This Privacy Policy explains how PersonaCraft - Male & Female Character Builder ("PersonaCraft", "we", "us") collects, uses, shares, and protects your personal data, including under the EU/UK General Data Protection Regulation (GDPR). It applies to the PersonaCraft web app and everything you do in it.
PersonaCraft is an 18+ service. See also our Terms of Service and AI Content Disclaimer.
1. Information we collect
- Account information - your email address, password (stored hashed by our platform provider), and, if you sign in with Google, the basic profile information Google returns. We also store your role and account status.
- Age verification data - your date of birth, collected only to confirm you are 18 or older, and kept on your device (see Section 3).
- Creative inputs - the prompts, character settings, appearance and outfit choices, scenes, moods, and other options you select, plus the characters, looks, and memories you save.
- Uploads - photos you upload as character references, clothing photos, and audio files you provide for Talking Avatar, together with any automatic analysis of them used to build the prompt.
- Generated media - the images, videos, and clips PersonaCraft produces for you, and their metadata (type, cost, timestamps, the settings used).
- Credit and transaction data - your balance and a ledger of starter grants, purchases, spends, and credit returns, including the reason for each entry.
- Purchase data - the checkout session and order identifiers, the pack purchased, and the email address used at checkout. Card details are handled by the payment provider and never reach us.
- Support messages - the topic and text you send through the Support form, plus your account email so we can reply.
- Technical and log data - information our platform records to run and secure the service, such as request logs, error diagnostics, IP address, and browser or device details.
- On-device data - the browser storage items listed in Section 8.
We do not collect special-category data deliberately, and we do not run advertising networks, third-party ad trackers, or cross-site profiling. Please do not put sensitive personal information about yourself or anyone else into prompts or uploads.
2. How we use your information and our legal bases
- To provide the service - creating your account, generating and storing characters and media, keeping characters consistent across generations, and running the credit ledger. Legal basis: performance of a contract.
- To verify age - confirming you are 18+ at entry. Legal basis: your consent, plus our legal obligation to keep adult content away from minors.
- To process purchases - checkout, order confirmation, granting credits, and record keeping. Legal basis: performance of a contract and legal obligation.
- To provide support - answering your messages and investigating failed generations. Legal basis: performance of a contract and our legitimate interest in helping users.
- To keep the service safe - enforcing the Terms, filtering prohibited content, and preventing fraud, abuse, and credit manipulation. Legal basis: our legitimate interest in a safe, working service.
- To improve the service - diagnosing errors and understanding which features fail. Legal basis: our legitimate interest in a reliable product.
We do not sell your personal data, we do not share it with data brokers, and we do not use your prompts, uploads, or generated media to advertise to you.
3. Age verification and your date of birth
PersonaCraft is for adults only. When Admin requires an age check, we ask for your date of birth so we can verify you are at least 18.
- What we collect: your date of birth.
- Why: solely to verify you are 18 or older. This is the only purpose.
- Legal basis (GDPR): your consent, given at the age gate, and our legal obligation to restrict access to adults.
- How it is stored: your date of birth is saved only in your browser's local storage on your device. It is not transmitted to our servers for storage and is not shared with third parties.
- No other use: it is never used for marketing, advertising, profiling, or analytics.
- Retention: it is kept on your device until you delete it, clear your browser data, or uninstall your browser.
- Delete it: you can remove your saved date of birth and Terms confirmation from this device right now:
To delete your full account data, see Section 11 (Your GDPR rights).
4. Uploaded images and audio
When you upload a character photo, a clothing photo, or audio for a Talking Avatar, the file is stored in our platform's file storage and given a URL so the AI provider can fetch it and produce your result.
- Those file URLs are hard to guess but are not access-controlled - treat them as unlisted rather than private, and do not upload material you would not want reachable by anyone holding the link.
- Uploads are used to generate what you asked for and to keep your character consistent. They are not used to train our own models, and we do not publish them or sell them.
- Only upload photos of yourself or of people who have agreed to it, and only clothing or audio you have the right to use.
- Uploads and generated media are retained as described in Section 9.
5. AI processing
To generate images, videos, animations, and chat replies, your prompts, settings, and the URLs of the relevant uploaded or previously generated media are sent to our AI providers, which process them and return a result. Your date of birth is never sent to these providers. Providers apply their own safety filters, and a request may be refused upstream.
6. Who we share data with
We use a small set of processors and providers to run PersonaCraft:
- Wix - application hosting, authentication, the database holding your account, characters, media records, and credit ledger, file storage for uploads and generated media, transactional email, some AI generation, and credit purchases through Wix's hosted checkout, which receives the email address and payment details you enter there and returns an order confirmation to us. Wix Media infrastructure is also used to store and serve images. Wix's own privacy notice governs what it does as a payment and hosting provider.
- Kie.ai - the AI gateway used for most generation. It receives your prompt text, generation settings, and the URLs of relevant media, and routes them to Grok Imagine (image and video models from xAI) or to Kling models from Kuaishou for Motion Control and Talking Avatar. It does not receive your account password, payment details, or date of birth.
- Google - only if you choose to sign in with Google, which shares your basic profile with us to create the account.
We may also disclose data where required by law, to enforce our Terms, to protect the rights and safety of users or the public, or in connection with a business transfer. Your date of birth is not shared with any third party.
7. International transfers
Our providers operate internationally, so your data may be processed outside your country, including outside the EEA or UK. Where that happens, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision, as implemented by the relevant provider.
8. Cookies and local storage
PersonaCraft runs almost entirely on your browser's local storage rather than cookies. We use no advertising cookies, no cross-site trackers, and no third-party analytics profiling. Our providers may set strictly necessary cookies for session, security, and payment purposes on their own domains.
The items we store on your device are:
| Item | Category | Purpose |
|---|---|---|
| personacraft_dob / pc.u.<userId>.dob | Essential | Your date of birth, used only to confirm you are 18 or older (per account on this device). |
| personacraft_terms_ok / pc.u.<userId>.termsOk | Essential | Whether you accepted the Terms & Conditions on this device, when Admin asks for that confirmation. |
| personacraft_cookie_consent_v1 | Essential | Your choice on this notice, so we stop asking. |
| session token | Essential | PersonaCraft sign-in session and app parameters that keep you logged in. |
| personacraft_studio_session_* / pc.u.<userId>.* | Functional | Per-account Studio draft, Prompt Forge presets, and preferences so profiles on this device stay isolated. |
| personacraft_active_generation_* | Functional | A pointer to a running generation so it can resume after a reload (scoped to your account). |
| personacraft_catalog_session_pool_v1_* | Functional | Caches the rotating catalog selection for your session. |
| personacraft-theme | Preference | Light or dark mode. |
| personacraft_help_tips | Preference | Whether in-app help tips are shown. |
| personacraft.adminTest* / pc.u.<userId>.adminTest* | Preference | Admin-only provider and model test settings. |
Essential and functional items are needed for the app to work - to keep you signed in, honour the 18+ gate, and avoid losing your Studio draft. Preference items only remember how you like the interface. Choosing Essential only on the cookie banner records that we must not enable optional preference or analytics storage beyond this; because PersonaCraft ships no analytics or advertising storage today, declining does not break any feature. You can clear everything at any time through your browser settings, which will sign you out, re-show the age gate, and discard saved drafts.
9. Data retention
- Account data, characters, generated media, and the credit ledger are kept while your account is active.
- After account deletion we remove or anonymise your personal data within a reasonable period, except records we must keep for tax, accounting, fraud-prevention, or other legal reasons - typically purchase records.
- Support messages are kept as long as needed to handle the issue and any follow-up.
- Your date of birth is kept only on your device, as described in Section 3.
10. Security
We rely on our platform provider's security controls, including encrypted transport, hashed passwords, and access controls that scope your data to your account. Keeping your date of birth on your device rather than on our servers reduces risk. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you think your account has been accessed by someone else.
11. Your GDPR rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Request erasure of your personal data (the "right to be forgotten");
- Restrict or object to processing, including processing based on legitimate interests;
- Receive your data in a portable format;
- Withdraw consent at any time, including consent to process your date of birth;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights - including deleting your account and its data - signed-in users can open Support, or email thefamilyhouseshop@gmail.com. We may ask you to confirm your identity, and we will respond within the timelines the GDPR requires. You can delete your saved date of birth from this device at any time using the button in Section 3.
12. Children
PersonaCraft is not intended for anyone under 18. We collect a date of birth only to verify age and do not knowingly collect data from minors. If you believe a minor has provided data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent revision, and material changes will be highlighted in the app where reasonably possible.
14. Contact
For privacy questions or to exercise your data rights, signed-in users can open Support in the app, or email thefamilyhouseshop@gmail.com.