This Privacy Policy explains how GwiGwi collects, uses, stores, shares, and protects information when you use our AI generation tools, competitions, galleries, profiles, credits, and related services (collectively, the "Service"). It should be read together with our Terms of Service.
The data controller responsible for your information is Fiveupclub Inc, established in the State of Wyoming, United States, at 30 N Gould St Ste R, Sheridan, WY 82801. You can reach us using the details in the Contact section. If we are required to appoint a representative or data-protection officer for your region, their details will be provided on request.
We do not ask for, and you should not submit, special-category or sensitive personal data (such as government identifiers, payment-card numbers, health, biometric, or precise-location data) or personal data about other people that you are not authorized to share. Any images you upload may contain personal data; you are responsible for having the rights and consents to upload them.
Your prompt is not public by default, and there is currently no public prompt-sharing feature. Public pages and public API payloads are designed not to show raw prompts unless we add an explicit sharing control and you opt in.
Prompts may still be stored in GwiGwi systems, moderation logs, and generation records so we can provide the Service, debug failures, support account recovery, enforce policies, and investigate abuse. Authorized service operators and third-party processors may access prompt data only as needed for these purposes.
Normal image and video generation sends your prompt (and any uploaded source image) to the selected generation provider. DeepSeek is used for manual prompt optimization, title generation, and moderation support where configured; normal creative image/video generation does not automatically run the prompt through DeepSeek optimization.
We share information with service providers only to operate the feature you request, process payment, secure the Service, or comply with legal obligations. Each provider processes data under its own terms and privacy policy, and operates in the region noted below.
We may also disclose information if required by law or valid legal process, to enforce our Terms, to protect rights, property, and the safety of users or the public (including child-safety reporting), to investigate fraud or abuse, or as part of a merger, acquisition, financing, reorganization, or sale of assets. We may share aggregated or de-identified information that does not reasonably identify you.
GwiGwi and its providers process data in countries other than where you live, and those countries may have different or weaker data-protection laws than yours. In particular, when you generate images or videos or use prompt optimization or moderation, your prompt and any image you upload are transmitted to and processed by providers operating in China (Volcengine/Seedream, Kling, DeepSeek) and in the United States (OpenAI for moderation). China and the United States have not received an "adequacy" decision from the European Commission, and your data may become subject to access by authorities in those countries under their local laws.
By choosing to use these AI features, you understand and, where consent is the applicable basis, consent to this transfer and processing. Where required, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms offered by our providers) and seek to limit the data sent to what the feature needs. If you do not want your prompts or images processed in these countries, do not use the AI generation, optimization, or moderation features.
If you purchase credits, Lemon Squeezy acts as merchant of record and handles payment-card or wallet details. GwiGwi does not store full card numbers or banking details. We receive limited order data such as order ID, account identifier, product, amount, status, and refund status so we can credit your account, render receipts, and reconcile billing.
We use automated systems and third-party tools, together with human review, to detect and act on content that may violate our Terms or the law (for example, sexual content, content involving minors, or other prohibited content). These systems may automatically block a generation, hide content, or restrict an account. Where a decision significantly affects you, you may be able to request human review or appeal through in-product flows or by contacting us. Certain safety actions, such as those relating to child-safety, may not be reversible.
Where privacy law requires a legal basis, we rely on one or more of the following, depending on the activity: performance of our contract with you (to provide accounts, generation, competitions, and credits); our legitimate interests (to secure, debug, improve, and promote the Service and prevent abuse) balanced against your rights; your consent where required (for example, for certain transfers or any future optional features); and compliance with our legal obligations (such as tax, accounting, and safety reporting).
We use cookies and localStorage for authentication, anonymous sessions, language preference, remembered local UI state, and generation status. Blocking cookies may prevent login, anonymous sessions, and some features from working. We do not currently use third-party advertising or tracking cookies.
Some browsers offer Do Not Track or Global Privacy Control signals. The industry has not adopted a single DNT standard. Because we do not sell personal information or use third-party advertising cookies, those signals do not currently change how the Service operates.
We keep information for as long as needed to provide the Service, maintain your account history, operate competitions, preserve credits, resolve disputes, investigate abuse, satisfy provider or legal obligations, and maintain security. Retention periods vary by data type.
We use reasonable technical and organizational measures designed to protect information, including provider authentication controls, server-side API keys, access controls, and storage restrictions. No internet service is perfectly secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. If we become aware of a security incident affecting your personal data, we will notify you and the relevant authorities where required by law.
The Service is intended only for adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal information to us, contact us so we can review and delete it. Separately, generating, uploading, or requesting any sexual or exploitative content involving a minor is strictly prohibited and is addressed in our Terms.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and rights relating to automated decision-making. You may also have the right to withdraw consent, opt out of certain processing, appeal a denied request, or lodge a complaint with a local data-protection authority.
You can update profile data and delete your account in Settings. To make another request, contact us using the details below. We may need to verify your identity before completing certain requests, and some data may be retained where required for security, fraud prevention, billing, legal compliance, safety, or dispute resolution.
For users in the EEA, UK, or Switzerland, the legal bases above apply, you have the GDPR-style rights described above, and you may contact your supervisory authority. International transfers, including to China and the United States, are described in the International Transfers section. For users in California and other US states with privacy laws, we do not sell personal information and do not share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you; you may exercise applicable rights by contacting us.
The Service may link to third-party websites, social platforms, AI providers, payment pages, or community channels. Their practices are governed by their own policies, not this Privacy Policy.
You can permanently delete your account and associated data from Settings > Delete Account. Deletion is irreversible. Clearing browser cookies only ends your local session; it does not delete server-side data. Use the in-app deletion flow for account removal.
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Material changes may also be announced in the Service where practical. Your continued use of the Service after an update takes effect means you acknowledge the updated Policy.
For privacy-related questions, data-subject requests (access, erasure, portability, objection), or to reach the data controller, contact us:
We aim to respond to privacy-related enquiries within 30 days. If you are located in the EEA or UK and believe your rights have not been addressed, you have the right to lodge a complaint with your local supervisory authority.