The short version.Your signed-in Roll is private. Anything you deliberately publish to Community is public. We use the minimum services needed to generate images, keep accounts and settle image packs.
Last updated July 14, 2026
01
What we keep
Your email and basic OAuth profile, account session, Studio settings, prompts, model choices and prediction references may be processed. If you use the signed-in Private Roll, its images and metadata are stored for your account.
Community posts include the image, public name, title, model and complete prompt you choose to publish. Billing records include your image balance, one-image generation and repair charges, payment orders and public blockchain transaction references.
02
Where it goes
Netlify serves the site and its private server functions. Supabase provides authentication, account data, storage, Community records and the image ledger. Replicate receives the prompt and any input image needed to run the model.
DePay opens wallet checkout. Completed crypto transfers are visible on public blockchains. We never ask for or store your wallet seed phrase or private key.
03
Private versus public
Your Private Roll is available only to your signed-in account. It is not automatically published. Community is deliberately public: visitors can view images and copy, edit and reuse published prompts.
The browser keeps your session and a few interface preferences locally. Signing out ends the active Studio session on that browser.
04
Your control
You can delete your own Community post and remove items from your Roll. Deletion removes the Studio copy, but it cannot recall images or prompts that somebody already downloaded, copied or remixed.
For an account or data request, email michael@forbidden-yoga.com. This private beta is for adults only, and this page may change as the test develops.