Privacy Policy
Effective date: October 27, 2026
1. Who we are
Kenina Studio (“we”, “us”, “our”) operates an AI-powered custom portrait and art studio at https://kenina.studio (the “Service”). This Privacy Policy explains what personal data we collect, why we collect it, how it is used and shared, and the rights you have in relation to your data.
We act as the data controller for the personal data described in this policy.
2. What we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, display name, account ID, password (hashed) | To create and manage your account, authenticate you, and provide the Service |
| Content you submit | Photographs you upload and any style selections or text you provide | To generate your requested artwork, upscale it, and deliver it to you |
| Generation records | Style, dimensions, timestamps, success/failure status, credits charged | To deliver the Service, process refunds, and maintain usage and billing records |
| Payment data | Payment confirmation and billing history (handled by our payment provider, Creem) | To process payments and manage subscriptions. We do not store full card numbers |
| Moderation data | The text and metadata screened by our content moderation controls | To comply with legal and platform safety obligations and prevent abuse |
| Technical logs | IP address, browser type, device type, approximate location, pages visited | To secure the Service, diagnose errors, and understand usage |
3. How we use your data
We use personal data to:
- Provide, operate, and maintain the Service, including generating and delivering artwork;
- Screen content for prohibited or harmful use (content moderation);
- Process payments, subscriptions, and automatic refunds for failed generations;
- Provide customer support and respond to your requests;
- Detect, prevent, and address fraud, abuse, security, or technical issues;
- Comply with legal obligations;
- With your consent where required, improve and develop the Service.
We do not sell your personal data, and we do not use your photos to train any AI model.
4. How we share your data
We share personal data only with the service providers necessary to operate the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Black Forest Labs (BFL) | AI image generation | Uploaded photo, style, and generation parameters |
| Replicate / local upscaling | High-resolution upscaling of generated images | Generated image data |
| Supabase | Cloud database and file storage | Account data, uploaded photos, generated images, logs |
| Creem | Payment processing, subscriptions, and content moderation screening | Payment metadata, customer identifiers, screened prompt text |
| Email / support tools | Customer support communications | Account email, correspondence |
All providers process data under our instructions and are contractually required to protect it. Where a provider operates outside your country of residence, data transfers are made using appropriate safeguards (e.g. Standard Contractual Clauses).
5. How long we keep your data
- Account data: kept while your account is active, and for a reasonable period afterwards to comply with legal obligations (e.g. tax and billing records).
- Uploaded photos and generated images: stored to provide the Service (including “My Studio” access to your artwork). You may request deletion of your uploaded photos and generated images at any time by contacting support@kenina.studio; we will delete them within a reasonable timeframe (typically 30 days) unless we are legally required to retain them.
- Logs: retained for a limited period (typically up to 12 months) for security and abuse prevention.
- Moderation records: retained to document compliance with safety obligations.
6. Your rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate data.
- Deletion: ask us to delete your personal data.
- Restriction / objection: ask us to limit how we process your data.
- Portability: request your data in a structured, machine-readable format.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
California residents (CCPA/CPRA): you have the right to know what personal data we collect, request its deletion, and opt out of the “sale” or “sharing” of personal data. We do not sell or share your personal data. To exercise any right, email support@kenina.studio — we will verify your identity and respond within the timeframe required by law (typically 45 days).
UK / EEA residents (GDPR/UK GDPR): you may also lodge a complaint with your local data protection authority.
7. Children's privacy
The Service is not directed to children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact support@kenina.studio and we will delete it promptly.
8. Security
We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Cookies and analytics
We use only functional cookies and local storage necessary for the Service to work (e.g. authentication sessions). We do not use advertising cookies or third-party ad trackers. If we add analytics, we will update this policy.
10. International data transfers
The Service operates infrastructure primarily in the United States. By using the Service, you acknowledge that your data may be transferred to and processed in the United States and other countries where our providers operate.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available at kenina.studio/privacy, with a new effective date. Material changes will be communicated by email or prominent notice.
12. Contact
For any privacy questions or requests: support@kenina.studio