How we handle your data

01Who handles it

Sofia Ninshtil, Vietnam. Questions and requests: Telegram https://t.me/sofika_ai or email grigory.uxcode@gmail.com.

02What we collect

Your Telegram account details at sign-in: the profile number, your name and, if you have one, your username. There are no passwords here at all.

An email address — only at checkout, and only for the receipt. Signing in does not need one.

The photos you upload for a paid shoot in your account. Without them a shot can't be made.

The shots you've taken — so you can come back and download them.

Technical data: your network address and browser type. These let us tell people from bot farms and keep paid generations away from scripts.

A record that you tapped the payment button asking us to open access right away — with its time and the text version, in the order: it confirms access was opened at your request.

We never receive or store card details: you enter those on the payment provider's side.

If you pressed Start in our Telegram bot — your profile number, so the bot can write to you: remind you about access or tell you about new collections. Every such message has a “Не присылать” (“Stop sending”) button: one tap and we stop.

If you came from our ad on Facebook or Instagram and tapped “Open in Telegram” on the page — a record of that click: the click ID Facebook itself adds, your network address, browser type, the country that address points to, and the ad tags from the link (which ad, and where it was shown). The country lets the bot quote the price in your currency. When you press Start in the bot from that link, the click record is tied to your profile number for a while, and the country stays with us next to it. For visitors from EU countries, the United Kingdom and Switzerland the click is not recorded at all.

03How long we keep it

Photos you upload are deleted within seven days of the shoot. This isn't a promise on paper: the deletion runs automatically and the code can be checked.

Shots taken in your account are kept while the account exists. You can ask us to delete them sooner.

Your payment history and the address you gave for the receipt are kept while the account exists: they're needed for access and for payment records.

The profile number for bot messages is kept while the bot runs — together with the country, if the ad click told us one. After “Stop sending” or blocking the bot we no longer write to you: what stays is a note of that — so we don't write to you again — and a record of which ad you came from and from which country, which is how we tell whether the ads pay off.

The network address, browser type and click ID from an ad are kept for no longer than a day, and if you started the bot — only until we have told Meta about it (usually seconds; up to seven days if the connection fails). The country, the ad tags and the link between the click and your profile number are kept for no longer than eight days and then deleted automatically.

04Who we pass it to

The image generation service fal.ai — your photos go to it at the moment of the shoot, otherwise no shot can be made. It processes them for that one generation. We have switched off request storage on its side, so your photos don't stay with it after the generation. Its storage rules: https://fal.ai/docs/documentation/model-apis/media-expiration

The payment provider — the amount and order number, to take the payment.

Telegram — sign-in goes through it: we ask whether it is really you and get the answer.

Meta (Facebook and Instagram) — only if you came from our ad there and started the bot: we tell it that the ad click reached the bot. The message holds the click ID, the network address and browser type from our page, your Telegram profile number and country as hashes (SHA-256), the time and the name of our page. It has no name, username or conversation. This lets Facebook show the ad to people who may care about the service, and lets us see which ads work. The message goes through a cloud intermediary in Ireland (Supabase), which only forwards the request.

Nobody else. We don't sell data and don't hand it to other advertisers.

05What you can ask of us

To tell you what data we hold; to correct it; to delete your account with everything in it; to withdraw your consent to processing.

Write to us on Telegram and we'll do it within thirty days. Withdrawing consent means deleting the account: without a sign-in and photos the service cannot work.

06Cookies

We set one cookie — it keeps you signed in. There are no third-party analytics or advertising scripts on this site: pages load nothing from other addresses.

The exception is the advertising we buy ourselves on Facebook and Instagram. We record a click from it on our server — without a cookie, for the period named above — and tell Meta that the person started the bot; see the sections above. You can opt out by not tapping “Open in Telegram” on the ad page: the service is the same either way.

You can delete the cookie in your browser, but then you'll have to sign in again.

Besides that, your browser remembers three small things for the life of the tab: that you have already been shown the intro screen and the sign-in prompt, and where you came to us from — a single word such as "Pinterest" or "search". These are not cookies and not identifiers — they disappear when the tab is closed.

We keep an anonymous count: how many times a day a page was opened, a button was pressed and people arrived from each site. That is one number per day, with no addresses, no fingerprints and no link to you. It cannot tell who did it or when exactly. The ad-click record is separate and works differently, as described above.

07If this policy changes

A new version is published on this page, with the update date at the top. We will post about any significant change in the channel.