Privacy Policy
Last updated September 4, 2026
Easy Photo Passport turns a photo you upload into a passport-style photo. Your photo is personal data, so this policy explains exactly what we collect, why, where it goes, and how to get it deleted.
Who we are
Easy Photo Passport ("we", "us") operates easyphotopassport.com. We are the data controller for the personal data described here. You can reach us at support@easyphotopassport.com.
What we collect
- Photos you upload and the passport photos we generate from them. Uploaded and generated images are stored so you can download them again and so we can check output quality when a result looks wrong.
- Account details when you sign in with Google: your name, email address and Google account ID. We never see your Google password.
- Purchase records: which plan you bought, when, and the payment reference. Card details are handled entirely by our payment provider and never touch our servers.
- Feedback you choose to send through the feedback form.
- Usage data collected by Google Analytics and Google Ads tags: pages viewed, approximate location, device and browser type, and events such as starting a generation or a checkout.
How your photo is processed
To generate a passport photo, your uploaded image is sent to Google's Gemini image model through the Google AI API. Google processes the image to produce the result and does not use API inputs to train its models. The output is returned to us and shown to you as a watermarked preview.
We do not sell your photos, use them for advertising, or publish them anywhere. Photos are only ever visible to you and, for quality review, to our own team.
Where data is stored
Images, account data and purchase records are stored in Supabase (database and file storage). Our web servers are hosted with Hetzner in the European Union. Payments are processed by Polar.sh, which acts as the merchant of record. Analytics data is processed by Google.
How long we keep it
- Generated photos linked to your account stay available in My Photos until you ask us to delete them.
- Uploaded originals and generation logs are kept for quality review and are deleted on request.
- Purchase records are kept for as long as tax and accounting law requires.
- Analytics data follows Google Analytics retention settings, currently 14 months.
Cookies
We use a session cookie to keep you signed in, and Google Analytics and Google Ads cookies to measure traffic and conversions. You can block analytics cookies in your browser without affecting the service.
Your rights (GDPR, UK GDPR and CCPA)
Wherever you live, you can ask us to access, correct, export or delete your data, and you can object to or restrict processing. Residents of the EU and UK have these rights under the GDPR; California residents have equivalent rights under the CCPA, and we do not sell personal information. Email support@easyphotopassport.com from the address on your account and we will respond within 30 days. You also have the right to complain to your local data protection authority.
Children
Parents and guardians may use the service to create photos of their children. We do not knowingly create accounts for anyone under 16.
Changes
If we change this policy in a way that affects you, we will update the date at the top of this page. Continued use of the service after a change means you accept the updated policy.
