Privacy Policy

Last updated: September 14, 2026

1. Scope

This Privacy Policy explains how NudeMe (“we,” “us,” or “our”) handles information when you visit nudeme.ai, sign in, or contact us. Read it together with our Terms of Service.

2. Google account information

When you sign in with Google, we receive your Google account identifier, name, email address, email-verification status, and profile picture URL. We store these details to identify your account, maintain access, and make your basic profile available to you. We also record login activity.

We request only the openid, email, and profile permissions. We do not receive your Google password or request access to Gmail messages, Google Drive files, or contacts. Your profile picture is account information only; we do not use it for artwork generation, face-swapping, facial recognition, or identity replacement.

We do not sell Google account information or use it for advertising or model training.

3. Website activity and cookies

Our server records technical information such as request paths, timestamps, request identifiers, IP addresses, browser user-agent information, response status, and errors for operation, troubleshooting, and security. Sessions also store an IP address and user-agent information.

We use cookies for the sign-in flow and your login session. Sessions have a seven-day inactivity period, refreshed periodically during use. Signing out removes the current session and its cookie, but does not delete your account. You can block or clear cookies in your browser; blocking essential cookies prevents sign-in from working.

The website loads Google Analytics to measure visits and usage. Google Analytics may use cookies and collect browser, device, page interaction, and approximate location information. Our sign-in code does not send your Google account identifier, name, email, or profile picture to Analytics.

4. Support messages

If you contact us, we receive the contact details and information you provide. We use them to answer questions, investigate technical problems, and handle privacy or rights complaints. Please send only what is necessary to explain your request.

5. How we use and share information

We use information to operate the website, authenticate users, display basic account details, understand site usage, address support requests, and protect the service against abuse. Hosting, database, authentication, and analytics providers process information as needed for those functions. Account and session records are stored in PostgreSQL hosted by Neon. Google provides sign-in and website analytics.

We may disclose information where required by law or where reasonably necessary to investigate abuse, protect people's rights, or address a security incident. We do not sell personal information.

6. Retention and deletion

Account records remain stored until deleted; signing out or revoking Google access does not automatically delete them. Expired sessions no longer grant access, but expiry does not itself erase the database record. Operational logs rotate according to storage limits, so their retention duration varies with activity.

You can request account and associated personal-data deletion using the contact below. We handle these requests individually and may verify account ownership before acting. Limited information may need to be retained for security, disputes, or legal obligations. We will explain any applicable limitation in our response.

Support correspondence is retained as needed to resolve and document a request. Copies held by independent providers, including Analytics data, follow their applicable retention and deletion practices.

7. Third-party services

Google processes information under its own Privacy Policy. You can review Google account connections at your Google account connections page. Revoking access there and deleting your NudeMe account are separate actions.

8. Security

We use safeguards for account access, including server-side sessions and hashed session tokens. No online service can guarantee complete security. Protect your Google account and contact us if you suspect unauthorized access.

9. Your choices and rights

You can browse project information without signing in. Depending on applicable law, you may request access to, correction of, deletion of, or a copy of your personal information, or object to certain processing.

For requests, email [email protected]. Include enough information to identify your account, but do not send passwords or session cookies. We review requests and respond in accordance with applicable law.

10. Age requirement

Account access is intended for people aged 18 or older, or the age of majority where higher, as stated in our Terms. If you believe a child has provided personal information, contact us so we can investigate and address it.

11. International processing

Our providers may store or process data outside your country. Applicable protections and legal requirements depend on the location and service involved. Contact us with questions about the processing of your account data.

12. Changes and contact

We will update this policy as the service and its data practices change, including before introducing creative input processing. The date above identifies the latest revision. For privacy questions, contact [email protected].