Privacy Policy

Last updated: July 19, 2026

This policy lists exactly what Dolly collects and why — no more, no less. We run no ads, no analytics trackers, and we don't sell data. A plain-English summary sits above each section; the full text governs.

1. What we collect

In plain English: Your email, your prompts and images, billing records (never card numbers), moderation logs, and your IP at signup.

Account: your email address and authentication data, managed by our auth provider. Content: the prompts you write, reference images you upload, and media you generate. Moderation records: every moderation check is logged with a content fingerprint (hash) and verdict; for rejected prompts, the prompt text itself is retained for enforcement; rejected image uploads are never stored — only their fingerprint. Billing: transaction identifiers, amounts, and credit history. Card and payment details go directly to Paddle — they never touch our servers. Technical: your IP address at first sign-in (abuse prevention) and short-lived server logs.

2. How we use it

In plain English: To run the service, keep it safe, and bill correctly. Nothing else — no ads, no selling, no trackers.

We use this data to operate the service (run your generations, store your library, maintain your balance), to enforce the content policy and prevent abuse, and to process payments and refunds. We do not sell personal data, run advertising, or use third-party analytics.

3. Who processes it

In plain English: Five processors, each doing one job: Supabase (accounts), Cloudflare (hosting + storage), Kie.ai (runs generations), Anthropic (moderation checks), Paddle (payments).

Supabase — authentication and database hosting. Cloudflare — application hosting, delivery, and media storage. Kie.ai — model provider: your prompts and reference images are sent there to run generations. Anthropic — automated moderation: prompts and uploads are checked by its models before generation. Paddle — merchant of record for all payments; Paddle's own privacy policy applies to checkout. We share data with these processors only as needed to provide the service, and with authorities where the law requires.

4. Cookies and local storage

In plain English: No tracking cookies. Your login session lives in your browser; Paddle sets its own cookies during checkout.

We set no advertising or analytics cookies. Your sign-in session is kept in your browser's local storage. During checkout, Paddle's payment overlay may set cookies under Paddle's policy. That's the complete list; if we ever add analytics, this section changes first.

5. Retention

In plain English: Media until you delete it; money records as long as the law requires; moderation logs for enforcement.

Generated media and uploads are stored until you delete them or close your account (media deleted within 30 days of closure [TODO: confirm window]). Credit and payment records are retained as required for accounting and legal obligations. Moderation logs are retained for policy enforcement and safety. Server logs are short-lived.

6. Your rights

In plain English: Ask for your data, ask for deletion — email us and we'll do it.

You can access your content anytime in the app, and delete generations individually. For account deletion, a copy of your data, or any privacy request, contact [TODO: contact email]. Depending on where you live (EU/UK GDPR, California CPRA, and similar) you may have statutory rights to access, correction, deletion, portability, and complaint to a supervisory authority. [TODO: attorney — jurisdiction-specific rights language and legal bases.]

7. Security and children

In plain English: Encrypted in transit, minimal keys, no card data on our side. Dolly isn't for children.

Traffic is encrypted in transit; secrets and API keys are scoped server-side; payment details never reach our infrastructure. The service is not directed at children under 13 [TODO: attorney — age threshold per market], and we delete accounts we learn belong to children.

8. Changes and contact

In plain English: If this policy changes materially, we tell you before it applies.

Material changes to this policy will be announced by email or on the site before taking effect. Questions and privacy requests: [TODO: contact email].