Privacy Policy
Last updated November 11, 2026
The short version
- We send your photo to our AI providers only to make your GIF. We never use it to train AI.
- Your photo and GIF are deleted after 30 days.
- You can delete them yourself at any time.
- We don’t ask for your child’s name, age or photo.
1. Who this service is for
Living Doodles is for parents and guardians who are 18 or older. Children may not use the service, create an account, or make purchases. We do not create accounts for children, and we do not ask for a child's name, age, or photo.
A drawing can include a child's name or other details written on it. Before you take the photo, please leave the name out of the frame (the upload page shows this reminder). Please upload only photos of drawings, not photos of people. Our automated checks block inappropriate content, but they cannot always tell whether a photo shows a drawing or a person, so please choose your photo with care.
2. Information we collect
| What | Where it comes from | Why we use it |
|---|---|---|
| Photo of the drawing you upload | You | To create your GIF |
| Files we create from it: an illustration, a layout image, a short video, the GIF, and a thumbnail | Our service and our AI provider | To show and let you download your result |
| A device identifier: a random ID stored in a cookie on your browser | Created by us the first time you upload or take another action | To remember which results and credits belong to this browser, without an account |
| Email address | You enter it on the Stripe checkout page, or on our "restore credits" page | To link credits to your purchase, send a receipt (Stripe), and send sign-in codes so you can restore credits on another device |
| Purchase records: pack bought, amount, date, Stripe checkout session ID, billing country | Stripe | To add credits and handle support questions |
| Payment card details | You, directly to Stripe | We never see or store your card number. Stripe processes payments |
| IP address | Your browser | To prevent abuse and limit request rates. We store only a salted, one-way hash of it, not the IP itself |
| Approximate country | Derived from your IP by Cloudflare | To apply country-specific settings (prices, retention) |
| Usage events: upload, GIF finished or failed, download, new version, retry, delete, purchase (pack), credits restored | Our servers | To measure whether the service works and to fix problems |
| Sign-in codes and links for restoring credits | Created by us | The code and link are stored only as hashes (the email address they were sent to is stored as entered); they expire after 15 minutes and work once |
We do not collect your name, address, phone number, or a child's name, age or photo. We do not use advertising cookies or tracking pixels, and we do not show ads.
3. How your photo is processed
When you start a GIF, your photo goes through these steps:
- Content check: an automated check for inappropriate content.
- Illustration: an AI image model redraws the drawing as a simple illustration.
- Layout: we place the illustration on a standard paper background.
- Animation: an AI video model animates the characters for about 3 seconds.
- GIF: we convert the video into a GIF.
Steps 1, 2 and 4 are done by our AI provider fal (see section 4). Steps 3 and 5 run on our own servers at Cloudflare. No person at Living Doodles looks at your photo during normal processing. We may look at a specific result only if you contact us about it, or if we receive a report that it breaks our Terms.
4. Who we share information with
We share information only with the service providers below, only for the purposes listed, and we do not sell or "share" (for cross-context behavioral advertising) your personal information.
| Provider | What they do for us | What they receive |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosting, database, file storage, image layout and GIF conversion, bot protection (Turnstile), sending sign-in emails | Your photo and all generated files, device ID, email address, IP address (in transit), hashed IP |
| fal (Features & Labels, Inc.) (USA) | AI content check, illustration and animation | Your photo, the illustration and layout image, and the video |
| Stripe, Inc. (USA) | Payments and receipts | Email address, payment details (entered directly with Stripe), purchase amount |
| PostHog, Inc. (USA, US data region) | Product analytics and error monitoring | Device ID and usage events. No photos, no email addresses, no IP addresses |
The AI models fal runs for us include an illustration model made by Google ("Nano Banana 2") and a video model based on MiniMax H3. fal processes your photo to create the illustration and the animation. How fal and the model providers it works with handle this data is described in fal's privacy policy.
We may also disclose information if required by law, to protect the safety of a child or others, or as part of a sale or reorganization of the business (in which case this policy will continue to apply to your information).
What we ask of our AI provider
- Our requests to fal ask it not to store the content of the request, and set the files involved to expire after 1 hour. After we copy the result to our own storage, we no longer use fal's copy.
- We do not use your photos or GIFs to train AI models.
5. How long we keep information
| Information | How long |
|---|---|
| Your photo and all generated files (illustration, layout, video, GIF, thumbnail) | 30 days, then automatically deleted. Or sooner, if you delete them (section 6) |
| Copies cached in your own browser | Your browser may keep a copy for up to about 1 hour, on your device only |
| Files sent to fal | We ask fal not to store request content and to delete the files after 1 hour (section 4) |
| Record of each GIF without images (timings, cost, success or failure) | Kept for service statistics until you ask us to delete it. It contains no images, but it is linked to the device ID, the hashed IP and, for paid GIFs, your purchase record |
| Device record (device ID, hashed IP, country, language) | Until you ask us to delete it |
| Device ID cookie | Up to 400 days in your browser, or until you clear cookies |
| Email address and purchase records | As long as you may use your credits (credits never expire), and as long as we need them for accounting, tax and legal obligations. You can ask us to delete them (section 6) |
| Sign-in codes and links | Expire after 15 minutes and work once. The record of the request (including the email address) is kept until you ask us to delete it |
| Rate-limit records (hashed IP or device ID) | Deleted after 2 days |
| Database backups | Our database provider keeps point-in-time backups for up to 30 days, so deleted records may remain in backups for up to 30 days before they are gone |
| Usage events in PostHog | PostHog's standard retention period for our plan (currently 1 year on PostHog's free plan and 2 years on its paid plans) |
6. How to delete your information
- Delete a GIF and its photo: open the result and tap Delete. We immediately delete the photo and all files created from it, and their links stop working.
- Everything else (your email address, purchase records, device data): email support@livingdoodles.com from the email address you used to pay. We will delete what we are not required to keep for legal or accounting reasons. Note that if we delete your email and purchase records, any unused credits can no longer be restored.
- Clear the device ID: clear cookies for livingdoodles.com in your browser. Results made on that browser can then no longer be opened from it.
Please don't reply to automated emails (such as sign-in codes); write to support@livingdoodles.com instead.
To report content that you believe should not be on our service, email support@livingdoodles.com with the link. We will review it and remove it if it breaks our Terms.
7. Children's privacy
The service is for parents and guardians, not for children. Children should not use it. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email support@livingdoodles.com and we will delete it.
8. Where information is stored
Our database and file storage (at Cloudflare) are set to North America. This is a location preference, not a guarantee. Our providers, including fal, may process data in other countries.
9. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or get a copy of your personal information, and to opt out of its sale or sharing (we do not sell or share it). To make a request, email support@livingdoodles.com. We will verify the request by asking you to confirm from the email address you used to pay. We will not treat you differently for exercising your rights.
10. Security
We use HTTPS everywhere, sign the device cookie, store only hashes of IP addresses and sign-in codes, give every result an unguessable link, and limit who can open the result page to the browser that made it. The links to the image and GIF files themselves are unguessable but are not tied to your browser: anyone you give the link to can open the file until it is deleted or expires. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as required by law.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant, we will give notice on the website before it takes effect.
12. Contact
CHONGSEN HONGKONG LIMITED (Hong Kong) Email: support@livingdoodles.com