Privacy Policy
What we process
The text, documents and audio you supply are sent to AI providers only to produce your sketches, narration and study material. With Ephemeral mode on — the default — generated audio and images are discarded from your browser the moment the session ends, and nothing you upload is stored on our servers.
Cast DNA and likeness data
When you build a character from a photo, the image is used once to derive a stylised Cast DNA description and is not kept as a biometric template. We do not run face recognition, we do not match your photos against any database, and you can delete a character — and its derived DNA — at any time.
Cookies and local storage
We use strictly necessary storage only: your sign-in session, your interface language, your Simple/Pro mode and your studio preferences. There are no advertising or cross-site tracking cookies.
Third-party AI processors
Generation requests are processed by model providers acting on our instructions. They receive only the passage or prompt needed to fulfil the request, and they are contractually barred from using it to train their models.
Safety logs
When a submission is refused for illegal content, or when a report is filed, we record the event type, the safety categories, a timestamp and a truncated one-way SHA-256 fingerprint of the passage. The fingerprint cannot be reversed into your text, and the text itself is never written to our database. These records exist for legal compliance and abuse prevention only.
Accounts
If you create an account we store your email, display name, plan, credit balance, reading preferences and whether you have confirmed you are 18 or older. Signing in with Google shares only your basic profile and email address.
Your own API keys
Keys you enter under Settings are stored only in your own browser and are attached solely to your own generation requests. They are never persisted in our database.
Training
We do not use your uploads, sketches or narration to train models. Providers process the requests to fulfil them.
GDPR and CCPA rights
You may request access to, correction of, export of or deletion of your personal data, and you may object to processing. We do not sell or share personal information, so there is nothing to opt out of under the CCPA. Requests are answered within 30 days.
Deleting your data
Sign out to clear your local session, or ask us to delete your account and we remove your profile, credits and preferences. Compliance records tied to refused submissions are retained as required by law.
Contact
Privacy questions and data requests can be sent from the in-app support widget, or by email to privacy@eido.studio.