AI Dating PicsStart with your photos

Privacy policy

Last updated 21 September 2026.

This page explains what Pascal Labs LLC collects when you use AI Dating Pics, why, who handles it for us, how long it is kept, and how to get it removed. Photos of your face are sensitive data, so we have tried to be specific, and to say nothing here that the system does not actually do.

Who we are. Pascal Labs LLC, 2410 Forest Ave, Austin, Texas 78704, United States, is the data controller. Email contact@aidatingpics.com for anything on this page, wherever you live: you exercise every right below directly with us. The service is for adults: you must be 18 or older, and we do not knowingly collect anything from anyone younger.

What we collect, and why

  • Your quiz answers — what you do, the outfits and colours you tapped, your age, height and build, whether you wear glasses or a cap, whether you have tattoos, whether there is a pet and what breed. Used to choose the scenes, outfits and framings of your photos. Basis: performing the order you asked for.
  • The photos you upload (six to twelve phone photos), photos of your pet if you add them, and the two clean reference images we make from the pet photos. Used as the reference for what you look like. Basis: performing your order — and, for the face measurements described below, your explicit consent.
  • What our upload check measures on each photo: whether a face was found, focus, lighting, duplicates, which way your head is turned, whether you are smiling, and a few appearance details (glasses, facial hair, hair length, head covering, tattoos, whether your torso is bare). Photo files may also carry metadata such as where they were taken; we do not read or use it, and it is deleted with the file.
  • The photos we generate for you, including frames our likeness check rejected and re-shot. Rejected frames are not in your gallery and are never public; authorised team members may look at them to review quality or resolve a support issue, for the period stated below.
  • Your email address, for the receipt, the gallery-ready notice, sign-in links, and any support conversation. Basis: performing your order.
  • Your hearts and re-shoots in the gallery, and any refund request and its reason. Basis: performing your order.
  • How you move through the site — which step you reached and when, how long each took, what you tapped — only if you said yes on the bar at the bottom of the page, only from our own pages, sent to an address on our own domain and stored in our own database, never to an advertising or analytics company. Basis: your consent, which you can change at any time from the footer (“Analytics: change my answer”). Changing it to no stops collection and deletes the rows this browser sent, and the rows for any order this browser or your account can prove is yours.
  • Payment details are handled by Stripe. We never see or store your card number; we keep the amount, the currency and Stripe’s reference for the payment.
  • Technical logs (IP address, browser, time) needed to run and secure the site: Vercel’s request logs, kept one day, and our own rate-limit counters, which hold an address for about a day. Basis: our legitimate interest in keeping the service working and safe.

What we do with it

Every photo we make is generated with a few of your own uploads beside it as the reference for what you look like. Our own software uses your quiz answers to choose each photo’s setting, outfit and framing; we do not send your quiz answers to the image model, but the prompt for each photo does carry the scene, clothing and other details needed to make it — a lifting session in a charcoal training top, say. Every generated photo is then compared against your uploads by our likeness check, and one that is not recognisably you is set aside and shot again.

We do not use your photos or your order for anyone else’s order, for marketing, or to train any model, and we do not sell them. Our image requests instruct the provider, on every request, to route only to model endpoints whose published policy is no data collection and zero data retention — nothing stored past the request itself; holding it in memory while the model works is allowed — and a request that cannot be routed that way is refused rather than sent elsewhere. We will only show your results publicly if you give us written permission first.

Your face, specifically

Two of our checks measure the geometry of your face. Before we perform them, we ask for your explicit consent on the upload page, with a box that is unticked until you tick it. The box says, in full:

I’m uploading photos of myself, and I agree to the face check.

To check your photos and your results, we measure the geometry of your face: each photo you upload is compared to the others to confirm they’re all you (on servers we run), and each photo we make is compared to your uploads before it reaches your gallery (at Amazon Rekognition, for us). The face templates exist only for the duration of each check; what is kept is a similarity score, and your uploaded photos are deleted 30 days after your gallery is delivered. You can withdraw at any time from your order page (“delete my uploads now”) or by email, and your uploads are deleted at once.

Depending on where you live this is regulated as biometric data (for example under the EU’s GDPR, Illinois’s BIPA or Texas’s law on biometric identifiers); we treat it the same way everywhere.

  • The upload check compares each photo you upload to the others to confirm they are all the same person. It runs on servers we operate at RunPod. The face template it computes for each photo exists only for the duration of the check and is not stored; what is kept is a similarity score per photo and the measurements listed above, deleted with your uploads 30 days after your order settles.
  • The likeness check compares each photo we generate to your uploads before it reaches your gallery. It runs at Amazon Rekognition: your uploads are indexed into a collection created for that run, and the collection is deleted the moment the run finishes, including for every re-shoot. What is kept with each delivered photo is its similarity score, deleted on the same 30-day schedule. Under Amazon’s terms, content processed by Rekognition may be held by Amazon to provide and maintain the service, and would be used to improve it unless the account opts out; our account is opted out of that for every Amazon AI service, by an organisation-level policy. Amazon keeps its own operational logs of the calls we make (not the images) under its terms.
  • Purpose and limits. These measurements exist so that the set is of you and nobody else. They are processed by the two providers named, for us, for that purpose; they are never sold, never disclosed for any other purpose, and never used to identify you anywhere but inside your own order.
  • Your consent record — when you ticked the box, from which session, and against which version of the wording, and, if you withdrew it, when — is kept with your order. If you paid, a copy of those dates and the version (no name, email or photo) stays with the transaction record described under “Deleting everything”, so that we can show a consent was recorded for that order. If you never paid, nothing is kept.
  • Withdrawing is as easy as giving it: one click on your order page (“delete my uploads now”) or an email. Withdrawal stops any further checks and re-shoots, and your uploads and pet photos are deleted at once. A gallery already delivered to you is not affected; deleting it is a separate choice, described below.

Who processes it for us

The providers below act as our processors: each receives only what it needs, processes it for us and on our instructions under a data-processing agreement, and processes it in the United States (the upload check on RunPod runs in North America). Where EU or UK law applies to you, the transfer relies on the EU–US Data Privacy Framework and its UK Extension for the providers certified under it (Vercel, Amazon Web Services, Google, Stripe, Resend) and on the European Commission’s standard contractual clauses, with the UK Addendum where UK law applies, for the rest (Supabase, RunPod, OpenRouter). Stripe is the exception to “for us”: it processes your payment as an independent controller under its own privacy policy, as regulated payment companies do.

  • Supabase — our database and file storage. Your uploads and your finished photos live here, in private buckets; the links to them are signed and expire.
  • RunPod — servers running our upload check.
  • OpenRouter and, through it, Google — the image model that makes your photos. A few of your uploads go with each prompt as the reference for what you look like; your pet photos go the same way to make the pet reference images. Under its data-processing agreement with us, OpenRouter deletes each request’s inputs and outputs promptly after the response (it may run an automated abuse check on them first, and may keep what the law requires), and, because we ask for zero-retention routing on every request, sends them only to model providers whose published policy is no retention and no training. That published policy is Google’s own commitment; OpenRouter enforces the routing but does not guarantee Google’s compliance, and neither can we.
  • Amazon Web Services (Rekognition) — the likeness check, as above.
  • Vercel — runs the site. A photo passes through Vercel’s servers in transit when our code handles it (a preview on the upload page, a frame on its way to the image model) and is not stored there; Vercel keeps the request logs, for one day.
  • Google Workspace — our email, so any message you send us, and anything you attach to it, is held there.
  • Stripe — payment. Stripe sees no photos. Its checkout fields set Stripe’s own fraud-prevention cookies, and Stripe keeps its own record of the payment under its own rules.
  • Resend — sends our transactional emails. It sees no photos and, per its documentation, keeps delivery logs for 30 days.

How long we keep it

  • Uploads, pet photos and reference images, the upload-check measurements and scores, the likeness scores, rejected generated frames, your quiz answers and the prompts: deleted 30 days after your order settles — after your gallery is delivered, or after a failed order stops. Re-shoots close then, because there is nothing left to reference; a re-shoot does not restart the clock. An order that stalls before delivery is treated as failed after 30 days without progress and deleted on the same schedule.
  • An upload that never becomes a paid order: deleted 30 days after the last photo was added to it, whether or not you ran the check.
  • Your gallery (the delivered photos): kept for 365 days after delivery so the link keeps working, or until you delete it, whichever is first.
  • The record of how you moved through the site: 180 days, or until you turn analytics off, or until you delete your order.
  • The amount, the currency, the order size, the dates and Stripe’s reference: 7 years from the sale, because we are required to keep accounting records. Your email is not part of that requirement: it stays with your order for support until you delete everything, and goes when you do.
  • Support emails and their attachments: for the conversation and any dispute it concerns; deleted with your order when you ask us to delete everything, unless a dispute is still open.
  • Technical logs: one day.

Deleting everything

Your order page has a “Delete everything” link. Two clicks, and we delete your uploaded photos, your pet photos, every photo we generated for you, your gallery, your quiz answers, your email, your sign-in, the face measurements and scores, and the record of how you moved through the site. If you would rather we did it, email contact@aidatingpics.com from the address on your order; we will confirm the request by reply before acting on it, run the same deletion, and confirm when it is done.

What that means in practice: the files and records are removed from our live systems immediately, and your gallery stops working with them — a photo already open in a tab may keep showing from a cache for up to about a minute, and then it is gone. Our database provider keeps encrypted backups of database records (not of photo files), each kept seven days on our current plan, during which a deleted record exists only in a backup that is not used. The model endpoints your photos were sent to keep nothing past the request, and the likeness check’s collection was deleted when the run finished, as described above.

What stays: one record per paid order — the amount, the currency, the order size, Stripe’s payment reference, the date, and the dates and version of your face-check consent and any withdrawal — because a sale is a record we are required to keep and consent is one we may need to show. It carries no name, email or photo; the Stripe reference could be matched to Stripe’s own record of the payment, so we call it a limited transaction record rather than anonymous, and it is deleted 7 years after the sale. Stripe keeps its own record of the payment under its own obligations. Deleting your order does not request a refund and does not cost you one: refunds are handled under the refund policy.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, restrict or object to how we use it, take it with you in a usable format, withdraw a consent you gave, or have it deleted — by the button above or by email. We answer within a month. Depending on where you live you may have further rights under the GDPR or UK GDPR, the CCPA or state biometric privacy laws, and you may complain to your data protection authority. We never treat you differently for exercising any of them.

California. The categories above are identifiers (email), sensitive personal information (photos of your face and the biometric measurements), commercial information (your order), and internet activity (the site record, if you said yes). We do not sell or share personal information for cross-context behavioural advertising, and we have not in the past twelve months; because we do not, a Global Privacy Control signal from your browser asks for nothing we are not already doing. You have the right to limit our use of your sensitive personal information: we already use it only to make and check the set you ordered, which is a permitted use, and we will confirm that within 15 business days of a request. Withdrawing the face-check consent, described above, is a separate and stronger step that stops the measurements altogether. Requests for a copy or a deletion are answered within 45 days. Requests go to the email above or the button on your order page.

Other people’s photos, and other situations

  • You may only upload photos of yourself. If you believe someone has uploaded photos of you without your permission, email us. We will ask you for enough to be satisfied that you are the person in the photos before we tell you what we hold or delete it, so that the complaint itself cannot be used to expose or remove someone else’s order.
  • Apart from the processing described on this page, we disclose data only when legally compelled to, and then only what is demanded. We will tell you unless the law forbids it.
  • If the company is ever sold, your uploaded photos, generated photos and face measurements are deleted, not transferred. Your email and order record may transfer with the business under this same policy.

Security

Photos are stored in private buckets and served only through signed links that expire. Data is encrypted in transit and at rest by the providers named above. Access is limited to the people who run the service, for the purposes on this page, and every order-level request has to prove it comes from the browser or account that placed the order.

Cookies and your browser

We use only the cookies needed to move you through the order flow and to keep you signed in: one that ties this browser to the order you started, and the session cookies set when you sign in with an email link. Your browser also keeps a few things locally so the pages work — which upload folder is yours, which photos you have hearted, your answer to the bar at the bottom of the page and, if you said yes, which sessions it has sent, so that a later no can delete them. There is no advertising tracking on this site and no third-party analytics.

Contact

Questions about privacy go to contact@aidatingpics.com.