Privacy Policy

1. What we collect and why

Account

When you log in, we collect your email address (or your phone number, if you log in by text message) so we can send you a one-time code and keep your packs in your account. We don't use passwords.

Photos you add

The photos you take or upload are used to draw your cartoon looks and Pahis. See section 2 for exactly how they're handled.

Looks, Pahis and packs

• Looks you draw (the cartoon versions of you you're choosing between) are kept only in your browser on this device, until you clear them or log out.
• Finished Pahis are saved privately in your account with the look you chose, each reaction's name and your drawing settings, so you can download them again on any device.

My page (optional)

If you choose a nickname, star Pahis or turn on My page, we store those choices. While My page is on, anyone with its link can see your nickname and small watermarked previews of your starred Pahis. It's off by default, never shows your photos, and you can turn it off or get a new link at any time.

Purchases

Payments are handled by Lemon Squeezy, the merchant of record. We receive your order number, which pack you bought, the price, currency and whether it was paid or refunded. We never see your card or bank details.

Usage and limits

We count the images each account draws (and whether each was a look, a Pahi or a redraw) to apply daily limits, your Pahi balance and free redraws.

App usage events

To learn what works, we record simple events like opening the app, adding photos (the number, not the photos), drawing, starring and downloading for a particular app. Events use a random ID stored in your browser and are linked to your account when you're logged in. They never include photos, images, prompts, names or email addresses.

Free look before login

If you try PahiWati without logging in, we set a cookie with a random ID so each browser gets one free look. We store only a scrambled (keyed hash) version of that ID and of your IP address, with the IP version changing every day, to enforce the limit. The clean version of your free look is encrypted and can only be unlocked by logging in within 24 hours.

Security and abuse prevention

Our servers briefly use IP addresses to limit how many requests one connection can make, and our hosting provider keeps standard request logs (like IP address, browser type and time) to keep the service running securely.

One-tap Telegram (optional)

If you add your pack to Telegram in one tap, the sticker files are placed in temporary private storage and sent to Telegram through our bot, then removed once Telegram has its copy. Telegram's own rules apply after that, and anyone with a Telegram sticker pack's link can add it.

Messages you send us

If you email us, we keep your message and email address to answer you.

2. Your photos and face details

• How they're used. Your photos go from your browser to our server and to Google's Gemini AI service, which studies them and draws your looks and Pahis. They are held in your browser's memory while you work.
• We never save your photos. They aren't stored on our servers or in your account. To draw more Pahis later, you add them again, or draw from the look you already saved.
• Face details. To get the likeness right, the AI finds where your head is in each photo and writes a short description of visible features such as face shape, eyes, hair, facial hair, glasses and skin tone. Your browser also samples your skin color from the photo. These details stay in your browser and in the drawing requests. We don't store them.
• No face recognition. We don't create faceprints or templates, don't use your face to identify you, and don't compare faces between people.
• Google's handling. Google doesn't use requests from paid Gemini API services to train or improve its products. Google keeps requests and results for up to 55 days only to detect and prevent misuse, and authorized Google staff may review content its safety systems flag.
• Consent. Before your first photo, we ask you to confirm you're 18 or older, that the photo is of you (or an adult who gave you permission) and that you agree to this processing. Where laws treat face information as biometric data (for example in Illinois, Texas or Washington), that confirmation is your consent. We never sell or rent face information.

3. Who we share data with

We share personal information only with service providers that help us run PahiWati, under contracts that limit how they use it:

We may also share information if the law requires it, to protect people's safety or rights, to investigate misuse, or as part of a merger or sale of the business (in which case this policy keeps applying to your data). Anyone you send your My page link to can see that page.

We don't sell personal information or share it for cross-context behavioral advertising, and we don't use advertising or tracking pixels.

4. How long we keep data

5. Cookies and browser storage

We only use cookies and browser storage the app needs to work. There are no advertising cookies.

• Login cookies keep you signed in.
• Free look cookie (pw_guest) limits free looks to one per browser. It lasts up to 180 days.
• Browser storage keeps your looks on this device, a random ID for usage events, and a note that you've agreed to the photo terms.

We don't sell or share data for advertising, so there is nothing to opt out of, but we treat Global Privacy Control signals as a request not to sell or share.

6. Your choices and rights

In the app

• Delete any Pahi or whole pack from My packs.
• Turn My page off, or get a new link so the old one stops working.
• Clear looks saved on this device, or log out to remove them.

By request

Depending on where you live, you may have the right to access your personal information, get a copy in a portable format, correct it, delete it, object to or restrict certain uses, and withdraw consent. To make a request, including deleting your account, email support@wpg.agency from the email address on your account. We'll confirm the request comes from you, respond within 30 days (or sooner where the law requires), and won't treat you differently for using your rights.

If we can't do what you asked, we'll explain why. In US states that offer an appeal, reply to our answer with "Appeal" and we'll review it again. You can also complain to your local data protection authority, such as your EU country's authority, the UK Information Commissioner's Office, or the Philippine National Privacy Commission.

7. Legal bases (EEA, UK and similar laws)

• To provide the service you asked for (contract): your account, drawing looks and Pahis, saving packs, purchases and support.
• Consent: processing your photos and face details, which you can withdraw by not adding photos and asking us to delete your data.
• Legitimate interests: keeping the service secure, preventing abuse, applying limits and understanding how the app is used.
• Legal obligations: tax, accounting and responding to lawful requests.

8. US state privacy notice

This section is for residents of California and other US states with consumer privacy laws. In the last 12 months we have collected: identifiers (email or phone number, account ID, IP address); commercial information (packs purchased); internet activity (app usage events); visual information (photos you add and Pahis made from them); and face details that some laws treat as sensitive or biometric information. We collect them from you and your device, for the purposes described above.

We use sensitive information only to provide the service you asked for, so no separate opt-out is needed. We don't sell or share personal information for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing information of anyone under 16.

9. International transfers

We and our providers process data in the United States, Singapore and other countries. When the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

10. Age requirement

PahiWati is only for people 18 and older, and our AI provider doesn't allow use by anyone younger. Please don't upload photos of anyone under 18. If we learn we have data from or about a child, we'll delete it. If you think that has happened, contact support@wpg.agency.

11. Security

We protect data with encryption in transit, private storage that only your account can read, row-level access rules in our database, signed server checks and short-lived links. No online service is perfectly secure, so please keep access to your email account safe. If a breach affects your personal information, we'll tell you and the authorities as the law requires.

12. AI and your Pahis

Looks and Pahis are made with AI. Google adds an invisible SynthID watermark to images its models create, which marks them as AI-generated. We don't use your photos, Pahis or data to train AI models, and we don't make automated decisions about you that have legal or similarly significant effects.

13. Changes and contact

If we make important changes, we'll update the date at the top and tell you in the app or by email before they take effect. For privacy questions or requests, email support@wpg.agency or write to WPG Interactive Media, LLC, 304 S. Jones Blvd #8933, Las Vegas, NV 89107. See also our Terms and Refund Policy.