Privacy Policy & Photo Data

1. Scope and operator

This policy explains how AI Stylebook handles personal information for its style atlas, photo creation, accounts and credit purchases. The site uses Google Analytics to understand visits, with advertising tracking disabled.

Operator: touchtech co.,ltd
Country or region: Hong Kong SAR, China
Contact email: contact@mygoober.com

2. Information and purposes

Browsing: your browser sends the network information needed to load pages to the hosting service. The host may create necessary access or security logs, as described below. The site also uses Google Analytics as described below, without advertising tracking. Search terms, categories and language may appear in page URLs, browser history, links you share and referrer information sent within the site. Do not enter personal information in the search box.
Visitor analytics: public pages load Google Analytics asynchronously and send basic measurements without analytics cookies before you choose. Google receives page visits, referral, browser/device and network request information; cookieless does not mean no data transfer or complete anonymity. Analytics cookies are enabled only after acceptance; explicit refusal stops subsequent analytics. We do not load analytics on account, artwork-library or administration pages, or actively submit account emails, photos or prompts to GA.
Local choices: we store your accept or reject choice in your browser. Your language is saved only after you allow “Remember language preference.” See the Cookies & Local Storage notice.
Photo creation: when you actively submit a generation request, your reference photo, additional prompt, selected style prompt, model and aspect ratio/resolution are sent to generate and return an image. Generated artworks and necessary metadata are saved to your account for viewing, downloading and deletion. Selecting a photo alone does not upload it to the generation service.
Accounts and credit purchases: we process your email, nickname, securely derived password hash, verification records, sessions, orders and credit ledger to verify identity, protect your account, confirm payments and settle usage. The site does not store card numbers; Stripe collects payment details on its hosted page when real payments are enabled.
Waitlists: only after you sign in and click to join do we save your account, requested category and submission time to handle access requests. Each account can join each category once.
External sign-in and email: when you choose Google sign-in, Google provides your verified email, account identifier and public name. Verification emails are sent through the configured mail provider. Your password is not sent to Google or the payment provider.
Contact: contact details and request contents you voluntarily email us are used to respond, handle rights requests, or address necessary disputes and security matters. Please omit unrelated sensitive information.

Before forwarding an image, the site server decodes it, applies its orientation and re-encodes it to remove original embedded metadata such as EXIF, GPS, XMP, IPTC and ICC. This does not remove faces, text, locations or other personal information visible in the pixels. The site does not perform facial recognition or create identity templates.

Do not upload identity documents, medical or financial records, biometric data used for identification, photos of minors, or photos of others without lawful authorization. An ordinary portrait can also contain personal information.

Google Analytics processing is also described in Google’s policy: How Google uses information from partner sites

3. Legal bases and choices

Processing necessary to load requested pages, maintain security and record privacy choices relies on the legal basis available for providing the service or another basis permitted by applicable law; where required, we obtain consent separately. Optional language storage and analytics cookies rely on your active, voluntary consent and can be chosen separately. You can refuse or withdraw analytics at any time through Cookie settings. When creating an account, the confirmation action shown on the page accepts the Terms of Service, Privacy Policy and authorization to process your submitted photos and prompts for image generation. The scope and recipients are described in this policy. We obtain separate consent for disclosure to another recipient or international transfers where required by law.

Rejecting optional storage still allows browsing, language switching and features that do not depend on that storage; your language will not be remembered. You can browse the atlas without registering. After registration, photo processing starts when you click Generate; selecting a photo alone does not send it. Optional storage choices remain separate from registration acceptance.

Where EU or UK data protection law applies, optional storage and voluntarily submitted photo processing rely on consent. Processing strictly necessary for a requested service may rely on performance of a contract or steps requested before a contract. Proportionate security and abuse prevention may rely on legitimate interests, subject to your interests and fundamental rights. Processing required by law relies on a legal obligation.

4. Service providers and recipients

Photo creation is a service we provide to you. After submission, we call the selected Gemini-series model through XRoute. Relevant upstream services process your photo, prompts and necessary generation parameters and may store them.

Generation service: XRoute
Data and purpose: Reference photo, prompts and generation parameters; request routing, generation, returning results, and necessary security processing permitted by law.
Further recipient categories: Model processing and infrastructure providers needed to generate with the selected model. Specific arrangements depend on the model, service plan and applicable agreements. You can ask our privacy contact for details.
Provider privacy policy: XRoute Privacy Policy

We do not promise zero upstream retention or that upstream services will not use content for training. Retention, training use and other processing depend on the actual applicable agreements and policies. Submitting a request is not blanket consent to undisclosed purposes, and this policy does not remove our legal responsibility to manage providers. We do not sell personal information or share it for advertising.

5. Hosting, logs and retention

Hosting provider: The provider hosting this site and its network infrastructure. Ask our privacy contact for the specific provider.
Access log fields: The host may process necessary network information such as IP addresses, request times, page addresses and security diagnostics. The specific log configuration has not been confirmed.
Log purposes: Network delivery, troubleshooting and security; not site visitor analytics or advertising.
Log retention: The specific period depends on the hosting configuration and is not yet confirmed. We do not promise zero host logs or zero retention.

Local language preference and privacy choice: your choice is valid for 180 days. The language preference expires with that choice and is not extended by language switching; withdrawal removes it. Local storage has no native browser expiry: the site clears expired records while the page runs or when it checks on your next visit. You can also clear browser site data at any time.
Reference photos and prompts are processed for the request without being archived by this site. Generated artworks and thumbnails are kept for 7 days after generation, then automatically deleted. You can also delete them earlier in your account library. Download your images to your device soon. They are held in private server storage, or processed by Cloudflare R2 when cloud storage is enabled, and require sign-in and ownership checks to read. Expiry or deletion immediately disables viewing and downloading; file deletion is retried if storage is temporarily unavailable. For settlement and troubleshooting, we retain account and call identifiers, model, resolution, aspect ratio, style ID, credits, timestamps, duration, status and error codes. Authorized administrators can view these records; credit adjustments also record the operator and reason. This does not cover retention by hosts or upstream services, and closing the page does not delete data they have received.
Member sessions last up to 30 days and can be ended or revoked in your account; administrator sessions last up to eight hours. Verification codes expire after 10 minutes. Account, transaction, invocation and waitlist records are retained as needed to provide services, maintain security and handle disputes. Send deletion or other personal-information requests to the contact email above.
Closing the page does not delete saved artworks early. You can view, download or delete them in My artworks within 7 days. The site does not download images to your device automatically; download them manually soon. Downloaded files remain under your control.

Upstream content retention: Upstream services may retain inputs, outputs or necessary logs. Periods depend on the actual model, plan, agreements, policies and legal requirements. A uniform period for this service plan has not been confirmed. We do not promise zero upstream retention.
Model training rules: The site itself does not use inputs or results for model training. Upstream training rules depend on the actual applicable agreements and policies; we do not guarantee no upstream training.

We retain information under our control for the shortest period needed for its purpose. If law, disputes or a security incident require further retention, we restrict its use and delete or anonymize it when no longer necessary. Email and rights-request records are retained for the time needed to handle the matter and meet applicable legal requirements.

6. Processing locations and international transfers

Website hosting locations: The specific countries or regions have not been confirmed.
Hosting transfer safeguards: The applicable contractual and legal safeguards have not been confirmed; we do not represent that a specific transfer mechanism is in place.
Generation and further-recipient locations: Processing may take place outside Hong Kong and your location. The specific destinations have not been confirmed.
Generation transfer safeguards: Recipient contracts, standard contractual clauses or other specific safeguards for this plan have not been confirmed.

Providers may process information outside your country or region, where laws can differ. Accepting storage or continuing to browse does not constitute consent to an international transfer. The relevant transfer should not proceed until required notices, separate consent, contracts or other legal safeguards are in place.

7. Your rights and withdrawal

Subject to applicable law, you may request information and explanations, access or a copy, correction, completion, deletion, restriction of or objection to processing, and a portable copy where available. You can withdraw consent to consent-based processing; withdrawal does not affect processing lawfully performed beforehand. You may also complain to a competent data protection authority.

Use “Cookie settings” at the bottom of the page at any time to reject optional storage and remove your saved language. Contact us to withdraw generation consent or request action on content already held by providers; stop submitting photos to prevent new generation processing. Completed model processing cannot be reversed.

Provider rights-request procedure: Submit a request to our privacy email and we will coordinate with relevant providers. Information held independently by a provider may require its verification or further cooperation; deletion is subject to applicable law and actual retention.

For privacy questions, rights requests or complaints, contact contact@mygoober.com. We will respond within the period required by applicable law and may request proportionate identity verification to protect your information.

Hong Kong users may request access to and correction of personal data under the Personal Data (Privacy) Ordinance and complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Where state law applies, US users may request confirmation, access, deletion, correction and a portable copy, opt out of sales, sharing for cross-context behavioral advertising, targeted advertising or profiling with legal or similarly significant effects, and appeal a denied request through the same email. We do not sell personal information, engage in that advertising sharing or targeted advertising, or perform that significant-effects profiling. We honor applicable opt-out signals such as Global Privacy Control (GPC); because those activities do not occur, no additional opt-out is needed. We do not discriminate against you for exercising statutory privacy rights.

8. Security and children

We use access restrictions and other reasonable security measures proportionate to the risks. No transmission or system is completely secure. If a personal information incident requires notice, we will notify you and the relevant regulator as required by law.

The site is not directed at children. Minors should browse under a guardian’s supervision and must not submit personal photos or other personal information. If you believe a minor’s information has been submitted, notify us using the contact details above. We will investigate, take action and delete as required by law, and coordinate with relevant recipients.

9. Policy changes

The date at the top identifies this version. We will provide appropriate notice of material changes to purposes, methods or recipients and seek fresh consent before new processing where required by law.