Privacy Policy

Last updated: February 27, 2026

Welcome to Poof ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information to create and manage your Poof account.

Photos and Images

When you use our services, you upload photos that are processed to create coloring pages, dot-to-dot puzzles, comic art, storybooks, and other transformations. Your uploaded photos and generated images are stored securely in our cloud storage (powered by Supabase).

Payment Information

When you purchase Poofies (our in-app currency), your payment is processed by PayPal. We do not store your credit card numbers or bank account details. We receive only transaction confirmation details such as the amount paid and transaction ID.

Usage Data

We automatically collect information about how you interact with our service, including pages visited, features used, timestamps, device type, browser type, and IP address.

Session Recording

We may use session recording tools to capture how users interact with our application. These recordings may include mouse movements, clicks, scrolling behavior, and page navigation. Session recordings help us improve user experience and identify issues. Personal information visible on screen (such as names or emails) may be captured incidentally but is not the purpose of session recording.

2. How We Use Your Information

Provide, maintain, and improve our services
Process your photos using AI technology (Google Gemini) to generate transformations
Process payments and manage your Poofies balance
Store your creations so you can access them from your gallery
Analyze usage patterns to improve the user experience
Detect, prevent, and address technical issues or abuse
Comply with legal obligations

3. AI Image Processing

Your photos are sent to Google's Gemini AI service for processing. This means your images are transmitted to Google's servers to generate the requested transformations (coloring pages, comics, puzzles, etc.). We rely on Google's data processing practices for these API calls. Google's use of this data is governed by their own privacy policies. We do not use your photos to train AI models.

4. Payment Processing

Payments are handled by PayPal. When you make a purchase, you are interacting directly with PayPal's secure systems. We recommend reviewing PayPal's Privacy Policy to understand how they handle your payment data.

5. Data Storage and Security

Your data is stored using Supabase (built on PostgreSQL and cloud storage). We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal information. We share data only with:

Service Providers: Google (Gemini AI for image processing), Supabase (database and file storage), PayPal (payment processing), Upstash (rate limiting)
Legal Requirements: When required by law, court order, or governmental authority
Shared Creations: If you use sharing features, your creations may be accessible via shared links

7. Cookies and Local Storage

We use cookies and browser local storage for authentication (maintaining your signed-in session), storing your preferences (such as language), and caching data for performance. We may also use analytics cookies to understand how our service is used. As a Progressive Web App (PWA), we use service workers to cache assets for offline functionality.

8. Data Retention

We retain your account information and creations for as long as your account is active. You can delete individual creations from your gallery at any time. If you wish to delete your entire account and associated data, please contact us at the email below.

9. Children's Privacy

Poof is designed to be family-friendly, but is not directed at children under 13. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

10. Your Rights

Depending on your location, you may have the right to:

Access and receive a copy of your personal data
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact us using the information below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Poof after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: privacy@poof.co