Privacy Policy

1. Uploaded photos — deleted after 24 hours

The photo you upload to generate an output is stored only for the duration of the generation. Once your generation completes (or fails), the uploaded source file is permanently deleted from our storage within 24 hours. We never use your photos to train AI models or share them with third parties.

2. Generated media — kept until you delete it

Your generated images and videos remain in your gallery until you delete them or close your account. You can delete individual items from your gallery at any time — deletion is immediate and irreversible.

3. What we collect

• Account info: email address, hashed password, display name
• Uploaded images: temporarily, solely to produce your requested output — deleted within 24 hours of completion
• Generation history: preset, settings, output file reference — kept in your gallery until deleted
• Payment data: handled by NowPayments (cryptocurrency). We record transaction IDs, amounts, and plan changes for billing and dispute resolution. We never see private keys or seed phrases.
• Credit ledger: a running log of every credit grant and deduction, retained as a financial audit trail
• Security log: login events, IP address, device info — retained for fraud and abuse investigation
• Usage metrics: anonymous request counts used for capacity planning only

4. What we never do

• Train AI models on your uploaded photos or generated outputs
• Share your content with third parties for any purpose
• Use your generations in our marketing without explicit consent
• Sell your personal data
• Operate without 18+ age verification

5. Account deletion & data erasure

You can delete your account at any time from Settings → Account. Deletion is a two-stage process:

• Immediately upon deletion: your account is anonymised (email, name, and password removed), your active session is terminated, and you lose access. No new charges can be made.
• Within 90 days: all generated media files and any remaining uploaded photos are permanently deleted from our storage servers (Wasabi object storage). The 90-day window aligns with chargeback and fraud investigation requirements.
• Retained for legal compliance: anonymised transaction records, credit ledger entries, and security log entries are kept as required by financial and fraud-prevention obligations. These records contain no personally identifiable information after anonymisation.

To request expedited erasure or for GDPR/CCPA inquiries, email privacy@yumehentai.com.

6. Cookies & sessions

We use a single httpOnly session cookie (yh_sid) to keep you logged in. This cookie is not accessible to JavaScript and is not used for tracking. We do not use third-party tracking cookies, advertising pixels, or analytics scripts that send your data to external services.

7. Adults-only platform

Yumehentai is an 18+ adult platform. By using this service you confirm you are of legal age in your jurisdiction. We do not knowingly serve minors. If you believe a minor has accessed this service, please contact us immediately at privacy@yumehentai.com.

8. Contact

Questions? Email privacy@yumehentai.com or use the contact form.