Privacy Policy

This Privacy Policy describes how Yiff AI (yiff-ai.com) processes personal data. Use our contact form for privacy requests.

Data Collection and Use

• Account and purchases: email, optional profile details, account preferences, payment references, amounts and status. Finby processes payment details. For automatic renewal or video-credit top-up, Finby stores the card; we store an encrypted token reference, card brand and last four digits, not the full card number.
• Generation: prompts, negative prompts, reference uploads, images, videos, generated audio and generation settings. Public media and public profile information are visible to visitors when you choose to publish them. Private media is accessible to you and authorized staff or service providers as needed to operate the service and investigate abuse.
• Security and support: IP address, browser information, error diagnostics, account logs, reports and contact messages.
• Attribution: when you arrive, the referring site, campaign parameters and referral code are stored for 30 days in the yiff_acq cookie to measure marketing and credit an affiliate. You can delete that cookie at any time; an explicit refusal recorded earlier in your browser is still honoured. Account-linked acquisition information may be stored at registration or purchase. A referral code you deliberately supply may still be applied to your requested purchase.
• Legal choices: the version and time of the terms and immediate-performance notices you accepted for a purchase, and the record of any voluntary training contribution.

Why We Process Data

We process account, generation, billing and requested support data to provide the service and perform our contract. Security, fraud prevention, content moderation, service diagnostics and marketing attribution support our legitimate interests in operating and growing a safe service. We process records as necessary to meet applicable legal obligations. Newsletter subscriptions use your consent, which you can withdraw. Training contributions carry the separate content license described below; this license does not waive rights over personal data.

Storage and Retention

• Account details remain while your account is open. Self-deletion schedules deletion after 14 days; you can contact support during that period.
• Public images on standard plans have no scheduled expiry. Public Paw Trial images are retained for 30 days unless an upgrade extends retention. Private images follow the retention shown for your plan, which may be extended by an upgrade or certain actions. Visibility changes may change retention. Deletion by you, account deletion and moderation may remove media sooner.
• Public and private videos are retained for 180 days. Download media you wish to keep.
• Reference uploads are temporary and normally cleaned up after 180 minutes. Processing jobs may require temporary copies until they finish.
• Account activity logs are retained for up to 12 months. Moderation screening records are retained for 90 days; reviewed moderation examples for up to 24 months.
• Data-export download links expire after seven days. Payment and support records are retained as needed for the account, disputes and applicable legal obligations.
• Contributed training copies have no scheduled expiry under the permanent content license below; requests involving personal data remain subject to applicable law.

We use access controls, encrypted connections and restricted credentials. No system can guarantee absolute security. Hosting, storage, email, inference and diagnostic providers process the information needed for their tasks; processing is not exclusively on EU servers.

Automated Content Moderation

Prompts submitted for generation, including private images and videos, are checked before rendering by our own word filters, which run on our servers: no prompt is sent to a third party for moderation. They may allow, restrict publication or refuse a request. Refusals and restricted prompts may be retained for review. Account suspension is reviewed by a person; automated checks can refuse generation or restrict publication. You can ask a moderator to review a restricted image from its menu, or contact us to contest a decision.

Emails We Send

• Service emails: receipts, purchase confirmations, password resets and security notices, necessary for your account.
• Reminders: plan-expiry notices, unfinished-checkout reminders, at most two inactivity reminders and at most two invitations after a paid plan ends. Every reminder has a one-click unsubscribe link; preferences are available in Settings > Emails.
• Newsletter: only with your opt-in, with an unsubscribe link in every issue.

We do not include your images or prompts in these emails, and we do not sell your email address.

AI Training Contributions

The “Contribute to training” button is the only way content from your account enters our own image-model training dataset. Images you do not contribute, their prompts, your reference uploads and videos are not used by us for that training. You may contribute only an image you generated yourself, with underlying reference works you created yourself. By confirming, you grant a worldwide, non-exclusive, royalty-free, permanent license to copy the image, its prompt and generation settings and use them to train and improve our models. It is entirely optional. No email or account name is attached to training metadata, but records are pseudonymized rather than anonymous: a hashed account reference and internal links can exist, including to document the license. The content license continues after deletion of the original or the account. Mandatory rights over personal data remain unaffected; contact us for a request. An already completed training cannot be reversed image by image.

Providers and International Processing

• Finby: payment processing and optional saved-card payments.
• A hosting and transactional email provider located in the European Union: application hosting and service emails.
• Cloudflare: security, content delivery and media storage.
• AI model providers: optional prompt conversion, image titles and video-prompt writing. The payload depends on the feature and can include reference-image prompt metadata.
• AI video generation providers: video generation, receiving the animation prompt, the first reference frame and an optional last frame; generated videos and audio are returned through these providers.
• An error diagnostics provider: crash and error reports.
• A newsletter delivery provider: newsletters and opted-in contact synchronization.

Some providers process data outside the United Kingdom or your country of residence. Provider locations and applicable safeguards depend on the selected service and provider. Contact us for information on the processing relevant to your account. Providers' own retention and processing terms apply to the data they receive. We may also disclose information when required by law or to investigate a security incident.

Your Rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction or object to certain processing. Use Settings > Privacy to request an export or account deletion, and the contact form for other requests. You can withdraw newsletter consent or delete the attribution cookie without losing generation access. Withdrawing consent does not affect processing already carried out lawfully. You may complain to the UK Information Commissioner's Office or another competent supervisory authority. No automated decision infers your real-world sexual orientation or other sensitive attributes; do not include personal information about yourself or identifiable real people in prompts.

Age Restriction

The service is for adults aged 18 or older. We do not knowingly collect data from minors; contact us if you believe a minor holds an account.

Changes and Contact

We publish changes here and provide a site notice for material changes. Use our contact form for questions or privacy requests.

Last Updated: October 23, 2026