Privacy Policy

1. Introduction

Welcome to WedMuse ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and website (collectively, the "Service").

By using WedMuse, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: When you sign up via Google Sign-In, we collect your name, email address, and profile picture from your Google account.
• Wedding Planning Data: Information you provide about your wedding, including venue preferences, guest details, style preferences, and wedding date.
• Photos: Images you upload for AI-powered visualization, including persona photos and reference images. If you upload photos of other individuals, you must have their explicit consent. We process these images solely for generating your wedding visualizations and do not use them for any other purpose.
• Vision Board Content: Saved images, preferences, and notes you create within the app.
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers).

2.2 Information Automatically Collected

• Analytics Data: Basic analytics provided by Vercel (our hosting platform) including page views and performance metrics.
• Device Information: Device type, operating system, and browser information.
• Log Data: IP address, browser type, pages visited, time and date of visits, and diagnostic data.
• Location Data: Approximate location derived from IP address for venue recommendations (not precise GPS location).

2.3 Information from Third Parties

• Google Sign-In: Profile information from your Google account (name, email, profile picture).
• Stripe: Payment confirmation and subscription status information.
• Google Places API: Venue information and location data for recommendations.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Generate AI-powered wedding visualizations using Google Gemini AI
• Process your subscription payments and manage your account
• Send you important updates about your subscription and service changes
• Provide customer support and respond to your inquiries
• Improve and personalize your experience
• Analyze usage patterns to enhance our Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

• Supabase: Database hosting and authentication services
• Google Gemini AI: AI image generation (photos are processed but not retained by Google)
• RevenueCat: iOS subscription management and purchase validation
• Stripe: Web payment processing and subscription management
• Google Cloud: Infrastructure and Places API for venue recommendations

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

5. Data Storage and Security

Your data is stored securely on Supabase servers (PostgreSQL database) with industry-standard encryption:

• Encryption in Transit: All data transmitted between your device and our servers uses TLS/SSL encryption
• Encryption at Rest: Database and file storage are encrypted at rest
• Access Controls: Row Level Security (RLS) policies ensure you can only access your own data
• Regular Backups: Automated daily backups with point-in-time recovery

While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active. Upon account deletion (available in-app under Account → Delete Account), all personal data including photos, visions, and preferences are permanently deleted within 30 days
• Generated Images: Stored indefinitely unless you delete them or close your account
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for security and analytics

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Opt out of marketing communications (we currently do not send marketing emails)

7.2 GDPR Rights (EU/EEA Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing and the right to lodge a complaint with a supervisory authority.

7.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information).

7.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at hello.weddingvision@gmail.com. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

9. Face Data and Photo Processing

WedMuse allows you to upload photos of yourself and others to generate AI-powered wedding visualizations. Because these photos may contain faces, we want to be fully transparent about how face data is collected, used, shared, and retained.

9.1 What Face Data We Collect

When you upload photos through our app, the images may contain facial features of you and other people you choose to include (e.g., your partner, wedding party members). WedMuse collects the photos you upload in their entirety. We do not separately extract, isolate, or store facial geometry, facial feature vectors, faceprints, or any biometric identifiers from your photos. The photos themselves are the only form in which face data exists within our system.

9.2 How We Use Face Data

The sole purpose of collecting photos containing faces is to generate AI-powered wedding preview visualizations. Specifically:

• AI Image Generation: Your uploaded photos are sent to Google Gemini AI as part of a prompt to generate artistic wedding scene visualizations that incorporate the likeness of the people in your photos.
• Display in App: Photos are displayed within the app so you can manage your personas (the people in your wedding party) and review your generated visions.
• We do not use face data for facial recognition, identity verification, surveillance, advertising, or profiling.
• We do not create biometric templates, facial feature maps, or any mathematical representation of faces.
• We do not use your photos or face data to train, fine-tune, or improve any AI or machine learning models.

9.3 How Face Data Is Shared

Face data (i.e., your uploaded photos) is shared only with the following third party for the purpose described:

• Google Gemini AI (Google Cloud): Photos are transmitted to Google's Gemini AI API at the time of image generation. Google processes the photos in real-time to produce the visualization and does not retain user-submitted images after processing. Google's data is processed under their Cloud Data Processing terms which prohibit use of customer data for model training. See Google's Data Processing Addendum.
• We do not share face data with any other third parties, advertisers, data brokers, or analytics providers.

9.4 Where Face Data Is Stored

Your uploaded photos are stored in the following locations:

• On your device: Photos are stored locally on your device for app functionality.
• Supabase (PostgreSQL database): A lightweight copy of your wedding data (without large photo files) is stored in our Supabase database for cloud sync. Full-resolution photos are not stored server-side in the database.
• Supabase Storage: Generated vision images (AI outputs) are stored in Supabase Storage and are accessible only to you via Row Level Security (RLS) policies.
• Google Gemini AI: Photos are transmitted to Google for real-time processing only and are not permanently stored by Google after the API request completes.

9.5 How Long Face Data Is Retained

• On your device: Photos remain on your device until you delete them from the app or uninstall the app.
• In our database: Wedding data (which may contain photo references) is retained while your account is active. Upon account deletion, all associated data is permanently deleted within 30 days.
• Generated images: AI-generated vision images are retained until you delete them or close your account.
• Google Gemini AI: Google does not retain uploaded photos after processing the API request. No permanent storage occurs on Google's systems.

9.6 Your Consent and Control

• You are solely responsible for obtaining consent from any individuals whose photos you upload to WedMuse.
• You can delete your uploaded photos at any time from within the app.
• You can delete your entire account and all associated data (including all photos and generated images) from the Account tab in the app.
• Facial likeness in generated images is approximate — AI models produce artistic visualizations and cannot guarantee exact facial reproduction.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

11. Third-Party Links

Our Service may contain links to third-party websites (e.g., venue websites from Google Places). We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide additional notice (e.g., via email or a prominent notice in our app).

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

14. Consent

By using our Service, you consent to our Privacy Policy and agree to its terms.