Privacy Policy

We process only data needed to provide and protect the Service.

• Account and authentication data, such as email, user ID, and login status.
• Prompts, categories, favorites, sync, backup, and team-sharing data.
• Images, text, and AI generation or optimization requests you submit.
• Configuration you choose to save, including endpoints, model names, and API keys.
• Necessary usage, device, security, error-log, and aggregate analytics data.
• Billing data such as order, plan, amount, currency, payment status, and transaction reference.

We perform our contract by providing accounts, prompt management, sync, teams, images, and subscriptions; pursue legitimate interests in security, troubleshooting, and improvement; meet legal obligations; and obtain consent where applicable law requires it.

Supabase provides authentication and databases, while object storage holds resources you choose to upload. Content is sent to official or user-configured AI providers only when you invoke those features. Creem and WeChat Pay perform the international USD billing and CNY payment-processing roles described below. Each provider processes data under its own terms.

For international USD billing, Creem acts as Merchant of Record and receives your email, Creem customer identifier, and the order, transaction, subscription, and payment facts needed to collect payment, calculate applicable taxes, and issue invoices. For CNY payments, WeChat Pay receives merchant order, payment, and refund facts. We do not store full card numbers or complete credit-card details.

Supabase, object storage, Creem, or configured AI providers may process data outside your country. We use contractual and security safeguards required by applicable law.

We keep account data while the account is active and as needed to provide the Service; retain billing and compliance records as legally required; and delete or anonymize unneeded data after a valid request, subject to limited backup retention.

Depending on applicable law, you may request access, correction, export, deletion, or restriction, withdraw consent, or object to processing. Statutory retention duties may limit some requests.

We use reasonable measures including encryption in transit, access controls, least privilege, and monitoring. No system is completely secure; protect your account and API keys.

The Service is not directed to children under 13, and we do not knowingly collect their personal data. Contact us if you believe a child supplied data.

Send privacy and data-rights requests to support@oh-my-prompt.com. We may need to verify your identity.