Privacy Policy

Introduction

This Privacy Policy explains what Banananano AI ("we", "us", or "the service") processes when you visit the site, try image generation as a guest, create an account, or purchase credits. Banananano AI is an independent interface and is not affiliated with or endorsed by Google, Black Forest Labs, OpenAI, ByteDance, or other model providers.

Information We Collect

Depending on how you use the service, we process:

1. Account and authentication data — Name, email address, email-verification status, account identifiers, and profile information you provide. If enabled and selected, Google or GitHub authentication sends us the profile fields you authorize.
2. Generation content — Prompts, uploaded reference images, model and resolution choices, task status, outputs, and technical metadata needed to run the request.
3. Guest-trial and abuse-prevention data — A pseudonymous guest identifier stored in an HTTP-only cookie, hashed network identifiers, user-agent information, and quota records. The guest-trial cookie can remain for up to 365 days unless you clear it; a signed guest task link is accepted for up to one hour.
4. Account generation history — For signed-in users, task records may include prompts, settings, provider task identifiers, credit cost, status, and result URLs so the history can be reopened.
5. Usage, device, and log data — Pages or features used, timestamps, referral or campaign parameters, browser/device information, IP address or network headers, error logs, and security events.
6. Payment and transaction data — Product, amount, currency, payment status, and processor identifiers. The enabled payment processor handles card or wallet credentials; we do not store full card numbers.
7. Support data — Messages and attachments you send when requesting help.

How We Use Data

We use these data to:

• Run generation requests and return results.
• Operate accounts, history, credits, billing, email verification, and support.
• Enforce guest, account, IP, and service-wide quotas; investigate fraud, abuse, and security incidents.
• Diagnose failures and improve reliability, usability, and model selection.
• Measure site and product usage when Google Analytics or Plausible is enabled.
• Meet legal, tax, accounting, and compliance obligations.

AI Processing and Service Providers

To generate an image, we send the prompt, applicable reference images, settings, and necessary request metadata to the provider selected for that model. The current default generator uses Kie.ai and fal; administrators can configure Google Gemini or Replicate for supported models. Provider availability can change, and the generator shows the model name rather than claiming that every request is handled by one provider.

Providers process generation content under their own terms and privacy practices. See Kie.ai Privacy Policy, fal Privacy Policy, Google Privacy Policy, and Replicate Privacy Policy. We do not use your private prompts or uploads to train our own model, but we cannot make a blanket training or retention promise on behalf of every upstream provider; check the terms applicable to the selected model.

Other configured processors may include:

• Cloudflare R2 or compatible object storage for uploaded or generated files.
• Stripe, Creem, PayPal, Alipay, or WeChat Pay for checkout and payment records.
• Resend or Cloudflare Email for transactional messages.
• Google or GitHub for optional social authentication.
• Google Analytics or Plausible for analytics when enabled.

We may also disclose data when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information for money.

Cookies and Analytics

Essential cookies support sessions, security, language preferences, and guest-trial limits. Local storage may record whether certain product events have already been counted. If analytics is configured, Google Analytics or Plausible may receive page, referral, campaign, device, and event data. You can block or clear cookies in your browser, although account and guest-trial features may stop working correctly.

Retention

We retain account, transaction, security, and generation records only for as long as reasonably needed to provide the service, meet legal obligations, resolve disputes, prevent abuse, and maintain backups. Signed-in generation history and stored outputs may remain while the account is active unless they are deleted through an available control or by request. We do not publish a shorter fixed deletion period where the production system does not enforce one.

Guest task tokens expire after one hour in this service, but upstream provider files or logs follow the provider's retention policy. For example, Kie.ai currently publishes separate retention periods for generated media and logs; those periods may change. Download anything you need and avoid submitting sensitive information.

Data Security

We use HTTPS in production, access controls, signed tokens, rate limits, and other technical and organizational safeguards appropriate to the service. No online system is completely secure, so do not submit secrets, confidential documents, health records, biometric identifiers, or other sensitive data in prompts or reference images.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, and to complain to a regulator. You may also withdraw consent where consent is the legal basis. To make a request, email support@bananananoai.com from the address associated with your account. We may need to verify your identity and may retain limited records where required for security, fraud prevention, tax, or legal reasons.

International Transfers and Children

Our providers may process data in countries other than your own. Those locations may have different data-protection laws. The service is not directed to children under 13, or the higher minimum age required by local law, and we do not knowingly collect their personal data.

Changes to This Policy

We may update this policy as the product, providers, or law changes. We will revise the date above and provide additional notice when reasonably required for a material change.

Contact

For privacy questions or requests, email support@bananananoai.com.