Privacy Policy

Introduction

Hokusa.app (“the Service”) is a Japanese-friendly AI image generation and creative studio. This Privacy Policy explains how the operator of the Service (“we,” “us”) collects, uses, stores, and discloses your personal information.

By using the Service, you agree to the practices described in this policy.

Information We Collect

We may collect the following categories of information:

• Account information: Name, email address, profile image, and user identifiers obtained through social sign-in (such as Google) or other authentication methods.
• Usage information: Generation requests, credit usage, plan and billing status, settings, error logs, and support inquiries.
• Content: Prompts, reference images you upload, and outputs such as images, video, or audio, along with related metadata.
• Payment information: Transaction IDs, plan type, and billing history processed through payment providers such as Stripe. We do not store full payment card numbers on our servers.
• Device and technical data: IP address, browser type, operating system, language preferences, cookies and similar identifiers, and access timestamps.

How We Use Information

We use collected information to:

• Provide, authenticate, and manage your account and the Service
• Run AI generation features and improve quality and safety
• Process credits, subscriptions, and prevent fraud or abuse
• Provide customer support
• Analyze usage, troubleshoot issues, and monitor security
• Comply with law, enforce our Terms, and protect rights
• Send important service or security notices (and, where permitted, marketing communications)

AI-Generated Content

Prompts and uploads are transmitted to us and to third-party AI or cloud providers to fulfill your requests. Outputs are stored in association with your account for history, re-download, and related features. Do not submit highly sensitive personal data or content that infringes others’ rights.

Sharing With Third Parties

We may share information with:

• Service providers: Hosting, storage (e.g. S3), authentication, payments (Stripe), analytics (e.g. PostHog, Google Analytics when enabled), email delivery, and AI inference providers.
• Legal requirements: When required by law, court order, or to protect rights and safety.
• Business transfers: In connection with a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

We do not sell your personal information.

International Transfers

Some infrastructure and AI processing may occur outside your country. Where required, we use appropriate safeguards such as contractual protections.

Retention

We retain personal information for as long as needed for the purposes above. After account deletion, we delete or anonymize data within a reasonable period, except where law requires longer retention.

Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction of processing, or withdrawal of consent. Contact us via the contact page. We may need to verify your identity before responding.

Security

We use measures such as access controls, HTTPS, and permission management to protect your information. No method of transmission over the Internet is completely secure.

Children

The Service is not directed at anyone under 16 (or the age of majority in your jurisdiction). If we learn we have collected data from a child, we will take steps to delete it.

Changes

We may update this Privacy Policy as our practices or legal requirements change. Material changes will be communicated on the Service. Continued use after updates constitutes acceptance.

Contact Us

Questions about this Privacy Policy: please reach us through our contact page.