DripLit Privacy Policy

Last Updated: April 13, 2025

Welcome to DripLit ("App"), operated by Mighty Creamery, LLC ("Company," "we," "us," or "our"). This Privacy Policy explains how we handle your information when you use our personalized AI styling and image generation platform (the "Service"). This Policy is part of our Terms of Service.

By using DripLit, you agree to this Privacy Policy. If you disagree, do not use the Service.

1. Introduction & Scope

This Policy applies to all registered users of DripLit. It covers our collection, use, and disclosure of "Personal Data" – information that identifies or could reasonably identify you. This includes data you provide, data generated by your use, and data collected automatically.

This Policy does not cover third-party services, even if linked from DripLit. Review their policies independently.

For privacy questions, contact us at: privacy@driplit.com.

2. Age Restriction – Adults Only

DripLit is strictly for individuals 18 years or older. We do not knowingly collect data from minors. Access or use by anyone under 18 is prohibited.

If we learn we have collected data from someone under 18, we will delete it promptly. Report suspected underage users to privacy@driplit.com.

While the App might generate images depicting younger-looking individuals (e.g., stylistic transformations), these must not depict actual minors known to you. Such generated images are private by default and cannot be shared publicly through the App's gallery. We reserve the right to remove flagged content.

3. Information We Collect

We collect only the information necessary to provide, maintain, and secure the Service:

• Account Information: Your email address and authentication credentials (e.g., password hash or third-party login token).
• Subscription & Payment Information: We use Apple's In-App Purchase system for subscriptions and credit purchases. We receive confirmation of your subscription status and purchase history from Apple but do not directly collect or store your credit card details. Apple's privacy policy governs their collection of your payment data.
• Uploaded Content ("Uploads"): Photographs and images you voluntarily upload, primarily for training your private AI model and generating requested AI images. (See Section 9 for specific retention details of training images).
• Generated Content ("Outputs"): AI-generated images and associated textual suggestions created through your use of the Service, stored within your account.
• Usage Data: Technical information like IP address, device type, operating system, browser type, access times, features used, and general activity logs for operational and security purposes.
• Communications: Any messages you send directly to us (e.g., support emails).
• Cookies: Essential session cookies for login management. We do not use tracking cookies for advertising. You can manage cookies via your browser, but disabling essential ones may impair functionality.

4. How We Use Your Information

We use your data for these specific purposes:

• Provide the Service: Create/manage accounts, process Uploads to train your private AI model (referred to as a "Private AI Model" or "LoRA"), generate Outputs, manage subscriptions via Apple, enable gallery sharing (if you opt-in).
  • **Image Processing Note:** Processing your Uploads for model training includes automated analysis, such as detecting the presence and location of faces, **to validate that images are suitable for training (e.g., contain a single clear face) and to help optimize the training process.** This is done solely to enable the core functionality of creating your personalized model.
• Maintain & Secure: Monitor usage, prevent fraud/abuse, troubleshoot, perform backups, enforce Terms.
• Communicate: Send essential service notices (payments, policy updates), respond to support requests. We only send marketing if you opt-in (with opt-out available).
• Comply with Law: Respond to lawful requests, subpoenas, court orders.
• Limited Improvement: Analyze anonymized or aggregated Usage Data for general trends to improve performance. Your specific Uploads (beyond the brief processing period described in Section 9) or identifiable Outputs are never used for general AI model training unrelated to providing the service directly to you without separate, explicit consent.

Legal Bases (GDPR regions): We rely on Contract (core service), Legitimate Interests (security, basic analytics, training validation), Consent (optional sharing, marketing), and Legal Obligation.

5. AI Training, Content Ownership & Licenses

• Your Uploads: You retain ownership of the photographs you upload. You grant us a limited, non-exclusive license solely to use, process (including the analysis described in Section 4), and temporarily store your Uploads to train your unique, private AI model and generate Outputs you request via the Service. This license for the original training images ends shortly after the model is successfully created (See Section 9).
• Your Outputs: You own the Outputs you generate, subject to our Terms and any underlying AI model rights. We store them in your account unless deleted.
• Private AI Models (LoRAs): The personalized models trained on your Uploads are part of the Service infrastructure provided to you. They are specific to your account and are not shared. You do not obtain ownership rights to the underlying model files themselves.
• Experimental Nature: AI generation is experimental. Output quality varies and is not guaranteed. Use at your own risk.

6. How We Share Your Information

We do not sell your Personal Data. We share it only when necessary, with parties contractually obligated to protect it:

• With Service Providers: We engage third parties ("Service Providers") for essential functions. We only share the data needed for their specific task. Categories include:
  • AI Processing Providers: For model training and image/text generation based on your inputs.
  • Cloud Infrastructure & Storage Providers: For hosting, database management, and storing your account data, *generated Outputs*, *trained models*, and managing backend functions (Note: original training Uploads are handled per Section 9).
  • Authentication Service Providers: For secure login verification.
  • Payment Processing: Handled via Apple's In-App Purchase system; we share necessary identifiers with Apple to manage subscriptions.
  • Analytics Providers: For analyzing aggregated, non-identifiable usage data.
  • Content Moderation Providers: We may use automated tools from third-party providers to help filter Uploads or Outputs against our content guidelines.
• For Legal Reasons: If required by law, subpoena, court order, or to protect rights, safety, or investigate fraud/abuse.
• In a Business Transfer: If Mighty Creamery, LLC is involved in a merger, acquisition, or asset sale, data may be transferred under confidentiality agreements. We'll notify you of significant changes in ownership or use.
• Aggregated/De-identified Data: Non-personal data shared for statistics or reporting.

7. Third-Party Services & Processors

We rely on third-party Service Providers (Data Processors) as described above. They act on our instructions but are also governed by their own terms and privacy policies. While we select reputable providers, we are not responsible for their independent actions, errors, or omissions outside the scope of our direct agreements with them.

8. Data Retention and Deletion

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

• Uploaded Images for Model Training: Original image files you upload *specifically for the purpose of training your Private AI Model* are **deleted from our active systems shortly after the model has been successfully trained and validated.** We do not retain these original training images beyond this necessary processing period (subject to backup cycles described below).
• Default Retention (Other Data): Unless deleted by you or subject to the inactive account policy below, your **Account Information, Generated Outputs, and associated Private AI Model data** are generally retained as long as your DripLit account remains active to allow you continued access and use of the Service.
• Active Deletion by You:
  • You can delete individual **Outputs** at any time using the "delete" function within the App. This action initiates removal from our primary active systems. (Note: Original training Uploads are already deleted per the policy above).
  • You can delete your entire account using the "delete account" function in your profile settings. This triggers an automated process to delete your Account Information, all associated Outputs, and your Private AI Model data from our active systems.
• Deletion Timing & Backups: We strive to process deletion requests from our active databases promptly. Please note that residual copies of data (including potentially the short-lived training images before their scheduled deletion, or other data before user-initiated deletion) **may persist briefly in backups (typically no more than 90 days)** for disaster recovery purposes. Backups are isolated and are automatically overwritten or deleted on a regular schedule; they are not accessed for operational purposes.
• Inactive Account Deletion: We reserve the right, at our discretion, to delete your account and all associated retained data (Account Information, Outputs, Private AI Models) if your account has **no active paid subscription for a continuous period of six (6) months or more.** We are not obligated to provide advance notice before such deletion unless required by applicable law.
• Other Data: Anonymized or aggregated Usage Data may be retained indefinitely for analytical purposes. Records of communications with you (e.g., support emails) may be kept for business record-keeping or legal compliance.

9. Your Privacy Rights

Depending on your location (e.g., GDPR, CCPA), you may have rights regarding your Personal Data, subject to verification and legal limits:

• Access, Correct, or Delete your retained data (e.g., Account Info, Outputs, Model).
• Restrict or Object to certain processing.
• Export your retained data (Data Portability).
• Withdraw Consent (for optional features like public sharing or marketing).
• Lodge a Complaint with your local data protection authority.

To exercise rights regarding the data we retain, contact privacy@driplit.com. We'll respond within legal timeframes (usually 30-45 days).

10. Data Security

We use reasonable technical and organizational measures (like encryption, access controls) to protect your data, relying also on our Service Providers' security. However, no system is 100% secure. We cannot guarantee absolute security. Keep your account credentials confidential.

11. International Data Transfers

Your information will be processed and stored in the United States and potentially other countries where our Service Providers operate. Data protection laws may differ from your jurisdiction. By using DripLit, you consent to these transfers. For GDPR-relevant transfers, we rely on mechanisms like Standard Contractual Clauses with processors where applicable, or your consent.

12. Public Gallery and Sharing

Your Uploads (during their brief existence) and Outputs are private by default. You must explicitly opt-in via the App to share specific Outputs in the public gallery. You can revoke sharing permission, removing the Output from future public display (subject to cache). Remember, public content can be copied by others.

13. AI Output Disclaimer

AI Outputs are experimental and provided "as is." We don't guarantee accuracy, quality, safety, or appropriateness. Use at your own risk.

14. Dispute Resolution (Binding Arbitration)

PLEASE READ CAREFULLY – THIS AFFECTS YOUR RIGHTS.

You and Mighty Creamery, LLC agree to resolve any Disputes arising from this Policy or the Service through binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules (and Consumer Procedures, if applicable), except for qualifying small claims court actions or injunctive relief for intellectual property infringement.

Arbitration will occur in Carson City, Nevada, or remotely if agreed. The arbitrator's decision is final. NO CLASS ACTIONS: Claims must be brought individually. Claims are barred if not filed within one (1) year after arising.

Opt-Out: You can reject arbitration by emailing legal@driplit.com within 30 days of first accepting this Policy, stating your name, address, account email, and clear intent to opt out. Opting out doesn't affect other terms.

15. Changes to This Policy

We may update this Policy. For material changes, we'll notify you via email or in-app notice at least 14 days before they take effect (unless legally required sooner). Continued use after the effective date means acceptance. Check the "Last Updated" date.

16. Contact Information

Mighty Creamery, LLC
Attn: Privacy
2483 Simons Ct
Carson City, NV 89703
USA
Email: privacy@driplit.com

For GDPR purposes, Mighty Creamery, LLC is the data controller.