Privacy Policy

chad.ai (“we”, “us”) provides an app that generates AI photos of you, built from reference photos you upload of yourself. This policy explains what we collect, why, and what rights you have over it. Contact us at support@chadai.co.

Account information: name, email address, and password (stored as a one-way hash — we never store or can see your plain-text password). If you sign in with Google, we receive your name, email, and profile image from Google instead.

Reference photos: the five photos of yourself you upload to build your face model (selfie, smiling, 45° angle, side profile, full body). These are the most sensitive data we hold, because they depict your face and body.

Generated photos: the AI-generated images produced from your reference photos, plus any photo you upload for the “recreate” feature.

Payment information: we never see or store your card details. Payments are handled entirely by Stripe; we only receive confirmation that a payment succeeded, your Stripe customer reference, and your subscription/billing status.

Usage data: credit balance and history, which presets or prompts you've used, generation job status, and support tickets you submit.

• To generate the AI photos you request from your reference photos.
• To create and secure your account, and let you sign in.
• To process payments and manage your subscription or credit balance.
• To respond to support requests.
• To detect and prevent abuse of the service — see the content rules in our Terms.
• To send you account-related email (e.g. password resets) and, only if you opt in, occasional marketing email. You can turn marketing email off at any time in Settings.

We don't sell your data. We share it only with the service providers we use to run chad.ai, each bound to only use it to provide their service to us:

• OpenAI — your reference photos and prompts are sent to OpenAI's image generation API to produce your photos. OpenAI processes this under their own API terms; we don't control their infrastructure.
• Stripe — handles all payment processing. We never receive your full card number.
• Database and file storage providers — our database and photo storage run on third-party cloud infrastructure. Every photo is served only through an authenticated route tied to your account — we never generate a public or shareable link to your photos.
• Google — only if you choose to sign in with Google.

We may also disclose information if required by law, or to protect the safety of our users or the public.

We keep your data while your account is active. If you delete your account, your reference photos and generated photos are permanently deleted from storage within 30 days, subject to any legal retention requirements we're required to follow (for example, payment records we may need to keep for accounting or tax purposes).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (Settings → Privacy & data → Delete account).
• Export a copy of your data.
• Withdraw marketing consent at any time.
• Object to or restrict certain processing.

To exercise any of these, use the in-app controls where available, or contact us at support@chadai.co.

Because chad.ai's entire purpose is generating photos of you, we necessarily process images of your face and body. We do not run facial recognition or biometric matching against your photos, and we do not use your photos to train any general-purpose AI model. Some jurisdictions (for example, Illinois and Texas in the US) have specific biometric privacy statutes that may apply to photo-based apps like this one, with their own consent and disclosure requirements — if you operate this service in such a jurisdiction, get that reviewed specifically.

chad.ai is for users 18 and older. We do not knowingly collect information from anyone under 18, and our content rules prohibit any depiction of minors. If we become aware that we've collected data from someone under 18, we'll delete it.

Passwords are hashed, never stored in plain text. Photos are stored privately and served only through authenticated, per-user access checks — there is no public URL to any user's photo. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable technical measures to protect your data.

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of chad.ai after changes take effect means you accept the updated policy.

Questions about this policy or your data: support@chadai.co