Privacy Policy
The photos you bring here are often the most personal ones you own. This page explains what we collect, why we need it, who processes it, how long we keep it, and how you can delete it.
Who we are
All of Us Photo is the photo service at allofusphoto.info. For privacy questions or deletion requests, write to support@allofusphoto.info. For anything else, write to hello@allofusphoto.info.
What we collect
- Your photos. The photo you want to add someone to, a picture of the loved one you miss, and an optional second person's photo for the Whole family plan.
- Project information. The relationship or name you choose to provide, your placement instructions, selected portrait styles, generation status and the images you choose to keep.
- Your email and Google account. Google sign-in is required to create a project or use the photo tools. When you sign in, we receive your Google account identifier, verified email address, name and profile picture. We do not receive your Google password or access to your email. We also use the checkout email to deliver and recover your album.
- Session and request information. A private session cookie and ordinary request information, including your network IP address, help us protect albums and operate the service. We also set a random device identifier in an essential HttpOnly cookie called aou_did, which page scripts cannot read. For the daily free-preview limit, we store your All of Us account ID and separate keyed hashes (HMACs) of that device identifier and the network IP address. These essential cookies and limit records are not used for advertising or tracking you across other websites.
- The standard free-preview offer is limited to one new project per Google account, device, and IP address in a rolling 24-hour period. Any of these limits can block a new free project. The window starts when the initial preview request is accepted. Each album also retains its own record of free previews already used.
- Order and support records. We keep the package, amount, payment status and any message you send us. Payments are processed by Creem or Waffo, depending on the checkout you choose. We do not receive or store your full card number.
How we use it
- To upload and validate your photos, generate previews and finished photos, provide the portrait styles and other features in your package, and let you download your images.
- To authenticate you with Google when you use the photo tools, link your projects to your account, and help you recover an album.
- To process payments and refunds, send your album link and an expiry reminder, respond to support messages, and prevent misuse.
We do not sell or rent your information. We do not use advertising trackers or send your photos to advertising networks.
We never train on your photos
We do not use your photos to train our own AI models and do not publish them as examples. Image providers process the inputs needed for your request under their own terms. The example photos on this website were made separately for illustration.
What we check for, and why
We check supported file formats and size. Before image generation, required input photos are checked through APIMart using omni-moderation-latest. The check receives a complete-frame JPEG copy, resized down when necessary so its longest edge is at most 1,536 pixels. This is general image-content screening for sexual material, violence and self-harm.
We record the screening outcome for each input image asset and reuse its passed or rejected result for that same asset. Rejected images are blocked. Failed, unavailable or unconfirmed checks do not enable generation. Creem separately screens the text instructions before each request reaches the image-generation model; refused, flagged or failed text checks also stop generation.
Automated screening has limits and may miss prohibited content. The restrictions in our Acceptable Use Policy still apply regardless of a screening result, including the rules about minors, public figures, impersonation and permission to use a photo.
Who processes your data
We use the providers below to operate this service. Each receives the information needed for its job.
Provider What it does for us What it receives
Cloudflare Workers, D1 and R2 Hosts this website, runs the service and privately stores projects, photos and daily-limit records Uploaded and generated images, project and account records, the device identifier, separate daily-limit keyed hashes and ordinary request information
APIMart and the model providers Runs image generation and general image-content screening for sexual material, violence and self-harm The images and instructions needed for generation, and complete-frame JPEG copies resized to a longest edge of at most 1,536 pixels for image screening
Google Identity Services Google sign-in for the photo tools Authentication and browser information for signing you in
Creem Processes payments, refunds and generation instruction screening Checkout details, order identifiers and instructions submitted for screening
Resend Delivers album recovery, expiry and support emails The destination email address and message content
These providers may process information outside the country where you live. Their handling of temporary copies is governed by their own terms and policies.
How long we keep things
Scheduled cleanup clears the account and device/network identifiers used by the current daily limit once the claim is at least 48 hours old. Each album keeps its record of free previews already used. This cleanup does not alter the photo-retention periods below.
- If you do not buy, uploads and previews are deleted automatically 30 days after the project is created.
- If you buy, your album stays available for 365 days. An email reminder is sent 14 days before expiry so you can download everything. Photos are deleted when the album expires.
- If the original package purchase is fully refunded, your album, uploaded photos and generated photos are deleted, and its links stop working. If only an upgrade price difference is refunded, your original purchased package and album are kept, and the upgraded benefits are removed.
- You may delete a project from your album at any time or ask support@allofusphoto.info for help. Deletion removes your photos from our storage and invalidates their links. Basic order records may be retained where needed for accounting, disputes or legal obligations.
Your choices and rights
You can ask to access, correct or delete information about you by writing to support@allofusphoto.info. Contact us from the email used for your account or order so we can verify the request. Depending on where you live, you may also have rights under applicable privacy law and may contact your local data protection authority.
Photos of other people
Upload only photos you have the right to use and likenesses you are permitted to recreate. Consider the wishes of the people shown and their families. If you appear in an uploaded photo and want it removed, contact us.
Children
The service is for adults aged 18 and over. Family photos may include children, but inappropriate content involving minors is prohibited. We do not knowingly collect accounts from children.
Security
Uploads and generated photos are kept in private storage. Access is checked against the current session, signed album recovery link or Google account. Photo delivery links are short lived. No system can guarantee absolute security, so keep album links private and download copies of the photos you want to keep.
Changes to this policy
We may update this policy as the service changes. The date above identifies the current version.