Privacy Policy

What data do we collect?

When you create an account we store your email address and an irreversible digest (hash) of your password; the password itself is never stored. For security purposes, the IP address and browser information are processed during sign-in and important account operations. Contact and newsletter forms store only the information you enter. Your uploaded photographs, audio and text, chat messages, generated content, and the Telegram identity of bot or mini app users are also processed.

What do we use it for?

Your data is used to operate your account, carry your credit balance across products, keep the service secure (e.g. blocking suspicious sign-in attempts) and to get back to you upon your request. Your data is not sold to third parties and is not shared for advertising. When you pay by card on the web, payment is taken on Dodo Payments’ secure page and your card details never reach us. As payment processor and Merchant of Record, Dodo Payments processes data such as your e-mail address, payment and country details under its own privacy policy to collect the payment, prevent fraud and send the receipt; we receive only the payment ID, amount, currency and payment status. To pre-fill the checkout, your verified e-mail address is passed to Dodo Payments. Telegram Stars payments are processed by Telegram.

Transfer abroad

Your uploaded content and prompts are transferred to the AI infrastructure provider abroad, WaveSpeed AI and its model providers, to perform generation. This transfer relies on your explicit consent obtained at registration under Article 9 of Turkey's KVKK. You may withdraw consent by writing to [email protected]; if you do, the generation feature will no longer be available to you. Details: Personal Data Notice (KVKK).

Cookies

We only use one essential cookie that keeps your session active. We use no analytics or advertising cookies. Your language preference is kept in your browser's local storage and is not sent to us.

Retention

Account data is kept for as long as your account is open. Security records are cleaned up after a reasonable period. When you ask us to close your account and delete your data, your request is honoured.

Saved photo (face memory): when you upload an identity photo in the mini app, we keep it in your account so you do not have to upload it again for every template, and it is used only for creations you start yourself. It is never shared with other people and never used to train AI models. You can delete it at any time from the Profile screen in the app or with the “Delete my face” button next to the photo field; deleting also removes the file from our servers. Deleting your account deletes the photo too.

Mobile app

If you sign in to the Gece iOS or Android app with Apple or Google, these services share only your email address, your name (if you choose to share it) and an account identifier with us. In-app credit purchases are processed by the Apple App Store or Google Play; your payment details never reach us. To confirm a purchase, the purchase ID and product are passed to us through RevenueCat (USA). If you allow notifications, your device’s notification token is stored so we can tell you when a creation is finished; notifications are delivered via Expo (USA) and the Apple/Google notification services, and the token is deleted when you sign out. Before your first photo upload, the app asks for your separate permission to send your content to our AI provider.

You can delete your account at any time in the app under Profile → Delete Account or on the gece.ai/hesap page. Details: Account deletion.

Your rights and contact

You can send access, correction and deletion requests to [email protected] or via the contact form. This policy is updated when necessary; significant changes are announced on this page.

Last updated: 2026-10-14