Privacy Policy

What we collect

• Account details: your username, a one-way hash of your password and of your recovery code, your roles and your credit balance. We never see or store your password itself.
• What you create: your prompts, the images you upload, the images, video and audio you generate, and the sequences that hold them. Prompts are stored with each creation so you can reopen and refine your work.
• Usage records: your generation history, credit ledger and API keys (stored as hashes).
• Sign-in sessions: the IP address and browser name of each signed-in session, kept until the session ends or expires.
• Sign-up checks: to stop free-trial abuse we keep a keyed hash of the IP address and network you signed up from, and the country reported by our network provider. The hash cannot be turned back into your IP address.
• Payments: the amount, credits, status and time of each purchase. For card payments we keep the Stripe payment reference, never your card number. For Monero payments we keep the payment address, amounts and transaction IDs.
• Server logs: our servers record the IP address, time and address of each request for security and troubleshooting. They are deleted on a rolling basis and never contain your prompts.

How we use it

• To run the service: sign you in, render your generations, keep your work and your credit balance.
• To process payments and handle refunds and disputes.
• To protect the service and its users: preventing trial abuse, fraud and attacks, and enforcing the Acceptable Use Policy.
• To meet legal obligations.
• We do not sell your data, use it for advertising, or use your prompts, uploads or generations to train AI models.

Who we share it with

• Stripe processes card payments. When you pay by card, Stripe collects your card details and any email address you enter at checkout under its own privacy policy, and sends receipts.
• Cloudflare carries our traffic and protects the site from attacks, so it handles your IP address and requests.
• Generations are rendered on our own hardware, not by a third-party AI provider. The render machine deletes each job's prompts and files as soon as the result is saved to your account.
• Authorities, when the law requires it, or to report child sexual abuse material as described in the Acceptable Use Policy.
• If Keytween is sold or transferred, your data may move with it under the same promises.

Cookies and browser storage

We use one essential cookie to keep you signed in. Your browser also stores a few interface preferences, such as panel and preview settings, on your own device. We use no advertising or analytics cookies, so there is no cookie banner.

How long we keep it

• Your creations and prompts are kept until you delete them or your account is deleted.
• When you delete a creation, its files are overwritten and removed and its prompts and records are deleted. No copies are kept elsewhere. Storage hardware cannot always guarantee that overwritten data is unrecoverable, but we do not keep or restore it.
• Purchase and credit records are kept for as long as tax and accounting law requires, even after an account is deleted.
• Short-lived backups made during updates are deleted once the update is confirmed.
• Content and account data connected to a child-safety report are kept for investigators as the law requires.

Your choices and rights

• You can view, download and delete your creations at any time in the app.
• You can delete your whole account yourself on the Account page. This deletes all your sequences, uploads, generations, prompts, sessions and API keys at once, forfeits any remaining credits and cannot be undone. Only your purchase and credit records are kept, without your username, as tax and accounting law requires.
• If you can no longer sign in, email [email protected] with your username to have your account deleted. Because there is no email on your account, we may ask you to prove it is yours, for example with your recovery code.
• Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how it is used. Email [email protected] and we will respond within 30 days.

Security

Passwords, recovery codes, sessions and API keys are stored only as hashes. All traffic is encrypted, and access to our servers is restricted. No system is perfectly secure, so use a strong, unique password and keep your recovery code safe.

Children

Keytween is for adults 18 and over. We do not knowingly collect data from children. If you believe a child is using Keytween, email [email protected].

Changes and contact

We may update this policy. The date at the top shows when it last changed. Questions or requests about your data: [email protected].

See also

• Support
• Terms of Service
• Acceptable Use Policy