Skip to the pagePicYep
Pricing

Last updated · 2026-10-22

Privacy Policy

How PicYep handles account, billing, usage, and AI generation data.

In short

  • Your photos, prompts and reference photos are visible only in your account. Nothing is published unless you turn on a share link for a photo.
  • PicYep does not train AI models on your prompts, photos or results, and does not sell them.
  • To make a photo, your prompt, settings and reference photos are sent to fal.ai, which runs the AI models. We ask fal.ai not to keep the request once it is answered and to delete the files it generated within 24 hours.
  • Photos you make stay in your library until you delete them. Reference photos are kept with the photo they were used for and are removed with it, or by you at any time; in Settings you can have them deleted 7 days after upload or once the photo is made. A deleted photo is removed for good after 30 days.
  • Full-size photos, the reference photos you upload and the photos of people you save are kept in private storage with no public address. They open only through links given to your signed-in account, and each link stops working after a few hours. Small preview pictures are kept under long random addresses that are not listed anywhere.
  • Payments are handled by Waffo as Merchant of Record. We never store full card numbers.
  • You can export your data and delete your account yourself from your profile settings.

The sections below set out each point in full.

Introduction

PicYep is an AI photo generator that helps users create, save, and download AI-generated photos and images. We may add other kinds of AI-generated media over time, and this policy applies to them as well. This Privacy Policy explains what information we collect, how we use it, and what choices you have when using the service.

PicYep is an independent product and is not affiliated with, endorsed by, or officially connected to ByteDance, Google, or any other AI model provider referenced in the product.

Information We Collect

We collect information needed to operate and improve the service:

  1. Account information - name, email address, authentication identifiers, and account preferences.
  2. Generation inputs - prompts, selected models, aspect ratio, resolution, uploaded reference photos, quote requests, and related generation settings.
  3. Usage and credit data - quotes, credit consumption, subscription status, task state, errors, refund or credit-return records, how many photos you download each day, and what you tell us when you say whether a photo turned out.
  4. Payment data - billing status and payment events from payment processors. We do not store full card numbers.
  5. Device and log data - browser, IP-derived region, request metadata, diagnostics, and security logs.
  6. Support data - messages, attachments, and other details you provide when contacting support.
  7. Shared content - prompts, generated media, descriptions, and profile details you explicitly choose to publish or share.
  8. Safety and moderation data - moderation request identifiers, decisions, usage units, and pseudonymous account or generation identifiers used to screen prompts and investigate abuse.

How We Use Information

We use this information to:

  • Provide account, photo library, billing, subscription, credit, and sharing features.
  • Estimate and route media generation requests.
  • Process payments, credits, refunds, and usage records.
  • Prevent abuse, protect accounts, and enforce rate limits.
  • Screen prompts for prohibited or high-risk content before AI generation.
  • Respond to support requests and service issues. When you ask for help from the Assistant and tick the box that allows it, a person on our team may see that conversation and its photos, and make photos in it for you, for 30 days; without that, we see only what you write to us.
  • Improve reliability, performance, and product experience.

AI Inputs and Outputs

Who makes the photo. To make a photo, your request is sent to fal.ai, which runs AI models made by Google, OpenAI, ByteDance, Black Forest Labs and Anthropic. The request carries your prompt, your settings and the reference photos you added. When Enhance prompt is on, a model made by Anthropic (or one made by Google, when that one cannot answer) first reads your request and the reference photos you added, to write a fuller prompt. When you ask the Assistant for something, your words and the photos you attach are sent to OpenRouter, which passes them to a model made by Anthropic (or one made by OpenAI, if we choose it in our settings) to plan the change; we ask OpenRouter to use only providers that neither keep requests nor train on them. A photo you upload to the Assistant is kept for at most a day for its plan; a photo made from it keeps a copy as your reference photo setting says. When you have the Assistant use a person you saved, the person's name and who you said they are go with your request to the model that plans it; the person's photos are sent only to the model that makes the photo. We do not take or keep face measurements from your photos. The place, time and device details that a camera writes into a JPEG photo are removed in your browser before the photo is uploaded. When you ask us to write a prompt from a picture, that picture is sent to fal.ai for that one answer and we do not keep it.

Training. PicYep does not train AI models on your prompts, photos or results, and does not sell them. With each request we ask fal.ai not to keep the request once it is answered, and to delete the files it generated within 24 hours; our own copy of a finished photo is the one in your library. fal.ai's terms treat your inputs and results as confidential and allow their use only to provide its service; they also allow it to use data derived from requests to improve its services and models. The companies that make the models apply terms of their own. We cannot promise on their behalf how they handle what they receive, so do not submit sensitive personal data, confidential business information, or content you do not have the right to use.

Screening. Before a request is queued, charged, or sent to a model, its text prompt is sent to a content screening service run by our payment provider, with a pseudonymous account and request identifier. We block the request when screening rejects it or is unavailable, and nothing is charged. We keep the screening identifiers and decisions for safety, compliance, and audit.

Private by default. Your photos, your prompts and your reference photos are visible only in your account. Nothing is published unless you turn on a share link for a photo. A share link shows that one photo and nothing else: not your name, your prompt or your reference photos. When you stop sharing, the link stops working. Someone who saved the photo while it was shared keeps their copy.

How files are kept. Full-size photos, the reference photos you upload and the photos of people you save are kept in private storage that has no public address. When you look at your photos, the site gives your signed-in account links to them that stop working after a few hours; the links in a data export work for a day. Anyone you pass such a link to can open that photo until the link stops working. The AI services that make your photos are given links of the same kind that work for two hours. Small preview pictures of your photos are kept under long random addresses that are not listed anywhere: anyone you give such an address to can open that small picture until the photo is deleted. A share link does not reveal any of these addresses. Photos made before 15 October 2026 were moved into private storage that day, and the addresses they had before stop working by 23 October 2026.

When generation is unavailable or not configured, PicYep may estimate credits and show a preview state without sending a request to an AI provider.

Sharing

We do not sell personal information. These companies process data for us so the service can run:

  • Cloudflare: hosting, the database, storage of photo files, and sending account email.
  • fal.ai: running the AI models, as described above.
  • Waffo: payments, as the Merchant of Record for purchases, and screening of prompts.
  • Google Analytics: counting visits and what is used on the site, unless you have turned analytics off. In the European Economic Area, the United Kingdom and Switzerland it loads only after you turn analytics on.

We may also share information with security and fraud-prevention providers, with legal authorities when the law requires it, and with a successor entity in a merger, acquisition, or sale of assets. We do not run advertising trackers.

Analytics. We use Google Analytics to see which pages are visited and which steps people take: choosing a look, sending a request, saving, downloading or rating a photo, signing up, starting a purchase. It is on by default and you can turn it off at any time, as described below. For visitors in the European Economic Area, the United Kingdom and Switzerland, and where we cannot tell which country a visitor is in, it stays off until it is turned on. When it is on, Google receives the address of the page, details of your browser and device, an approximate location derived from your IP address, and those events with a word or two about each, such as the look, the model, the kind of error or the internal number of the request. It is not sent your prompts, your photos, your reference photos, your name or your email address.

Cookies and Local Storage

We use cookies and similar local-storage technologies in three categories:

  • Essential storage supports authentication, security, language preferences, saved privacy choices, and core workspace behavior. These items are required for the service to work.
  • Analytics services help us understand page performance and product usage. They are on by default and can be turned off in the privacy preference center. For visitors in the European Economic Area, the United Kingdom and Switzerland they remain off until enabled there.
  • Optional experience services may provide sign-in prompts and live support widgets. They remain disabled unless you enable this category.

You can accept, decline, or customize optional categories when the preference notice appears. You can change the same choices later through Privacy choices in the website footer. Withdrawing optional consent stops those services from loading on subsequent page loads.

Retention

  • Photos you make, with their prompts and settings, stay in your library until you delete them.
  • Reference photos you upload are kept with the photo they were used for, so you can use them again, and are removed with it. You can also remove one yourself at any time, under Your photos; the photos made from it stay. Under Settings, Security, you can choose instead to have them deleted 7 days after upload, or within an hour after the photo they were for is finished. Photos of people you saved are kept until you delete them. Photos you upload to the Assistant are saved as a person only when you choose to save them; otherwise they are deleted within a day. You can also remove a single photo from a saved person.
  • A deleted photo stays in Recently deleted for 30 days, where you can restore it or remove it for good at once. After 30 days its file and its reference photos are removed from storage. The record of the request, with its prompt, settings and credits, stays in your generation record.
  • Photos of people you save are removed from storage as soon as you delete the person. Photos already made with them keep their own copies.
  • A picture you ask us to describe is not stored.
  • Deleting your account, from your profile settings, removes your photos, reference photos, saved people, credits, billing records and support history. A running subscription has to be canceled first. Your confirmed deletion request is saved. We stop accepting new generations and uploads, wait for accepted generations and related refunds or payments to settle, then remove the files before removing the account. You can close the page; cleanup continues automatically and retries if interrupted. If cleanup remains pending, you can contact support.
  • After removal, a copy held by the delivery network can take a few hours to expire, and database backups can hold deleted records for up to 30 days.
  • Server logs of requests and errors are kept for up to 7 days.
  • Billing and security records may be kept longer where the law or fraud prevention requires it, including by our payment provider.

Security

We use reasonable technical and organizational safeguards, including encrypted transport, access controls, and operational monitoring. No internet service can be guaranteed to be completely secure.

Your Choices

You can export your data and delete your account yourself from your profile settings. Depending on your location, you may also have rights to access, correct, restrict, or delete personal information; write to us through the support channel on the website and we will act on it.

Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above and, when appropriate, providing an additional notice through the service.

Contact

For privacy questions, contact support@picyep.com.