Privacy policy.
The honest summary: your photos pass through, they don't move in. We store remarkably little about you — here's exactly what and why.
Last updated: July 4, 2026
1. Your photos
- When you generate or restore, your photo is sent over HTTPS to our server, forwarded to Google's Gemini API for processing, and the result is returned straight to your browser.
- We do not keep a gallery of your uploads or results on our servers. Images are processed transiently and are not used to advertise, train our own models, or shown to other users.
- Google processes the image as our AI provider under its Gemini API terms.
- Anything you download is stored wherever you save it — that copy is entirely under your control.
2. Your account
Nuvika accounts are deliberately minimal. When you register we store exactly four things on our server: your name, your email address, a securely hashed password (bcrypt — we never see or store the password itself) and your credit balance. We use this data solely to operate your account and deliver purchased credits. We do not build marketing profiles, and we never sell or share this data.
3. Payments
Checkout is operated entirely by Stripe. Your card number never touches our servers. From a completed purchase we see what Stripe shows merchants: the amount, the product, your email and the receipt identifiers — which we use solely to credit your account and handle support or refunds.
4. What our servers do log
- Rate-limit counters: a hashed form of your IP address with a request count, kept briefly to prevent abuse of the generation API.
- Account records: the four account fields above, plus a log of credit top-ups (when, which account, how many) — our bookkeeping for delivering what you paid for.
- Standard web-server logs kept by our hosting provider for security and diagnostics, on the provider's normal rotation.
5. Cookies & tracking
No advertising trackers, no analytics scripts, no third-party cookies. We set one first-party session cookie so you stay logged in, and use localStorage for small conveniences (free-trial hints, the style you picked in the gallery). Fonts are loaded from Google Fonts, which involves your browser requesting font files from Google.
6. Emails
We email you only about your purchases and replies to your support requests. No newsletter, no marketing sequence, no list you need to unsubscribe from.
7. Third parties, complete list
| Provider | Role | What they process |
|---|---|---|
| Stripe | Payment processing | Card details, checkout email, amount |
| Google (Gemini API) | AI image processing | The photos you submit, transiently |
| Google Fonts | Web fonts | Standard font-file requests |
| Web hosting provider | Serving this site | Standard server logs |
8. Children
The Service is not directed at children under 13, and you must be old enough to hold a payment card to buy credits. Restoring old family photos that include children, uploaded by an adult family member, is a normal and intended use.
9. Your rights
Depending on where you live, you may have rights to access, correct or delete personal data we hold. Since we hold very little (see sections 3–4), requests are usually quick: email Qiu60ge871@163.com and we'll respond within 30 days.
10. Changes
If we ever change how photos or personal data are handled, this page and its date will be updated before the change takes effect.