Privacy Policy

Information we collect

• Account information. When you sign in with Google or Discord, we receive your name, email address, profile picture, and a provider account identifier. We do not receive or store your Google/Discord password.
• Content you create. The prompts you write, the images and files you upload, the images you generate, and the projects/workflows you build on the canvas.
• Usage information. Basic operational data such as your generation count against your quota, and server logs used for security and debugging.
• Newsletter. If you opt in, the email address you provide so we can send product updates. You can unsubscribe at any time.
• Cookies. We use a single essential, signed session cookie to keep you logged in, plus a short-lived cookie during the sign-in handshake. We do not use advertising or third-party tracking cookies.

How we use your information

• To provide, operate, and maintain the Service and your account.
• To authenticate you and to enforce our approval (waitlist) gate and per-account usage limits.
• To process your prompts and images in order to generate the output you request.
• To protect the Service against abuse, fraud, and security threats.
• To communicate with you about the Service, and to send updates if you subscribed to the newsletter.
• To understand and improve how Pouc is used.

Third-party services we share data with

We rely on a small number of trusted providers to run Pouc. We do not sell your personal data.

• Authentication — Google and Discord, when you choose to sign in with them (Google Privacy Policy, Discord Privacy Policy).
• AI image generation — to fulfil a generation, the relevant prompt and image data are sent to our model providers, currently Google (Gemini API) and Replicate. Do not submit content you are not comfortable sharing with these providers.
• Hosting — the Service runs on our own server infrastructure (a virtual private server). Content and account data are stored there.

Bring-your-own keys

If you supply your own AI provider API keys, they are stored only in your browser’s local storage and are sent to our server solely to pass your requests through to that provider. They are not stored in our database. Clearing your browser storage removes them.

Data retention

We keep your account information and content for as long as your account is active. You may ask us to delete your account and associated content at any time (see “Your rights”). Some logs may be retained for a limited period for security and legal purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, or to unsubscribe from the newsletter, contact us at hello@pouc.studio.

Security

We protect your session with signed, expiring cookies, serve the Service over HTTPS, and gate access behind manual approval. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information.

Children

Pouc is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

International transfers

Our providers may process your data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Contact

Questions about this Policy or your data? Email us at hello@pouc.studio.