Privacy Policy

1. Data we process

• Photos you upload. Each photo is checked in your browser and by our server (file type, size, dimensions), then stored privately in Cloudflare R2. Photos that were not already deleted are removed automatically 14 days after upload.
• Videos we generate. Results are stored in Cloudflare R2. A video page is public to anyone with its link until you set the video to private in My videos. You can delete a video from your account.
• Account data. If you log in with Google we receive your Google account ID, email address and name, never your password. If you log in with an email code we store your email address and a hashed form of the code while it is valid.
• Credits and orders. Our database records credit changes, orders (product, amount, currency, status and time) and the task history of your videos (time, format, status). These records contain no images.
• Payments. Our merchant of record, Waffo Pancake, handles your card details, tax and receipts. It tells us the order ID, product, amount, currency and the email used at checkout. We never receive your card number.
• Usage and attribution data. We record a few events (login, upload, checkout, payment, video created, download) and, on your first visit, a first-party cookie with the referring site, landing page and campaign tags so we can see which sources bring customers. No event contains photos.
• Automatic photo screening. Every photo you upload is checked automatically by an AI vision model (run for us by our AI provider) before it can be used. It looks for nudity, violence, people who look under 18, celebrities and public figures, and photos that are not of one real person or one pet. We keep only the result of each check (passed, blocked or could not be checked, the category, the model name and the time), never a copy of the photo or of the model’s reply. A photo that is blocked is deleted right away.
• Abuse prevention. To enforce the free-preview limits we keep a salted hash of your IP address and a salted hash of your account identifier (your Google account ID or email address), never the address or identifier itself. The account hash is kept after you delete your account, so that a deleted account cannot claim the free preview again. Cloudflare Turnstile may check that a request comes from a real browser.
• Technical data. Our host, Cloudflare, processes request data such as IP address and browser details to serve the site and block attacks.

2. Why we process it

• To make the video you ask for and show you the result.
• To run accounts, credits, payments, refunds and support.
• To prevent abuse and keep free previews within the site’s free-preview budget.
• To screen uploaded photos automatically for content we do not allow.
• To protect the service and the people shown in photos, including handling reports.
• To understand which pages and sources work, using anonymous or aggregated figures where we can.

3. Who receives your data

• AI provider. To screen your photos and to render a video, we send them to kie.ai: the screening step sends the photo itself to a vision model, and the render step gives kie.ai a temporary, signed link to your two photos. The link expires after two hours. kie.ai passes the photos to the video model (Seedance 2.0 Mini by ByteDance). Those providers handle the data under their own terms and privacy policies.
• Cloudflare for hosting, storage, databases, security checks and optional web analytics.
• Waffo Pancake for payments.
• Google for sign-in, and for Google Analytics only if you accept analytics cookies.
• Email service (Cloudflare Email or Resend) for login codes and receipts.
• Authorities, when the law requires it or to protect people from harm.

4. Training

We have no AI models of our own and we do not use your photos or videos to train any model. Third-party providers follow their own policies, which we do not control.

5. How long we keep it

• Uploaded photos: deleted automatically after 14 days, or sooner if you delete your account.
• Generated videos: until you delete them or your account.
• Account, credit and order records: while your account exists, and for as long as accounting or fraud rules require afterwards.
• Photo-screening results (no images): kept as a short log. Free-preview records: the hashed IP address is part of your task history and goes when you delete your account, while the hashed account identifier is kept so the free preview cannot be claimed twice. Server logs: a short period set by Cloudflare.
• Google Analytics data, if you accepted it: 2 months.

6. Cookies and local storage

We use a small number of strictly necessary cookies to keep you logged in and to protect sign-in, plus the first-party attribution cookie described above. Analytics cookies are off until you click Accept in the banner, and you can change your choice later in Cookie settings in the footer.

7. Your choices and rights

• Delete your account, videos and remaining credits from the account page.
• Email us to access, correct or export your data, or to object to processing. We reply within 30 days.
• Make any video private in My videos.
• If you are in the EU, UK or Brazil, you may also complain to your data protection authority.

8. Children

Tip Toe AI is for adults aged 18 and over. Do not upload photos of anyone under 18. If we learn that a minor’s photo was uploaded, we delete it and may close the account.

9. International transfers

Our providers run servers in several countries, so your data may be processed outside the country where you live. We choose providers that describe safeguards for such transfers.

10. Changes

We may update this policy. The new version appears on this page with a new effective date, and we will show a notice on the site for material changes.