Bimbofy.Me (“we”, “us”, or “our”) is operated by Bimbofy-Me LLC. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and application at bimbofyme.app (“the Service”). By using the Service, you agree to the practices described in this policy.
1. Information We Collect
Account Information
When you create an account, we collect your email address, chosen username, and date of birth (used solely to verify you are 18 years of age or older). We do not collect your legal name.
Uploaded Images
To use our image transformation feature, you upload a photograph. This image is transmitted securely to xAI's Grok Imagine API for processing and then stored in our cloud storage (Supabase Storage) so you can access your generated results. Uploaded source images and generated outputs are associated with your account.
Payment Information
Credit card and billing details are processed exclusively by Stripe, Inc. We do not store or have access to your full card number, CVV, or billing address. We retain only a Stripe customer ID and subscription status.
Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, generation counts, device type, browser, and approximate geographic region (country/city level via IP address). This data is used for product analytics and is processed through PostHog.
Communications
If you contact our support team, we retain those communications to help resolve your issue and improve our service.
2. How We Use Your Information
- To provide, operate, and improve the Service
- To process image transformations through xAI Grok Imagine
- To manage your account, credits, and subscription
- To send transactional emails (account confirmation, credit alerts) via Resend
- To display your generated images on our public Leaderboard (only if you opt in)
- To detect and prevent fraud, abuse, and policy violations
- To comply with legal obligations
We do not sell your personal data. We do not use your uploaded images or generated outputs to train AI models. Images sent to xAI are subject to xAI's own data handling policies.
3. Image Data & AI Processing
When you submit a photo for transformation, it is sent over an encrypted connection to xAI's Grok Imagine API. xAI processes the image to generate a stylised output. We do not control xAI's internal data handling; we encourage you to review xAI's privacy policy at x.ai/legal/privacy.
Generated images are stored in your account and retained for as long as your account is active. You may delete individual images or your entire account at any time from your Profile or by contacting us at privacy@bimbofyme.app.
By uploading an image you confirm that you are the subject of that image, or that you hold express written consent from the subject. You must not upload images of minors under any circumstances.
4. Third-Party Services
We use the following third-party providers:
5. Cookies & Tracking
We use strictly necessary cookies for authentication (session management via Supabase). We also use PostHog analytics cookies to understand how users navigate the Service. You may disable non-essential cookies in your browser settings; this will not prevent core functionality but may affect analytics collection.
6. Data Retention
We retain your account data and generated images for as long as your account remains active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe transaction records, which are retained for 7 years per financial regulations).
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you
- Correction — Request that inaccurate data be corrected
- Deletion — Request that your data be deleted (“right to be forgotten”)
- Portability — Request your data in a machine-readable format
- Objection — Object to certain processing activities
- Withdraw Consent — Withdraw consent at any time where processing is consent-based
To exercise any of these rights, email us at privacy@bimbofyme.app. We will respond within 30 days.
8. Children's Privacy
The Service is strictly for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will immediately terminate that account and delete all associated data. If you believe a minor has accessed our Service, please contact us immediately at privacy@bimbofyme.app.
9. Data Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.
10. International Transfers
Our infrastructure is primarily located in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. By using the Service, you consent to this transfer. We rely on Standard Contractual Clauses where required by applicable data protection law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email and post the updated policy on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, requests, or concerns, please contact us at: