Pomly Privacy Policy

Effective and last updated September 13, 2026.

This Policy explains the personal data Pomly uses to provide its account and AI pet portrait features. A feature marked as unavailable does not become active merely because it is described here.

Data you provide

When you request a portrait, a resized copy of your pet photo, the final prompt, selected style, optional pet name, output ratio, and your processing consent are sent to our server. The photo is stored privately and made available to EvoLink through a temporary link so its image service can create your portrait. Do not upload private documents or photos you do not have permission to use.

AI enhancement is optional and off by default. Requesting enhancement sends your written idea, pet type, and selected style to EvoLink's text service. It does not send your photo or automatically generate an image. You can review, edit, or discard the suggestion.

If you create an account, we process your email address, display name, authentication records, and any information Google shares with your authorization. Email passwords are hashed by our authentication system. Verification and password-reset emails use our email provider. If you contact support, we process the message and information needed to answer it.

Payments

If you buy a portrait pack, Waffo Pancake provides the hosted checkout and processes the payment. Pomly sends Waffo your account identifier, email address, selected pack, amount, currency, and an order identifier, then stores the order status and credit balance. Pomly does not receive or store your full card number.

How and why we use data

We use this data to authenticate accounts; create, store, recover, and deliver portraits; manage credits and payment confirmations; respond to support and privacy requests; prevent fraud and repeated free-credit claims; enforce content rules; diagnose failures; and comply with legal obligations. We do not sell your personal information. We do not use your uploaded photos or prompts to train an AI model without your express permission.

Safety checks and service providers

Pomly uses a PostgreSQL database for account and task records, private Cloudflare R2 storage for images, EvoLink for generation and optional prompt enhancement, Resend for account email, Waffo Pancake for payments and prompt screening, and Cloudflare Turnstile to deter automated abuse.

Before every image-generation request, Pomly sends the final text prompt to Waffo Prompt Sift in semantic enforcement mode. Waffo's scan is stateless and does not retain the prompt text after returning its decision. Only an allow result continues to EvoLink; a review, block, degraded response, or unavailable scan prevents generation. Pomly records the scan request identifier, action, reason, categories, and semantic status for operational review.

EvoLink's GPT Image 2 service also applies its input and output safety controls. A generated portrait is stored or shown only when the provider returns a completed result. A safety-blocked result is not displayed, and any purchased credit reserved for that request is restored.

Storage, retention, and deletion

Uploaded image copies and stored final prompts are scheduled for physical deletion within 24 hours. Generated portrait files are scheduled for physical deletion 30 days after creation; downloads stop when the result expires. Before live generation opens, the scheduled cleanup job must be activated in production and its successful runs monitored. Limited task, safety, device-abuse, credit, and order records are retained separately as needed to secure the service, prevent repeated one-time claims, maintain transaction history, and resolve disputes.

Deleting data from Pomly does not delete copies you downloaded. Payment, fraud-prevention, dispute, tax, accounting, or other records may be retained after an account closes when reasonably necessary or legally required. When retention is no longer required, the data is deleted or de-identified. Third-party providers may keep records under their own legal obligations and privacy terms.

Cookies, network data, and public examples

Account cookies keep you signed in. For the anonymous free portrait, Pomly sets a separate long-lived, HttpOnly device cookie and stores a one-way keyed digest of its identifier to enforce one portrait per device. We also store a one-way keyed digest of the request IP address as a high-threshold, per-day anti-abuse signal; the raw IP address is not stored in the portrait allowance table. Authentication, hosting, security, and operational logs may process an IP address, browser information, request time, and error details.

Browser storage keeps pending task and retry identifiers, plus an optional interest preference, so an interrupted request can be recovered without creating a duplicate. Your uploaded photo and generated portrait are private by default and are not automatically added to the public gallery. Gallery images are separately selected AI examples or separately authorized work.

Your data rights and account deletion

Depending on where you live, you may ask to know what personal data we process, access a copy, correct inaccurate data, delete data, restrict or object to processing, receive portable data, or withdraw consent for processing based on consent. Withdrawing consent does not make earlier lawful processing unlawful. You may also complain to the data-protection authority where you live.

To exercise a privacy right or close your account, email support@pomly.io with the subject “Privacy Request” or “Account Deletion Request.” Send the request from your registered account email when possible and describe the data or action requested. For an anonymous portrait, include the portrait task identifier if you still have it. Do not send a password, full payment-card number, or private key.

We may ask for information needed to verify your identity and protect the account from unauthorized deletion or disclosure. We will acknowledge the request and respond within 30 calendar days, or sooner when applicable law requires. If a complex or repeated request lawfully needs more time, we will explain the extension. Some rights are subject to legal exceptions; if we cannot fulfill part of a request, we will explain why and describe any available appeal.

Account deletion removes or de-identifies account profile and associated portrait data that Pomly is not required to retain, ends access to the account, and cannot be undone. Request a data copy before deletion and review the Terms of Service for the effect on unused credits.

Children, security, and policy changes

Pomly is intended for adults and is not directed to people under 18. If you believe a child provided personal data, contact us so we can investigate and delete it where appropriate.

We use access controls, private object storage, limited-lived download links, hashed passwords, and transport encryption to protect data. No online service can guarantee absolute security. Keep your credentials private and report suspected account misuse promptly.

We may update this Policy as the service or legal requirements change. We will update the date above and provide additional notice for material changes where required.

Contact

support@pomly.io is the monitored contact for account, image, privacy, content-report, and appeal requests. Prohibited content and reporting are described in the Acceptable Use Policy.