Privacy Policy
Last updated: 7 October 2026
1. Scope
This policy explains what personal data Hulab (hulab.app) collects, why, and what happens to it. It applies to everyone who visits the site or uses the Service.
The Service is operated by an individual sole proprietor. Contact for all privacy matters: support@hulab.app.
2. What We Collect
Account data. Email address and a hashed password. We never store your password in readable form.
Uploaded content. Photos, videos and audio you upload as references, and the text prompts you write. This may include images of people.
Generated content. The images and videos the Service produces for you, together with the prompt, model, settings and seed used to create them.
Payment data. The amount, currency, blockchain transaction identifier and status of each credit purchase, as reported by our payment processor. We do not see or store your wallet's private keys. We do not collect card numbers; we do not accept card payments.
Usage and technical data. Credit balance and transaction history, timestamps of generations, IP address, browser type and basic device information, and error logs. We do not use third-party analytics or advertising trackers.
We do not knowingly collect data from anyone under 18.
3. How We Use It
We use your data only to run the Service:
- To create and secure your account and let you log in.
- To send your uploads and prompts to AI providers and return the results to you.
- To keep your generation history and assets available in your account.
- To process credit purchases and maintain your balance.
- To detect abuse, enforce the Terms of Service and keep the Service secure.
- To answer your support requests.
We do not use your uploaded or generated content to train AI models, and we do not sell personal data. We do not send marketing emails.
4. Who We Share It With
AI providers. Your uploads and prompts are sent to third-party AI services to perform the generation. These providers process the data under their own policies and may apply their own content checks. We send only what the generation needs.
Payment processor. Credit purchases are handled by a third-party cryptocurrency payment processor, which sees the transaction details needed to confirm payment.
Hosting and storage. The Service runs on Cloudflare infrastructure; your data is stored on their servers.
Legal requests. We may disclose data where required by law or to protect the rights, safety or property of users or the operator.
We do not share your data with anyone else.
5. Storage and Retention
Uploaded and generated content stays in your account until you delete it or close the account. You can delete individual items at any time.
When you close your account, we delete your content and personal data within 30 days. Payment records are kept for as long as the law requires, typically up to 5 years, and are then deleted.
Technical logs are kept for up to 90 days.
Data is stored on Cloudflare servers, which may be located outside your country. Transfers are protected by Cloudflare's standard contractual safeguards.
6. Your Rights, Cookies and Changes
You can ask us to show you the data we hold about you, correct it, export it, or delete it. Write to support@hulab.app; we respond within 30 days. You can delete your content and close your account yourself from Settings.
If you are in the EU, UK or another region with data-protection law, you also have the right to object to processing and to complain to your local supervisory authority.
Cookies. We use one strictly necessary cookie to keep you logged in. We do not use tracking or advertising cookies.
Changes. We may update this policy. Material changes will be announced in the Service at least 7 days before they take effect.
Questions: support@hulab.app.