Effective October 22, 2026
Privacy Policy
Your photos are yours. Here we explain in plain language what data we process, why, for how long and who we share it with. We follow Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.
1. Controller
UnknownHorizons s.r.o., company ID (IČO) 23276070, with its registered office at Na Folimance 2155/15, 120 00 Praha 2 – Vinohrady, Czech Republic.
Email for all questions about personal data: [email protected]
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Uploaded photos of people and animals | Creating previews and portraits | Performance of a contract (Art. 6(1)(b) GDPR) |
| Created portraits | Making them available for download, regeneration | Performance of a contract |
| Email (entered during payment in Stripe) | Locating a paid order by our support team | Performance of a contract |
| Payment details (amount, date, transaction ID) | Accounting and taxes | Legal obligation (Art. 6(1)(c) GDPR) |
| IP address, technical logs | Protection against abuse of the free previews, security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Meta Pixel cookies (_fbp, _fbc) | Measuring and targeting ads on Facebook and Instagram | Consent (Art. 6(1)(a) GDPR) |
We never see your payment card – the payment is processed directly by Stripe. We do not use analytics cookies. We only store Meta Pixel marketing cookies with your consent, which you can withdraw at any time. In your browser, we also store only your style selection in progress and the links to your orders (localStorage), so they don’t get lost. You can find details in our cookie policy.
3. How we handle your photos
- We use your photos solely to create your portraits. We do not sell them, publish them or use them as samples.
- We do not use your photos or portraits to train artificial intelligence models. We do not process photos for the purpose of uniquely identifying people (this is not biometric processing within the meaning of Art. 9 GDPR).
- We automatically delete uploaded photos 30 days after upload.
- We delete previews of unpaid orders after 30 days, and purchased portraits 30 days after payment. We will delete them sooner at your request.
- Only someone who knows the unique link to the order can access the photos and portraits.
4. Who we share data with
We use the following processors, with whom we have concluded data processing agreements:
| Replicate, Inc. (USA) | Running the AI model that creates portraits from photos |
| OpenAI, L.L.C. (USA) | Provider of the image generation model (via Replicate) |
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing |
| Neon, Inc. – servers in Frankfurt (EU) | Database and storage of photos and portraits |
| DigitalOcean, LLC | Website hosting |
| Meta Platforms Ireland Ltd. (Ireland) | Ad measurement (Meta Pixel), only with your consent |
Transfers to the USA are based on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
5. Your rights
- access to your data and a copy of it,
- correction of inaccurate data,
- erasure (the “right to be forgotten”) – just send an email with a link to your order,
- restriction of processing and data portability,
- objection to processing based on legitimate interest,
- withdrawal of your consent to marketing cookies at any time in our cookie policy,
- lodging a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz, or with the data protection supervisory authority in the country of your habitual residence.
We respond to requests without undue delay, and no later than within one month.
6. Children
The service is not intended for persons under 16. Photos of children may only be uploaded by a parent or legal guardian, or by a person with their consent.
7. Changes
We may update this policy. You can always find the current version on this page.