Privacy Policy

Last updated: May 17, 2026

This Privacy Policy explains how Viralprank ("we", "us") collects, uses, and protects the personal information of users of viralprank.app (the "Service").

1. Information we collect

Account information: email address, hashed password (for email signup) or Google account identifier (for Google sign-in).
Generated content: the text prompts you submit and the images generated from them.
Payment metadata: Stripe handles all card data directly; we receive only a transaction ID, amount, and the credit pack purchased. We never see or store card numbers.
Technical data: IP address, browser type, timestamps, and device identifiers, used for security, abuse prevention, and aggregate analytics.

2. How we use your information

To create and operate your account.
To generate the content you request via our AI provider.
To process payments and deliver credits.
To prevent fraud, abuse, and violations of our Terms of Service.
To send transactional email (account verification, payment receipts).
To improve the Service through aggregate, non-identifying analytics.

3. Service providers

We share information only with the providers that power the Service, under contract:

Supabase — authentication, database, and file storage.
Vercel — application hosting.
Stripe — payment processing.
KIE AI — image generation. Prompts are transmitted to KIE AI to produce the requested image.
Resend — outbound transactional email.
PostHog — product analytics.

These providers may store data outside of Canada (notably in the United States). By using the Service you consent to this cross-border processing.

4. Retention

Generated images and prompts: retained for a maximum of 7 days, then deleted.
Account information: retained for as long as your account is active.
Payment records: retained for the period required by applicable tax and accounting laws.

5. Your rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Withdraw consent and request account deletion.

To exercise any of these rights, email support@viralprank.app. We respond within 30 days.

6. Cookies

We use strictly necessary cookies for authentication and session management. Analytics cookies (PostHog) help us understand how the Service is used; they collect no card or password data.

7. Security

We use HTTPS, hashed passwords, row-level security on our database, and access controls on internal systems. No system is perfectly secure; we encourage you to use a unique password.

8. Age requirement

The Service is intended for users 18 years of age or older. We do not knowingly collect information from minors.

9. Changes

We may update this Policy from time to time. Material changes will be announced via email or an in-app notice.

10. Contact

Questions about this Policy: support@viralprank.app

1. Information we collect

Account information: email address, hashed password (for email signup) or Google account identifier (for Google sign-in).

Generated content: the text prompts you submit and the images generated from them.

Payment metadata: Stripe handles all card data directly; we receive only a transaction ID, amount, and the credit pack purchased. We never see or store card numbers.

Technical data: IP address, browser type, timestamps, and device identifiers, used for security, abuse prevention, and aggregate analytics.

2. How we use your information

To create and operate your account.

To generate the content you request via our AI provider.

To process payments and deliver credits.

To prevent fraud, abuse, and violations of our Terms of Service.

To send transactional email (account verification, payment receipts).

To improve the Service through aggregate, non-identifying analytics.

3. Service providers

We share information only with the providers that power the Service, under contract:

Supabase — authentication, database, and file storage.

Vercel — application hosting.

Stripe — payment processing.

KIE AI — image generation. Prompts are transmitted to KIE AI to produce the requested image.

Resend — outbound transactional email.

PostHog — product analytics.

These providers may store data outside of Canada (notably in the United States). By using the Service you consent to this cross-border processing.