1. Overview
Little Bird Studio is operated by Little Bird Studio. This Privacy Policy explains what personal data we collect, why we collect it, how we share it, and the choices you have.
Contact us about privacy at support@littlebirdstudio.app.
2. Data we collect
We collect the following categories of data:
- Account data: your email address and authentication credentials. Passwords are stored as salted, one-way hashes; we never store them in plain text.
- Usage data: your credit balance, edit history, selected recipe, output size, prompts, job status, and timestamps.
- Image data: the images you upload and the reference images you choose. Images are transmitted to our AI provider for processing.
- Contact data: your name, email address, and message when you contact us or request a plan upgrade.
- Technical data: IP address, browser type, and basic request logs used for security, abuse prevention, and debugging.
3. How we use data
We use personal data to:
- Create and secure your account.
- Provide the editing Service, including transmitting images to our AI provider and returning outputs.
- Track credits, prevent abuse, and enforce usage limits.
- Respond to support, contact, and upgrade requests.
- Maintain, debug, and improve the Service.
- Comply with legal obligations and enforce our Terms and Acceptable Use Policy.
4. Images and AI processing
When you run an edit, your image is uploaded to our AI processing provider, WaveSpeedAI, and processed by the Qwen Image model. We do not store your original images or generated outputs on our own servers.
WaveSpeedAI retains uploaded and generated media for up to 7 days, after which it is deleted according to its retention policy. You should download outputs you want to keep. We do not use your images to train our own models.
Do not upload images containing sensitive personal data, government identifiers, financial information, health information, or any material you are not entitled to process.
5. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service), legitimate interests (security, abuse prevention, and improving the Service), consent (where required, such as optional communications), and legal obligation (record-keeping and compliance).
6. Sharing
We share data with service providers who help us operate the Service:
- Resend — transactional email delivery and the support inbox.
- WaveSpeedAI — AI image processing.
- Our hosting and infrastructure providers — serving the website and storing account and job records.
- Professional advisers and authorities — where required by law or to protect rights and safety.
7. Retention
We keep data only as long as needed for the purposes above:
- Account data: until you delete your account, plus a short period for backups and legal records.
- A hashed record of free-credit grants: retained after account deletion to prevent repeated free credits.
- Session and authentication tokens: until they expire, you sign out, you reset your password, or you delete your account.
- Job metadata and prompts: up to 12 months for support, abuse prevention, and product improvement.
- Contact and upgrade requests: up to 12 months.
- Server logs: up to 30 days, unless needed for an investigation.
- Images and outputs at WaveSpeedAI: up to 7 days.
- Support inbox messages at Resend: according to Resend’s retention settings (30 days on its free plan).
8. Security
We use HTTPS, access controls, signed requests, and least-privilege credentials. No system is completely secure. If you believe your account has been compromised, contact us immediately.
9. International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, to receive a portable copy of your data, and to withdraw consent. You can delete your account from the account page or contact us.
You may also complain to your local data protection authority.
12. Children
The Service is not directed to children under 18. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data.
13. Changes
We may update this Privacy Policy. Material changes will be communicated through the Service or by email where appropriate.
14. Contact
Privacy questions and requests: support@littlebirdstudio.app.