed after that day ends. The welcome-credit and invitation programs are not active, but the code that applies their rules is in place: an inviter's random browser anchor remains while the invitation is active, and most other signals expire within 90 days.

When you delete your account, account-linked signup context is deleted and successful signup receipts are detached from the user. For up to 90 days from grant, the receipt retains only a purpose-separated keyed hash of a random browser identifier, key version, an irreversible grant-source digest and timestamps. Limited email hashes and de-identified invitation nodes may also remain for up to 90 days. No raw address, network address or browser fingerprint is retained in these fairness records, and they are not used for advertising or contacting you. A purpose-separated keyed hash of your email address is kept for 90 days after you delete your account, and it is used only by the welcome-credit and invitation rules. These limited, time-bound records are deliberate exceptions to deletion. Reward eligibility rows that contain your account ID are deleted, and financial ledger and lot records are kept only in anonymized form where required for balance integrity and audit.

Services we use

We use Cloudflare for hosting, storage, email delivery and bot checks, a third-party AI processing provider to enlarge images, Stripe for payments, and Google for sign-in if you choose it. We also use analytics tools to understand how the site is used. These services handle data under their own terms and privacy policies, and some of them set cookies; see the Cookie Policy.

Deleting your account and your choices

Open Security settings and choose Delete Account. We email you a confirmation link, and the deletion runs after you click it. It removes your account details, uploads and results. A few limited records, such as anonymized financial records, stay as long as payments and security require.

You can control cookies in your browser. For any other question about your data, write to us through the contact page from the email address on your account.

Changes to this policy

When this policy changes, we post the new version on this page and change the date.

Contact

For privacy questions, use the contact page. Please do not send passwords or verification codes.