Privacy Policy

Effective October 30, 2026 · Beta

LAMAA ("we", "us") is an AI photo and short-film studio operated from the United States. This policy explains what we collect, why, and the choices you have. We built LAMAA to collect as little as possible.

1. What we collect

• Account: the display name you choose, a random account ID, and the public part of your passkey. Your passkey's private key and any biometrics (Face ID, fingerprint) never leave your device and are never sent to us.
• Usage: how many credits you used each day, sign-in session records, and basic security logs (such as IP address, used to prevent abuse and rate-limit requests).
• Billing (if you subscribe): payments are handled by Stripe. We receive a Stripe customer ID and your subscription status. We never see or store your card number.

2. Your photos, prompts and creations

• Photos you upload and text you enter are sent to our AI provider (Cloudflare Workers AI) only to generate your result, and are not stored on our servers after the request finishes.
• We do not use your photos to identify you, and we do not create or keep face templates, face geometry or any biometric identifiers.
• Your results are saved in your browser's private storage ("My gallery") on your own device. You can delete them at any time; deleting your account also clears them on that device.
• Only upload photos of yourself or of people who have given you permission.

3. How we use information

To run your account, generate content you request, enforce daily credit limits, keep the service secure, process subscriptions, and comply with law. We do not sell or share your personal information for cross-context behavioral advertising, and we do not show ads.

4. Service providers

Cloudflare (hosting, database, AI processing) and Stripe (payments). They process data on our behalf under their own security and privacy commitments.

5. Retention

Account data is kept until you delete your account. Sign-in sessions expire after 30 days. Security logs and daily usage counters are kept only as long as needed for security and billing records.

6. Your rights and choices

• Delete: you can delete your account instantly from the account menu ("Delete my account"). This removes your account, passkey record, sessions and usage history from our database.
• Access / correct: contact us and we will respond within the time required by applicable law (including the California Consumer Privacy Act, as amended, where it applies).
• We will not discriminate against you for exercising your privacy rights.

7. Children

LAMAA is not directed to children under 13, and we do not knowingly collect personal information from them. Users must confirm they are 13 or older. If you believe a child under 13 has created an account, contact us and we will delete it.

8. Security

Passwordless passkey sign-in, HTTPS everywhere, HttpOnly secure session cookies, strict content-security rules, and per-account and per-IP rate limits. No system is perfectly secure, but we work to protect your information.

9. Changes and contact

We will post updates here and change the effective date. Questions or requests: use the contact details provided on this page at public launch (we are in beta).