Privacy Policy

Account details. Your email address and name, and a password (stored only as a one-way hash, never in readable form). If you sign in with Google we receive your Google name, email address and profile picture.

Your content. The prompts you type, the images, video and audio you upload as references, and the images, videos, voices and music generated for you, together with the settings you chose.

Usage and billing records. Which models you used, when, how many credits were spent, refunded or granted, your plan, and the status of your generations.

Technical data. Your IP address, browser and device type, and server logs created when you use the service. A sign-in cookie keeps you signed in (see Cookies).

If you choose "Continue with Google", Meclay asks Google only for the basic sign-in information: your name, email address and profile picture (the "openid", "email" and "profile" permissions). We do not request access to your Gmail, Google Drive, Calendar, Contacts or any other Google service.

• How we use it: only to create and recognise your Meclay account, sign you in, and show your name and picture in the app.
• Who we share it with: nobody, apart from the hosting and database services that store your account on our behalf. Your Google name, email and picture are never sent to AI model providers, never sold, and never used for advertising.
• AI training: we do not use Google user data to develop, improve or train AI or machine-learning models.
• How we protect it: it is transmitted over HTTPS, stored in our access-restricted database, and only our administrators can see account details.
• How long we keep it, and deleting it: we keep it while your account exists. To have it deleted, email [email protected]; you can also remove Meclay's access at any time in your Google Account under Security > Third-party access.

Meclay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To run Meclay: sign you in, create what you ask for, store your results, and track your credits and plan.
• To keep the service safe: check prompts against our content rules, prevent abuse and fraud, and enforce limits.
• To support you and to contact you about your account or important changes.
• To maintain and improve the service, for example by finding errors and slow spots.
• To meet legal obligations.

We do not sell your personal data. We share it only with the services that help us run Meclay:

• AI model providers. To create a result, your prompt and any reference files you attach are sent to the company that runs the chosen model (image, video, voice or music). They process it under their own terms.
• Content moderation. Prompts may be checked by a moderation service before they are sent to a model.
• Storage and hosting. Your uploads and results are stored with our cloud storage provider, and the app and databases run on servers rented from a hosting company.
• Sign-in. If you choose Google sign-in, Google handles that step under its own privacy policy.
• Legal reasons. If the law or a valid legal request requires it, or to protect the rights and safety of users and Meclay.

Your generations are private to your account by default. Something becomes visible to others only if it is shown in a public gallery or shared by you.

We keep your account and content while your account is open, and until you delete a generation. When you ask us to delete your account we remove your personal data, apart from what we must keep for legal, security or accounting reasons. Copies in backups and server logs are removed on their normal schedule.

We use a necessary cookie to keep you signed in and to protect sign-in from forgery, and small items in your browser to remember preferences. We do not use advertising or cross-site tracking cookies.

Traffic between your browser and Meclay is encrypted (HTTPS), passwords are stored hashed, provider access keys are stored encrypted, and access to the admin area is restricted. No system is perfectly secure, so please use a strong, unique password.

You can view and edit your name and password in your profile. You can ask us to give you a copy of your data, correct it, or delete your account and content. Email us at [email protected] and we will reply promptly. Depending on where you live, you may have further rights under local law, and you can ask us about them.

Our servers are in Singapore, and the AI providers we use may process data in other countries. By using Meclay you understand that your data can be transferred to and processed in countries other than your own.

Meclay is not for children under 13, and you must be 18 or older, or the age of majority where you live, to use it (see our Terms). If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. When we do, we change the date at the top, and for significant changes we will tell you in the app or by email.

Questions about privacy: [email protected].