Privacy Policy

Last updated: January 7, 2026

1. Introduction

Welcome to Nana AI ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image generation and editing service. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

2.1 Personal Information from Google Authentication

We collect personal information through Google OAuth authentication when you sign in:

Name and email address from your Google account
Google user ID for account identification
Profile picture (if available and permitted)
Payment information (processed securely by Creem as our payment processor and merchant of record)
Communication data when you contact us

Note: We do not store your Google password or have access to your full Google account. We only access the basic profile information you consent to share during sign-in.

2.2 Usage Information

We automatically collect information about your use of our services:

Images you upload for processing
Text prompts and generation requests
Device information and browser type
IP address and location data
Usage analytics and performance metrics

3. How We Use Your Information

We use your information for the following purposes:

Providing and improving our AI image generation services
Processing your images and generating requested content
Managing your account and subscription
Communicating with you about our services
Ensuring security and preventing fraud
Complying with legal obligations
Implementing content safety and moderation measures
Developing and training our AI models (with appropriate safeguards)

AI Model Content Safety: Our AI processing partners have built-in content safety measures that automatically detect and reject inappropriate content requests. These AI models are designed to refuse generating NSFW content, adult material, and other inappropriate content categories, ensuring compliance with our acceptable use policies and applicable laws.

4. Third-Party AI Processing

Important Notice: Our image generation is powered by our AI service providers's infrastructure. Your uploaded images and text prompts are processed by our AI service providers and are subject to their data retention policies.

4.1 Our AI Service Providers Data Processing

Your images and prompts are transmitted to our AI service providers for AI processing
Our AI service providers retains user uploads and prompts for up to 7 days for debugging and monitoring purposes
After 7 days, your data is automatically deleted from our AI service providers's systems
Our AI service providers does not use your data to train their AI models
Our AI service providers does not share your data with third parties
You can request immediate deletion of your data before the 7-day period

4.2 Our Data Handling

We do not permanently store your uploaded images or prompts
Images are temporarily cached only for the duration of your session
Generated images are stored temporarily and may be deleted without notice
We do not use your content for training our own AI models

Data Minimization: We practice data minimization - we only process your data as necessary to provide the service and do not retain it longer than required.

We may share your information in the following circumstances:

Our AI Service Providers Processing: Your images and prompts are transmitted to our AI service providers for AI image generation under their privacy terms
Payment Processing (Creem): With Creem (Armitage Labs OÜ), which acts as our merchant of record and payment processor. Creem processes your payment information, issues invoices, handles tax calculations and remittance, and provides fraud prevention services. Creem's privacy practices are governed by their own privacy policy, available at https://www.creem.io/privacy. When you make a purchase, your payment information is shared with Creem to complete the transaction.
Service Providers: With trusted third parties who assist in operating our services (hosting)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with mergers, acquisitions, or asset sales
With Consent: When you explicitly agree to share your information

Third-Party Processing Notice: By using our service, you acknowledge that your images and prompts will be processed by our AI service providers according to their privacy policy. We recommend reviewing our AI service providers's privacy policy for complete details about their data handling practices.

6. Data Security and Content Safety

We implement comprehensive security measures to protect your information and ensure content safety:

6.1 Technical Security Measures

Encryption of data in transit to and from our AI service providers
HTTPS secure connections for all data transfers
Access controls and authentication measures
Minimal data retention to reduce exposure
Regular security audits and assessments

6.2 AI Model Content Safety

Built-in AI Safety Measures: Our AI processing partners incorporate advanced built-in content safety measures that automatically identify and refuse to generate inappropriate content, ensuring responsible AI usage without requiring additional filtering systems.

AI model-level safety: Our AI processing partners have integrated safety measures that prevent inappropriate content generation at the model level
NSFW content refusal: The AI models are trained to automatically decline requests for adult or sexually explicit content
Harmful content prevention: Built-in mechanisms prevent generation of violent, discriminatory, or harmful material
Responsible AI standards: AI processing partners maintain industry-leading responsible AI practices and content policies
Transparent content policies: Clear guidelines on what content can and cannot be generated through our AI partners

6.3 Payment Processor Compliance

Industry Standards Compliance: Our content safety measures are designed to meet and exceed the requirements of major payment processors, ensuring sustainable service availability and compliance with financial industry standards.

Security Partnership: We work with our AI service providers, which implements enterprise-grade security measures including data encryption, secure infrastructure, and compliance with industry standards to protect your data during processing. Our AI processing partners have built-in content safety measures that ensure responsible AI usage and prevent inappropriate content generation.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

Access and review your personal information
Correct inaccurate or incomplete data
Delete your account and associated data
Object to certain processing activities
Data portability and export options
Opt-out of marketing communications
Request immediate deletion of data from our AI service providers before the 7-day retention period

Data Deletion Rights: While our AI service providers automatically deletes your data after 7 days, you can contact us to request immediate deletion of your images and prompts from their systems before this period expires.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including compliance with GDPR and other applicable privacy laws.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@nanabananaai.com
Website: Contact Form
Studio: Nana AI Studio
Location: WuHan, China