Privacy policy

Last updated: November 8, 2026

TuneImage is operated by Huang Ming Dong, an individual based in mainland China. This policy explains how information is handled when you visit tuneimage.com, edit photos, sign in, purchase credits or contact us. Public privacy contact: Huang Mo, h975434105@gmail.com.

Information we process and why

• Photos and editing requests. We process the image you upload, the instruction you submit, the generated result and technical details such as file dimensions, request identifiers and job status to provide editing and show your history.
• Account and session information. With Google sign-in, we receive your email address, basic profile information and a Google account identifier. Email-code sign-in uses your email address. We use account identifiers, session cookies and verification records to authenticate you and keep credits and files attached to the right account. Login and security processing can include your IP address and browser information. TuneImage does not offer password sign-in.
• Orders and credits. We keep purchase identifiers, the pack and price, payment/refund status and credit usage to deliver paid access, reconcile payments, handle billing questions and prevent duplicate credit grants. We do not receive or store full card numbers or bank login credentials.
• Operational and abuse-prevention records. We retain request identifiers, timestamps, status, usage counts and security records needed to operate the service and protect limited free trials. Editing limits use a keyed hash derived from your network address; this does not mean every authentication or hosting record is anonymous.
• Support correspondence. If you contact us, we process your email address, message and details you provide to answer. Send an order or job identifier where possible instead of unnecessary personal information or image attachments.
• Refund and withdrawal requests. The form collects your name, email address, order reference, request type and any optional explanation. We record when the request arrived and give it a reference so we can acknowledge it, verify the purchase, process it and establish what was requested and when. Confirmation emails are delivered through Resend; support handling uses the published Gmail address. We also keep a keyed network-address hash for request-abuse controls. The form does not ask for photos, payment-card details, bank login credentials or identity-document uploads. These records are kept separately from photo history as needed to resolve the request, reconcile payment and establish or defend legal rights; they are not subject to the 24-hour/7-day media-deletion schedule.

Where a legal basis is required, processing necessary to provide a requested feature or purchase is based on providing the service; necessary security and support processing may rely on legitimate interests; records needed by law rely on legal obligations. Optional source-attribution cookies are used only with your choice to allow them. These bases do not override rights available under applicable law.

Your photos and generated results

Uploads are accepted as JPG, PNG or WebP. Before TuneImage stores an upload, it is re-encoded, transparent areas are flattened to white, and embedded EXIF/GPS/camera metadata is removed. The original uploaded file bytes are not stored by TuneImage.

Uploads expire after 24 hours and are removed from TuneImage storage by scheduled cleanup. Generated results expire after 7 days. Deleting a completed edit in your history immediately removes its stored prompt and makes the result unavailable; stored media is removed through the deletion or cleanup process. Guest access is tied to your browser's signed guest cookie; signed-in files are tied to your account. The guest cookie can last up to one year, and deleting it can remove access to guest results.

TuneImage does not publish uploads or results in a public gallery, sell your images or use them as public marketing examples without your permission. Your guest browser cookie or signed-in account controls access to your files. Service providers process files to deliver the requested feature, and necessary operational access may occur for support, a security incident or a legal obligation. Private storage does not mean that no service provider can process a file.

Optional prompt optimization

When the editor offers “Optimize prompt”, this optional feature starts only when you request it. Selecting or uploading a photo does not by itself start prompt optimization. Your request and a resized version of the selected uploaded photo are sent to DeepSeek to produce an editable draft and any explanatory note. This does not submit an image-generation task to fal or Google. You decide whether to use or change the draft, and generating an image remains a separate action.

The original optimization request, draft and explanatory note expire seven days after the optimization task was created and are removed by scheduled cleanup. Separate operational and credit records may remain, including account/task identifiers, status, timestamps, usage and charge amounts, without the original optimization text. These records help prevent duplicate charges and resolve billing questions. Provider-side handling follows the provider's policies and agreements; we do not promise zero retention by DeepSeek.

Service providers and international processing

Automated content checks

When you request an image edit or prompt optimization, safety checks process a resized copy of your selected source image with DeepSeek and fal. Your final instruction is checked with DeepSeek and Waffo Prompt Sift before the requested generation or optimization. Generated images are checked with DeepSeek and fal before delivery; optimization drafts and explanatory notes are checked with DeepSeek and Waffo before display. Waffo receives text for these checks, not your photos. Uploading a photo alone does not start these model checks.

Checks may refuse a request or stop delivery when a service cannot provide a clear result. They are automated and fallible; they do not establish a person's age, identity, consent or legal ownership. We keep decision metadata, task/call identifiers, hashes, provider request identifiers, policy versions, timestamps and cost records for safety and accounting. Detailed moderation events and closed-call records are removed by scheduled cleanup after 180 days. Compact anti-replay hashes and cumulative budget counters may remain to prevent duplicate processing and spending; they do not contain image bytes or prompt text. Photo, prompt and billing records follow their separate retention rules below. Waffo describes Prompt Sift as stateless without prompt retention after response; that statement does not apply to all other providers or to TuneImage's separate records.

• Cloudflare provides website hosting, database and media storage, image processing and network delivery.
• fal and Google receive the selected image and submitted instruction when you generate an image edit. The current image model is Google's Nano Banana 2.1 through fal. We request restricted, short-lived provider file handling; we do not promise immediate deletion of every provider's logs or copies.
• DeepSeek performs content checks and, when you request it, optional prompt optimization. fal also provides image safety classification. Waffo checks instruction and draft text through Prompt Sift. The editor identifies these recipients before you submit the requested processing.
• Google supplies account sign-in if you choose that option. Resend receives your email address and authentication email content to deliver sign-in codes and service emails.
• PayPal and Waffo provide separate checkout options for credit-pack purchases. Their hosted checkout pages collect and process payment information under their own privacy terms; TuneImage does not receive or store full card numbers or bank login credentials. For Waffo purchases, Waffo.com Limited acts as merchant of record as identified on checkout. TuneImage receives order and payment-status information needed to provide credits, reconcile the purchase and review billing or refund requests. This can include the order or transaction references, selected pack, price and currency, tax or other amounts included in the verified charge, payment and refund totals and status. The relevant payment provider processes payment transactions and any approved refund to the original method. The order page displays status verified against the relevant provider; returning to or closing a checkout page alone does not establish that payment completed.
• Our published support address uses Gmail. Messages and attachments you send there are processed through Google's email service.

Providers may process information in countries other than your own. We cannot promise that all processing occurs in one country. Do not upload information you are not comfortable sharing with the providers needed for your requested feature. Contact us for information about applicable transfer safeguards; do not infer a certification or a particular contractual safeguard from this policy alone.

Retention and deletion

• Uploads expire after 24 hours and are removed from TuneImage storage by scheduled cleanup.
• Generated results expire after 7 days. Download results you want to keep before then. Completed or failed edit prompts are also cleared after their retention period.
• Deleting a completed edit in your history immediately removes its stored prompt and makes the result unavailable. This does not reverse a completed edit or erase its separate credit transaction.
• Account, order, credit, anti-abuse, refund-request and support records are separate from photos. They may need to remain for account operation, payment reconciliation, fraud prevention, disputes or legal obligations. We do not represent that these records are erased when a photo expires. You may request access or deletion; we will assess the request and explain information we must retain under applicable law.
• Provider copies follow the relevant provider's policies and agreements. Deleting a file from TuneImage does not guarantee immediate deletion from every provider system.

Cookies and optional usage counts

Essential cookies keep you signed in, protect requests and maintain your guest trial. The signed guest-trial cookie can last up to one year. Clearing it can remove access to guest results and does not create a new entitlement to repeated free trials.

We do not include advertising trackers or session-recording software in TuneImage. Optional aggregate reports do not include your photos, prompt text or email address.

Your choices and rights

You can choose not to use optional attribution, delete completed edits from history and contact us about account information. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of certain data, withdraw consent, or complain to a relevant privacy authority. We may need proportionate information to verify that a request concerns your account. Do not send a password, sign-in code or full payment-card details.

We use HTTPS, access controls and private media routes, but no online service is risk-free. Where legally required, we will notify affected people or authorities about a qualifying data-security incident. This is not a promise of a fixed worldwide notification period or a security certification.

We will show the updated date when this policy changes and provide additional notice where required. A material change in processors or purposes must be disclosed before new processing begins; continued use is not a substitute for consent where consent is required.