Effective

Privacy Policy

, operating as Focuddle, is responsible for the personal data described here. Contact: . Address: .

Data we process

Customer authentication

Customers can sign in with email and password, an email code, or a configured provider such as Google. Passwords are stored only as salted scrypt hashes. Registration may require email verification; password recovery always does. Verified users can sign in with a password without a code each time. Provider identifiers are stored to recognize accounts; linking requires an authenticated flow.

Private workspace and image processing

Uploaded files are validated, stripped of metadata and re-encoded before storage. The safely normalized source and generated result are associated with the signed-in customer and are not intentionally exposed through public object URLs. Preview and download requests require an authenticated session and ownership check.

A work may contain several reference images of the same subject. All accepted references are stored in the customer's private workspace, while the image-processing route may select a smaller quality-screened subset to limit processing cost. Personalized Windows test downloads use a short-lived random activation token in the downloaded filename. On first launch, the application exchanges that token for the selected generated image over HTTPS and then stores the image locally. The token is not an account password and has a limited lifetime and use count.

Before transfer to a production image processor, we identify the provider category, purpose and retention approach. Images are not sold and are not used by Focuddle to train a general model. A configured third-party model provider or intermediary may apply its own processing and retention terms, so users should not upload confidential or highly sensitive images.

Purposes and legal bases

We process information to authenticate customers, keep works separated by account, deliver purchases, perform requested image transformation, provide downloads and exports, enforce quotas, prevent abuse, improve reliability, answer support requests and comply with legal duties. Depending on location, the basis may be contract, consent, legal obligation or legitimate interests.

Retention and deletion

Active workspace images are retained until the customer deletes the work or closes the account. Works moved to trash are normally retained for 30 days so they can be restored, unless permanent deletion is selected. Permanent work deletion and account closure remove associated image files from active storage, subject to short-lived infrastructure backups and records that must be retained by law.

First-party analytics and model-usage records are normally retained for up to 180 days. Transaction and accounting records are retained for legally required periods. Email verification codes expire after about 10 minutes; security-session records expire according to the configured session period.

First-party analytics and security signals

Our self-hosted analytics does not use advertising cookies and does not intentionally store raw IP addresses. It creates rotating keyed hashes and records limited visit information. Country or region may be estimated from browser locale and may be inaccurate. Analytics is disabled when the browser sends Global Privacy Control or Do Not Track. A browser can also opt out with localStorage.setItem("focuddle-analytics-optout","1").

Desktop usage analytics is optional and disabled until the user enables it in the application settings. It does not transmit companion images, prompts, filenames, document contents, clipboard contents, exact mouse coordinates or typed keys. Consent can be withdrawn at any time by turning the setting off without losing desktop functionality.

Processors and international transfers

We may use hosting, email delivery, security, payment and image-processing providers. Paddle may independently process checkout and tax information as merchant of record. Google independently processes its sign-in flow when selected. We assess provider terms and use appropriate contractual and technical safeguards where required.

Your choices and rights

The workspace provides individual downloads, an account export, trash, restore, permanent deletion and account closure. You may also request access, correction, restriction or objection where applicable by contacting . We may need to verify identity and retain information required by law or to resolve disputes.

Children

The service is not intended for children to upload images independently. Images of minors require authority from a parent, legal guardian or another person legally permitted to provide them.

Security and complaints

We apply HTTPS, private access checks, secure cookies, short-lived login codes, upload normalization, rate limits, isolated containers and limited administrative access, but no system is perfectly secure. Report privacy, security or rights-holder complaints to .