Privacy Policy

1. Who we are

Nano Banana is an independent AI image and video generation service operated at nano-banana.love. We are not affiliated with Google or with the other AI model providers whose models we offer.

Questions about this Policy, or requests to access or delete your data, can be sent to support@nano-banana.love.

2. Information we collect

You can browse the site without an account. Generating images or videos requires signing in. We collect:

• Account information: If you sign in with Google, we receive your Google account name, email address, and profile photo. If you sign in with an email link, we receive your email address.
• Prompts and settings: The text prompts you write and the options you choose, such as model, style, and aspect ratio.
• Uploaded images: Photos and images you upload to edit, restyle, upscale, remove backgrounds or watermarks from, describe, or turn into video.
• Generated content: The images and videos created for you, and a history record of each generation (prompt, model, status, links to the input and output files, and time).
• Credits and payments: Your credit balance, credit transactions, and purchase history. Payments are processed by Waffo Pancake. We receive order details, your email address, and payment status, but never your full card number.
• Anti-abuse signals: When you claim free sign-up credits, we record your IP address, the country it resolves to, and a device identifier calculated in your browser from technical characteristics such as screen and browser settings (also stored in your browser's local storage). We use these only to stop the same person from claiming free credits repeatedly.
• Technical and log data: IP address, browser type, device type, operating system, pages requested, referring page, and timestamps.
• Usage and analytics data: Pages visited, clicks, scrolling, feature use (for example, upload and generation events), and session replays, collected through Google Analytics and Microsoft Clarity.
• Communications: The content of emails you send us, including content reports, copyright complaints, and appeals.

3. How we use information

We use this information to:

• Generate the images and videos you request and show your generation history.
• Run automated safety checks on prompts and uploaded images before generation.
• Create and manage your account, keep you signed in, and send sign-in links and service emails. If we ever send marketing emails, you can unsubscribe at any time.
• Process purchases, add credits, and handle refunds.
• Grant free sign-up credits fairly and prevent fraud, abuse, and repeated free-credit claims.
• Keep the Service working, secure, and protected against abuse.
• Review reports of prohibited content and enforce our Terms of Service. This can mean a person on our team opening the prompts, uploads, and results attached to a reported or flagged account.
• Understand how the Service is used so we can fix problems and improve features.
• Respond when you contact us.

We do not sell your personal information, and we do not use your prompts, uploads, or generated content to train AI models.

4. Uploaded images, faces, and AI processing

To produce a result, we send your prompt, your settings, and any image you upload to the AI provider that runs the model you selected. They receive this data to generate your result and to apply their own safety filters.

Some tools, such as portrait styles, work with photos of people. We use those photos only to create the result you request. We do not use them to identify anyone, build face-recognition templates, or verify identity.

Prompts and uploaded images are checked by an automated content moderation model before generation. Requests flagged as sexual content, sexual content involving minors, or hate are refused. Model providers may also refuse requests under their own content rules.

Only upload images you have the right to use. If you upload a photo of another person, you must have their permission.

5. Storage and retention

• Uploaded images: Sent to our AI processing providers, which keep them only for a limited period according to their own retention schedules. We do not keep a separate permanent copy of your uploads.
• Generated results: We keep a record of each generation in your account, including the prompt and links to the result, so your history stays available. Result links are not published anywhere, but anyone who has a link can open it, so treat a shared result like any other image you share. Files behind those links are hosted by our providers and may expire on their schedules.
• Account, credit, and billing records: Kept while your account is open. After you delete your account, we delete or de-identify your personal data within a reasonable period, except records we must keep for tax, accounting, fraud prevention, or legal reasons.
• Anti-abuse records: IP address, country, and device identifier linked to sign-up credit decisions are kept as long as needed to prevent repeated claims.

You can ask us to delete specific generations or your whole account by emailing support@nano-banana.love. We will do so unless we must keep a limited copy for security, abuse prevention, or the law.

6. When we share information

We share information only with service providers that help us run the Service, or when required by law. We do not sell or rent personal information.

• AI model and API providers: WaveSpeed and Kie.ai run the image and video models we offer, as well as our content moderation, and receive your prompts, settings, and uploaded images to generate results. The underlying models are developed by companies such as Google (Gemini / Nano Banana, Veo), OpenAI (GPT Image), ByteDance (Seedream, Seedance), xAI (Grok), and Kuaishou (Kling).
• Waffo Pancake: Our Merchant of Record, which processes payments, taxes, invoices, and refunds under its own privacy policy.
• Supabase: Our database provider, which stores account, credit, and generation records.
• Google: Sign-in through Google OAuth.
• Resend: Delivery of sign-in links and service emails.
• Google Analytics and Microsoft Clarity: Traffic measurement, usage analytics, and session replays.
• Hosting providers: The companies that host the website and run our servers.
• Authorities and advisers: When required by law, to respond to valid legal requests, to enforce our Terms, or to protect the rights, property, or safety of users, the public, or us. This includes reporting child sexual abuse material to law enforcement and NCMEC.
• Business transfers: A buyer or successor if the Service is involved in a merger, acquisition, or sale of assets.

7. Cookies and similar technologies

• Strictly necessary: When you sign in, we set a session cookie so we can recognize you. Sign-in will not work if you block it.
• Local storage: We store preferences, in-progress tool state, and the anti-abuse device identifier in your browser's local storage.
• Analytics: Google Analytics and Microsoft Clarity use cookies and similar technologies to measure traffic and understand how visitors use the Service, including session replays.

You can block or delete cookies and clear local storage in your browser settings. Blocking analytics cookies does not affect core features. You can also opt out of Google Analytics with Google's browser add-on.

8. Your choices and rights

You can browse without an account, and you can sign out at any time.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data, subject to legal requirements.
• Receive your data in a structured, machine-readable format.
• Object to or restrict certain processing.
• Withdraw consent where we rely on it, such as for marketing emails or analytics cookies.

To exercise these rights, email support@nano-banana.love. We will respond within the time required by applicable law and may ask for information to confirm your identity or find the relevant files. If you live in the EEA or UK, you can also complain to your local data protection authority.

For users in the EEA and UK, our legal bases are: performing our contract with you (providing the Service and processing purchases), our legitimate interests (security, fraud and abuse prevention, and improving the Service), your consent where required, and compliance with legal obligations.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has used the Service or that a photo of a child was uploaded without a parent's permission, email support@nano-banana.love and we will delete it.

10. International processing

We and our providers may process information in the United States and other countries, which may have different data protection laws than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses offered by our providers.

11. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), access controls, and row-level security in our database. We never store full payment card details. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last Updated" date on this page, and we may announce material changes through the Service.

13. Contact

For privacy questions, data requests, or deletion requests, email support@nano-banana.love.