Privacy Policy

Last updated: September 2026

Let's Imagine Me ("we", "us", "our"), operated from Germany and accessible at https://letsimagine.me, is a service that trains a personal AI model from photos you upload and generates new, realistic pictures of you. Because photos of your face are sensitive, we want to be precise about what we collect, why we collect it, who processes it for us, and what control you keep. If anything here is unclear, contact us at legal@letsimagine.me or support@letsimagine.me and we will gladly assist you.

What data we collect

• Account data. Your email address, and — if you sign in with Google — your name and profile picture as provided by Google. We never see or store your Google password. If you sign in by magic link, we store only your email address.
• Uploaded photos. The photos you provide to train your personal model. These are the core of the service and we treat them as confidential content, not as marketing material: we do not publish them, sell them, or use them to train any general-purpose model shared with other users. They are used solely to train your model.
• Generated images. The images your model produces, stored so you can view and download them in your gallery.
• Payment data. Payments are handled by Stripe. We receive your subscription status and billing country from Stripe; your card number never touches our servers.
• Usage data. Basic technical logs (IP address, browser type, pages visited, timestamps) used for security, debugging and anonymised statistics. See our Cookies Policy for details on cookies and analytics.

How we use your data

• To provide the service: authenticate you, train your personal AI model from your uploaded photos, generate images you request, and show them in your account (performance of a contract, Art. 6(1)(b) GDPR).
• To process payments and manage your subscription (performance of a contract).
• To send transactional email — sign-in links, order and pipeline notifications — from our own domain, letsimagine.me (performance of a contract).
• To keep the service safe: automated moderation screens uploaded photos and rejects content we do not allow — including any photo that appears to contain a minor, which is refused automatically (legitimate interest / legal obligation).
• To improve the service using aggregated, anonymised usage statistics (legitimate interest).

We do not sell your personal data, and we do not use your photos or your likeness for advertising or for training shared models.

Who processes data on our behalf

We use a small number of specialised service providers (processors), each bound by data-processing agreements:

• Supabase — authentication, database and file storage (our database is hosted in the European Union).
• GPU infrastructure providers (currently RunPod) — your uploaded photos are transferred to an isolated GPU environment for the duration of model training and image generation, then the training environment is torn down.
• Google — optional "Sign in with Google", and image-processing APIs used in parts of the generation pipeline.
• Stripe — payment processing.
• Resend — delivery of transactional email.
• Cloud storage providers — encrypted backups of trained model files.

Where a provider processes data outside the EU/EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.

How long we keep your data

• Uploaded photos, trained models and generated images are kept while your account is active, so you can keep generating and re-downloading your images.
• If you delete your account or ask us to, we delete your uploaded photos, your trained model and your generated images, except where a short retention period is required for abuse prevention or legal obligations.
• Invoicing records are kept as long as tax law requires.

Your rights

Under the GDPR you have the right to:

1. know whether and how your personal data is processed;
2. access the data we hold about you and obtain a copy;
3. have inaccurate or incomplete data corrected;
4. have your data erased ("right to be forgotten") — for this service that means your photos, your model and your generated images;
5. restrict or object to processing;
6. receive your data in a portable format;
7. withdraw consent at any time where processing is based on consent;
8. lodge a complaint with a supervisory authority — in Germany, the data protection authority of your federal state.

To exercise any of these rights, email legal@letsimagine.me. We respond within one month.

Security

All traffic to and from letsimagine.me is encrypted with TLS. Access to production data is restricted to the people who operate the service, photos and models are stored in access-controlled storage, and payment credentials are handled exclusively by Stripe. No internet service can promise absolute security, but we follow the principle of collecting the minimum and locking down what we keep.

Children

The service is not directed at children and may not be used by anyone under 18. Our moderation automatically rejects uploaded photos that appear to contain minors.

Changes to this policy

We may update this Privacy Policy as the service evolves. The "Last updated" date at the top reflects the current version, and material changes will be announced in the service before they take effect.

Contact

Privacy questions: legal@letsimagine.me
General support: support@letsimagine.me

Our full terms are available at Terms & Conditions.