Introduction

Banano ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

• Account information: an anonymous device-bound identifier for guest mode, or your email address and basic profile info if you sign in with email or a supported social provider
• Reference photos: selfies or other photos you upload to use a pack or custom prompt
• Generated images: the images Banano creates from your prompts and reference photos
• Prompts and pack selections: the text prompts and curated packs you choose
• Purchase and credit history: records of credit balances, purchases, and consumption
• App settings: your preferences within the app (e.g. auto-save to photo library)
• Usage analytics: anonymous diagnostic and usage data used to improve the service

How We Use Your Information

• To generate, store, and deliver the images you create
• To send your reference photos and prompts to AI providers solely for the purpose of producing your requested image
• To track credits and process in-app purchases
• To improve performance, fix bugs, and analyze aggregate usage
• To comply with legal obligations

Data Storage

Banano runs on the following infrastructure:

• Reference photos and generated images are stored in Cloudflare R2 object storage
• Account data, prompts, and credit history are stored in Turso (a managed LibSQL database)
• All data is encrypted in transit (TLS) and at rest
• Access is restricted to authenticated requests tied to your account

Data Sharing & Third-Party Processors

We do not sell, trade, or rent your personal information. We share limited data only with the service providers required to run Banano:

• Cloudflare — image and reference-photo storage (R2)
• Turso — managed database for account and metadata storage
• RevenueCat — in-app purchase and subscription management
• Google (Gemini API) — AI image generation for most packs and custom prompts
• OpenAI — AI image generation for select premium packs (e.g. Mona Lisa Portrait, Pathetic Doodle)

When you run a pack or custom prompt, the relevant prompt and reference photo are sent to the AI provider for that request. Per their published API policies, these providers do not retain your inputs or use them to train their models. We may also share data when required by law or with your explicit consent.

Data Retention

• Generated images and reference photos are retained as part of your gallery until you delete them in-app or delete your account
• Account information and credit history are retained for as long as your account is active
• When you delete your account, we delete your account data and remove your stored images and reference photos from our infrastructure within a reasonable period
• We may retain limited records (e.g. anonymized purchase logs) where required for tax, accounting, or legal compliance

International Data Transfers

Banano is operated from the United States and our service providers may process data in the United States and other countries. If you use Banano from the European Economic Area, the United Kingdom, Switzerland, Brazil, or another jurisdiction with data-protection laws, your information will be transferred to and processed in countries that may have different data-protection rules than your own. Where required, we rely on appropriate transfer mechanisms (such as the Standard Contractual Clauses) with our processors.

Your Rights

Regardless of where you live, you can:

• Access, export, or update the information associated with your account
• Delete individual images, reference photos, or your entire account from app settings
• Opt out of optional analytics collection
• Contact us with any privacy concern

If you are in the EU, UK, EEA, Switzerland, or another jurisdiction with comparable laws (e.g. Brazil's LGPD) you also have the right to:

• Request rectification of inaccurate information
• Request restriction of, or object to, certain processing
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data-protection supervisory authority

Our legal bases for processing in those jurisdictions are: performance of our contract with you (to provide the service you requested), our legitimate interests (improving and securing the app), your consent (where applicable, e.g. optional analytics), and compliance with legal obligations.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, request deletion, correct inaccurate information, and not be discriminated against for exercising your rights. We do not sell or "share" your personal information as those terms are defined under California law.

To exercise any of these rights, contact us at the email below. We will respond within the timeframes required by applicable law.

Children's Privacy

Banano is not directed at children. We do not knowingly collect personal information from children under 13 (or, in the EU/UK/EEA, the age of digital consent in your country, which may be up to 16). If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at: