Your photos. Your privacy.

AlmostMe is a photo-editing service. This page explains how we handle your account, photos and edits.

Photos and editing instructions

When you request an AI generation, we send the necessary reference photos and editing instructions through our server to the image provider selected for that operation. AlmostMe supports OpenAI and Google Gemini. The provider used for a generation processes the photos and instructions under its own terms. Read OpenAI API data controls and Google Gemini API terms for processing and retention details. These can depend on the provider account and settings. We do not train our own models on your photos. Local adjustments such as grain, color and resizing are processed in your browser.

Quality and safety review

After you acknowledge the photo permission notice, newly submitted uploads, generation inputs, editing instructions and results are available to authorized AlmostMe staff for safety, support and quality review. Access is restricted to administrators and recorded. Review copies of inputs are private, retained for up to 30 days, and removed by scheduled maintenance. Generation results use the separate 30-day recovery copy. Earlier workspace files are not retroactively added to this review. This does not permit us to use your photos in ads or train our own models. Contact support to request removal of review copies.

Where your work is saved

Your workspace is backed up in this browser on this device. While signed in, starting work creates an account workspace automatically, and subsequent changes save there. The saving status shows whether your latest changes have reached your account. If saving fails or you are offline, the device backup remains available. Account saves contain photos, editing instructions and version history, stored privately using Supabase. Signing into the same account lets you open these saves on another device. API keys are excluded from workspace backups and exports.

Retention and deletion

Device backups remain until you remove them or clear browser storage. Account workspaces remain until you remove them or request deletion. Removed account workspaces are marked for deletion; scheduled maintenance removes their stored files after a waiting period of at least three hours. Generation-recovery images are scheduled for removal after 30 days. A copy kept in an account workspace or downloaded to your device is separate from generation recovery.

To request account deletion or a copy of your account data, email support@almostme.app from your account email. We verify ownership before acting. Payment and security records may need to be retained for legitimate accounting, dispute or legal requirements. Deleting photos does not cancel a subscription; use account billing controls to cancel renewal.

Account and payments

Supabase provides authentication and private account storage. Stripe processes payment details; we receive billing status and payment references, not your full card number. Google sign-in provides your account identifier and basic profile information. Browser cookies and local storage support sign-in, preferences and recovery.

Feedback and operational records

Feedback contains your message, optional reply email and optional app context. Photos and API keys are not attached automatically. We retain generation status, credit usage and error information to operate the service, investigate failures and prevent abuse.

Optional analytics

For visitors identified as being in the United States, bounded first-party analytics is enabled unless you turn it off. Other or unknown regions require your opt-in. We honor prior refusals, Global Privacy Control and Do Not Track. When enabled, a first-party cookie lasts up to 30 days. It records a random browser identifier and the first observed campaign tags, and connects those tags to your account after sign-in. We measure page and action paths, sign-in and editing errors, signups, generation completion, checkout openings, purchases and hosted downloads. A separate random session identifier groups activity, expires after 30 minutes of inactivity, and records the campaign that brought that visit. Detailed paths are kept for up to 30 days and are visible only to authorized administrators. These reports exclude form contents, photos, editing instructions and URL query strings. They can link to an available session recording when Session feedback is enabled. Counts are incomplete when analytics is declined. No Meta pixel or Meta conversion sharing is enabled by this feature.

You can change your choice using Privacy choices. Declining stops collection and requests removal of the account attribution linked to this browser. If that cleanup fails, we show a message so you can contact support. Previously recorded event totals remain. Daily hashed network identifiers are used to limit analytics abuse; the raw network address is not saved in the analytics tables. Operational and payment records are processed separately to provide the service.

Session feedback

We use PostHog to understand visits, navigation and confusing workflows. For visitors identified as being in the United States, masked session feedback is enabled unless you turn it off. In other or unknown regions, it starts only after you allow it. We honor a previous refusal, Global Privacy Control and Do Not Track signals. You can stop future collection at any time using Privacy choices.

Recordings cover public pages and masked editor interactions. Uploaded photos, generated images, typed text, passwords and API keys are excluded. Account pages produce navigation events only; authentication callbacks, payment and administrator pages are excluded. Console logs, network bodies and URL query strings are not recorded. Approved campaign labels can be recorded separately to understand which ads bring visits. PostHog stores a random browser identifier in local storage to connect navigation on this site; we disable location enrichment. We do not share these recordings with advertising platforms. Contact support about previously collected data.

Trying without an account

You can try three watermarked previews without an email or payment card. A temporary guest session keeps your allowance and protects your images. Your workspace also saves in this browser. Clearing browser data may remove access to it. Creating an account with a new Google identity links your trial and remaining previews to that account. We use a one-way connection identifier and request limits to prevent repeated free trials; this is not used for advertising.

Your choices

You can remove account workspaces, delete device backups, download your work and contact support about stored data. Only upload adult photos you have permission to edit. Changing a face does not guarantee anonymity or prevent recognition from faces, surroundings or other clues.

Questions

Contact support@almostme.app. Material changes to this policy will be reflected in the date above.