Remorphy

Remorphy Privacy

This remorphy privacy policy describes what the Remorphy editor stores to run sign-in, credits, and image generation. This version is dated 6 October 2026.

Account email

Sign-in uses a Google account. Supabase Auth stores that account and its email. The editor does not ask you to create a password. The email is also sent to Waffo when you start a subscription, together with your account id and the plan amount.

Photos, prompts, and records

A generation record stores the prompt, model, style, aspect ratio, credit cost, status, and the uploaded photo and result. Files sit in private Supabase storage. A download is sent only to the account that owns the row, or to the browser that holds the signed cookie for a signed-out result.

The photo and the prompt are sent to the model you pick: Google for Nano Banana, or Black Forest Labs for Flux. A prompt that is not English is translated to English by MyMemory before that model request. The saved generation record keeps the prompt you typed. Before the model request, the prompt text is sent to Waffo for a content-safety scan. Waffo does not keep that prompt. Remorphy does not sell personal information. Waffo keeps the card payment record on its own systems.

IP address, browser signal, and cookies

Each generation record stores the IP address seen by the server. Rate limits and the signed-out single use also store a salted hash of that IP and a salted hash of a browser signal. The signal is built in the browser from the user agent, language, screen size, and time zone, then hashed again on the server. The history list shown in the editor does not include the IP address or that hash.

Cookies are httpOnly. rm_access and rm_refresh keep the sign-in session. rm_verifier lasts about ten minutes and only finishes Google sign-in. rm_anon remembers the signed-out result in that browser. A signed-out first generation also sends a Turnstile token and the IP address to Cloudflare.

How long files stay

Originals and results are deleted after 7 days on a free plan and after 30 days on a paid plan. The generation row remains and is labeled Expired until you ask for deletion. Card numbers are entered on Waffo's page. Remorphy does not store them.

Your data rights

Email legal@remorphy.com from the email on your account. Remorphy answers within 30 calendar days. Use the subject line that matches the request: Access my Remorphy data, Correct my Remorphy data, or Delete my Remorphy account.

Access: the editor history shows your generations while the files remain. On request, Remorphy sends a copy of the account email, plan, and credit balance. Correction: name the inaccurate field, such as the account email, and the replacement. Deletion or closure: Remorphy deletes the photos, prompts, and sign-in within 30 calendar days. A credit or payment row may remain with the photos and prompts removed, because that row is the billing record. Waffo keeps its own payment record.

You can also complain to a data protection authority where you live. Remorphy does not run a separate marketing list, so there is no marketing unsubscribe switch.

Questions

What does the remorphy privacy policy say is stored?

The account email, the prompt, the photo, the result, the IP address on the generation record, and salted hashes used for rate limits and the signed-out image.

Does Remorphy store card numbers?

No. Card details are entered on the Waffo payment page. Remorphy stores the subscription plan and the credit ledger, not the card number.

Who receives an uploaded photo?

The photo and prompt go to Google when you choose Nano Banana, or to Black Forest Labs when you choose Flux. If the prompt is not English, MyMemory translates it to English for the model, and the history row still shows your original words. The prompt is also sent to Waffo for a safety scan that does not keep the text. The files stay in private storage until the 7-day or 30-day period ends.

How do I access, correct, or delete my data?

Email legal@remorphy.com from the account email. Remorphy answers within 30 calendar days. Deletion removes the photos, prompts, and sign-in. A billing row may remain without those files.

Remorphy acceptable use policyRemorphy terms of useRemorphy pricing and monthly creditsBack to the Remorphy editor