Privacy Policy

Last updated: 21 July 2026

This notice explains what personal data UFOlee ("we", the data fiduciary) collects, why, how long we keep it, and the rights you have over it. By creating an account you consent to the processing described here.

1. Data we collect & why

• Email & hashed password — to create and secure your account and sign you in. Purpose: authentication. Legal basis: performance of our service to you.
• Subscription status & expiry — to give paid users access. Payments are processed by Razorpay; we receive only a payment reference and status, never your full card details.
• Free-prompt usage count — to enforce the free tier.

2. Data we do NOT collect

• Your screenshots and AI prompts go directly from your device to the AI service through your own login. We do not receive, store, or have access to them.
• We do not log your prompts or the AI's answers.
• We do not sell your data or share it with advertisers.

3. Processors we use

We rely on Supabase (account database & authentication) and Razorpay (payment processing). Each processes data on our behalf under its own security and privacy commitments. Your chosen AI provider is accessed with your own login and governed by its own policy.

4. Retention

We keep your account data for as long as your account exists. Payment records may be retained longer where law requires (e.g. tax and accounting). When you delete your account, we erase your personal data except records we are legally required to keep.

5. Your rights

You may: access the personal data we hold about you; correct it; delete your account and data; and withdraw consent (which ends processing and closes your account). To exercise any right, use the grievance channel below.

6. Security

Passwords are stored hashed, data is transmitted over encrypted connections, and access is limited to what's needed to run the service.

7. Grievances

For any privacy request or complaint, use the channel on our Contact page. We will acknowledge and address grievances within the timelines required by applicable law.

8. Cookies

Only the storage needed to keep you signed in. No advertising or third-party tracking cookies.

9. Changes

We'll post updates here with a new date.