Skip to content
WWYLL

Privacy Policy

Last updated: February 21, 2026

Your Privacy Matters

At What Would You Look Like, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our AI photo transformation service.

Information We Collect

Photos You Upload

  • Photos are processed securely to generate transformations
  • To generate transformations, your photos are sent to Google's Gemini API for AI processing (see "Third-Party Services" below)
  • For anonymous users, photos are automatically deleted after 30 minutes
  • For registered users, photos are stored until you delete them or your account
  • We never use your photos for training AI models

Account Information

  • Email address (if you create an account)
  • Name (optional)
  • Authentication data from Google (if you sign in with Google)

Payment Information

  • Payment details are collected and processed by Stripe. We do not store your credit card number or full payment details on our servers.

Usage Data

  • Anonymous analytics to improve our service
  • Session identifiers for rate limiting
  • Browser type and device information

How We Use Your Information

  • To provide photo transformation services, including sending your photos to Google's Gemini API for AI processing
  • To maintain and improve our service
  • To process payments via Stripe
  • To communicate with you about your account
  • To prevent abuse and enforce rate limits

Third-Party Services

We rely on the following third-party services to operate. Your data is shared with these providers only as necessary to deliver the service:

Google (Gemini API) — AI Image Processing

When you request a transformation, your uploaded photo is sent to Google's Gemini API to generate the transformed image. Google processes your photo solely for this purpose. Under Google's API terms of service, data sent via the paid API is not used to train Google's models. For more details, see Google's Gemini API Terms of Service.

Supabase — Authentication & Storage

We use Supabase for user authentication, database storage, and file storage (including your uploaded photos and transformation results). For more details, see Supabase's Privacy Policy.

Stripe — Payment Processing

If you upgrade to a paid plan, your payment is processed by Stripe. We do not have access to your full card details. For more details, see Stripe's Privacy Policy.

Google Sign-In — Authentication

If you choose to sign in with Google, we receive your name and email address from Google to create your account.

Data Retention

  • Anonymous users: photos and results are automatically deleted after 30 minutes
  • Registered users: photos and results are stored until you delete them or your account
  • Google Gemini API: photos are processed in real-time and are not retained by Google after the transformation is generated, per their API terms
  • Stripe: retains payment and transaction data in accordance with their privacy policy and legal obligations

International Data Transfers

Our third-party providers (Google, Supabase, Stripe) may process your data in locations outside your country of residence, including the United States. By using the Service, you consent to the transfer of your data to these locations. These providers maintain appropriate safeguards for international data transfers.

Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data on the following bases:

  • Contract performance: processing your photos to deliver the transformation service you requested
  • Legitimate interest: analytics, security, abuse prevention, and rate limiting
  • Consent: marketing communications (you can opt out at any time)

Data Security

We use industry-standard security measures to protect your data:

  • All data is encrypted in transit (HTTPS)
  • Photos are stored securely with restricted access
  • We regularly review and update our security practices

Your Rights

You have the right to:

  • Access your personal data
  • Delete your account and all associated data
  • Export your data
  • Opt out of marketing communications

Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting a notice on our website.

Contact Us

If you have any questions about this privacy policy, please contact us at [email protected].