Your ideas deserve privacy.
Your private project
Your project contains your ideas, uploaded artwork, design versions, reference notes, placement settings and personal notes. It is saved on our application server and a working draft is stored in this browser. Guest access uses an essential session cookie that lasts up to 30 days. Sign in to connect the project to your email account; clearing browser data can remove guest access.
When you use AI
AI actions send your instruction and the relevant images to Google Gemini. An edit sends the selected design and any selection mask. A placement render sends your artwork and composed body photo. Manual adjustments do not need an AI request. Google’s handling of these requests is governed by its service terms.
When you share
Projects are private by default. A friend voting link includes the project title and selected design versions. An artist link includes your selected versions, references, placement preference and artist notes. Your personal notes are excluded. A body photo is included only if you select that option. Anyone holding a link can see its shared snapshot. Revoking a link blocks future access here, but cannot recall screenshots or downloaded copies.
Accounts and payments
Supabase handles email sign-in. When checkout is available, Stripe processes payment details. We store the purchase reference and credited result count, rather than your card number. The application stores project data in a private Supabase database and images in private Supabase storage. Netlify serves the website and processes requests.
Product measurement
We record feature events such as project starts, shares, guide visits and confirmed purchases, together with a source label and time. We also record which buttons are used, which step of the workspace you reached, and a short code for anything that failed or blocked you, such as an upload that was too large or a result that could not be created. These event records do not include your journal text, email, uploaded images or the wording of any error. Voting uses an anonymous browser session to limit duplicate votes. Essential cookies and browser storage support the workspace. If you allow optional analytics, Google Analytics receives feature events and page categories. We exclude journal text, email addresses, images and private share-link identifiers. You can change this choice using Analytics preferences in the footer. Feedback you choose to send is stored privately for product review. Google Fonts is requested to display the interface.
Your choices
You can edit your project and revoke links from your journal. For access or deletion requests, contact hello@badboylabs.com. Download artwork you want to keep before clearing browser data or requesting deletion.