privacy

Privacy

Current as of September 29, 2026.

This page explains what ALEMI LLC keeps in order to make an image, run an account, take payment, and stop fake accounts, and the choices you have. Photos, results, and device records are not sold. Privacy questions and data requests go to support@slavpic.com.

Account

• Email address.
• Password, stored as a hash, if you set one.
• A Google id, only if you sign in with Google.
• The look you picked, the plan, and the emerald balance.

Your face photo (biometric data)

The core of the service is a photograph of a face that you upload, or a face you take with the camera. To make your images, that photo is processed by an AI model, which reads facial features. Depending on where you live, facial data is treated as sensitive or “biometric” information under laws such as the EU GDPR, the Illinois Biometric Information Privacy Act, and similar state laws.

• Consent. By uploading a face, you agree to this processing, and you confirm the face is yours or belongs to an adult who has agreed. Starting a generation is your consent to process that face to create your images.
• What we keep. The face photo and the images made from it stay with your account so you can open them again. A finished image is copied to our image host and shown from that address.
• How long. We keep them until you remove them or close your account. You can remove a saved photo from the account at any time, and you can ask us to delete your face data and results at support@slavpic.com.
• We do not use your face to identify you across other services, sell it, or share it for advertising.

Payment

The trial is $0 for 3 days, then $9.99 a month, or $69 a month for premium, renewing until you cancel. Stripe processes the card and card numbers stay with Stripe; we store only a Stripe customer id and whether the trial has started and how many emeralds remain. See the Billing page.

Mail

Login codes, password-reset codes, and account or billing notices are sent to the email on the account, through our email provider. That is the mail this service sends. We do not send marketing email unless you ask for it.

Who we share it with

We do not sell your data. We share only what a provider needs to run part of the service, under their terms:

• Stripe — payments and card storage.
• Our image host / CDN — storing and serving finished images.
• Our email provider — sending login and account emails.
• Google — only if you choose to sign in with Google.
• Our image-generation host — running the AI model that makes your images.

We may also share information if the law requires it, or to protect the service and its users.

Cookies

A session cookie keeps you signed in. It is limited to this site, lasts 30 days, and is not readable by page scripts. If you choose a look before you log in, a short cookie holds that choice until the login finishes. These are strictly necessary cookies. There is no advertising cookie today. If we ever add analytics or advertising cookies, we will ask for your consent first where the law requires it and update this page.

Device check

On each visit the browser runs ThumbmarkJS 1.10.1, MIT-licensed free software published at that GitHub repository. It reads traits the browser already exposes: canvas drawing, audio processing, fonts, WebGL, math results, permissions state, plugins, speech voices, and system details such as platform and browser name. Those traits are hashed in the browser. We store the hash, a short device label (Mac, Windows, iPhone, iPad, Android, Linux, ChromeOS, or other), the graphics chip name, the IP address, and the browser’s user-agent string, for guests and for signed-in accounts. We also keep a device profile the browser reports about itself: browser and operating-system versions, device model where the browser exposes it, screen size and pixel density, time zone and languages, processor core count and memory class, touch support, connection type, battery level, a storage-quota estimate, the number of cameras and microphones (not their names), and short hashes of the fingerprint traits above. We do not send the raw traits to ThumbmarkJS and we do not use their paid visitor API. The first time a hash is used on an account, a login code is required; after that code is confirmed, the hash is remembered for the account, and a session is kept only while the browser still presents that same hash. We use this to stop extra accounts, trial abuse, and stolen logins.

How long we keep things

Account details last while the account is open. Face photos and results last until you remove them or close the account. Device and visit records used for fraud checks are kept for a limited period and then removed. When you close your account we delete or de-identify your data within a reasonable time, except records we must keep for legal, tax, or fraud-prevention reasons.

Your rights

Depending on where you live, you can ask to see the data we hold about you, correct it, delete it, get a copy, or object to certain uses, and you can withdraw consent to face processing at any time by removing your photos or closing your account. To make a request, email support@slavpic.com. We will not treat you differently for using these rights. If you are in the EU or UK you may also complain to your local data-protection authority.

Children

The service is for adults 18 and older. We do not knowingly collect data from anyone under 18, and faces of minors may not be uploaded. If we learn we have such data, we delete it.

International

We and our providers may process your data in countries other than yours, including the United States. We rely on appropriate safeguards where the law requires them.

Changes and contact

We may update this page and will show the date above. For any privacy question or request: ALEMI LLC, 10175 W Twain Ave, Suite 120, Las Vegas, NV 89147, support@slavpic.com.