GencraftApp
Privacy Policy
Last updated: October 12, 2026
This policy explains how information is handled when you browse GencraftApp, generate or edit images, or contact the operator. The current image-generation workflow does not require an account or payment.
Who operates GencraftApp
GencraftApp is developed and operated by an individual independent developer. The operator is responsible for the processing described in this policy. Contact email: support@gencraftapp.com
Information processed and its purposes
- Generation requests: your text prompt and selected image settings are processed to create and display an image. Personal information that you include in a prompt is processed with that request.
- Pre-generation screening: before sending a request to the image model, the text prompt and effective generation instructions are sent to Agnes 2.5 Flash to check for sexual content, real-world political content, violent harm, and obvious imitation of third-party works or brands. For image editing, a resized copy of the uploaded image and the editing instructions are screened together. Requests that cannot be screened or do not meet the site's content rules are not sent to the image model. The website does not store the screening image separately.
- Image editing: when you start an edit, the uploaded image (decoded, resized if needed, and stripped of metadata) and your instructions are sent to Agnes AI. The website does not write uploaded originals to its database or image storage. Editing instructions, IP address when available, result URL, and output ratio are recorded in Supabase. Provider-side retention follows the provider's policies.
- Generation records: the service stores your submitted prompt, IP address when available, generated-image URL, and aspect ratio in Supabase. These records support service operation, abuse prevention, and troubleshooting.
- Technical records: hosting services process network requests and technical information. Application logs may contain prompts, image settings, provider responses, image URLs, and error details for service operation and troubleshooting.
- Usage statistics: the site integrates Vercel Web Analytics. When enabled, it reports aggregate visits, pages, referrers, browser and device information, and approximate location to help understand website usage.
- Correspondence: your email address and information you send to the operator are processed to respond to support or privacy inquiries.
Third-party services
- AI generation services: your prompt, including additions based on your settings, and requested image dimensions are sent to the active AI service. The integration supports Agnes AI and Gitee AI. The provider returns an image URL; loading or downloading an image also makes a request to its host. Provider-side processing and retention depend on the applicable service's policies.
- Supabase stores the website's generation records. Vercel provides hosting, request logging, and Web Analytics.
- Cloudflare Turnstile, when enabled, processes browser or device signals to check requests for automated abuse. The server submits the verification token and IP address when available to Cloudflare.
These services may process information outside your country. Provider-held data and backups are subject to the relevant service's settings and retention practices.
Browser storage and analytics
The language selector writes your chosen language to browser local storage, which you can clear through browser settings. The continue-editing button temporarily places an image URL in session storage to transfer it to the editor, then removes that entry. Uploaded images and editing history are held in page memory; changing language, refreshing, or leaving the editor clears that working state. The image-import/download endpoint requests the image from its host through the website server; hosting logs may include the requested URL. Vercel Web Analytics provides aggregate statistics without third-party analytics cookies. This does not mean generation records or server logs are anonymous or absent.
Storage and deletion
Generation records can remain in the database after a browser session ends. Images are displayed using URLs returned by the AI service. A single retention period for generation records, application logs, backups, and provider-hosted images has not been published; automatic deletion within a fixed period is not guaranteed. Contact the operator to ask about a particular record or request its deletion. Image availability and deletion of provider-held copies depend on the relevant provider.
Privacy requests
You can email the operator with questions or requests to access, correct, or delete records associated with your use. An approximate generation time and image URL, if available, can help locate a record. Because generation does not require login, additional information may be needed to establish that a record belongs to you. Requests will be considered in accordance with applicable requirements. Deleting a record held by this website does not automatically delete third-party logs or backups.
Advertising, if enabled
If Google AdSense advertising is enabled, Google and other advertising vendors may use cookies and identifiers such as IP addresses to serve and measure ads. Advertising cookies can personalize ads based on previous visits to this and other websites. You can manage personalized advertising through Google Ads Settings.
Security and policy updates
The website uses HTTPS for transmission and handles database service credentials on the server. Internet services cannot guarantee absolute security. Avoid including confidential or sensitive information in prompts that you do not want processed by the website and its AI providers.
This page will be updated when the disclosed processing changes. The date above identifies the latest policy revision.
Contact
For privacy questions or requests, contact the individual operator at support@gencraftapp.com