Your photos, created on your terms.

The short version

• You can browse styles without an account. Creating an image needs a free Tathya account.
• Nothing goes to the AI provider until you allow AI processing in the app, and then only the photo, description and style of the creation you start by tapping Create.
• Your photos, descriptions and creations are stored privately in your account. Only you can see them.
• Images are created by Google's Gemini image model, reached through OpenRouter, with settings that only allow endpoints that don't keep your data or use it for training.
• The app has no ads, no tracking and no analytics or crash-reporting SDKs. We do not sell your data.
• You can delete any creation, or your whole account, from inside the app.

Who we are

Imagine by Tathya (app ID com.tathyalabs.tathyaimagine) is published by TathyaLabs ("we", "us") of Gurugram, India. This policy covers the Imagine by Tathya app and these web pages. You can reach us at hello@tathyalabs.com.

Your Tathya account

Imagine uses the shared Tathya account, so the same email and password also work in other Tathya apps. When you register or sign in, the app sends your email address and password to the TathyaLabs API, which passes them to our authentication provider, Supabase. TathyaLabs does not store your password.

With your account we keep your email address, a random user ID, and a record of which Tathya apps you use, with when you first and last signed in to each. Your email is used to sign you in, send account confirmation and password-reset emails, and answer you if you contact us. It is never used for marketing or advertising.

On your phone, the app keeps its sign-in session in the system's secure storage (the iOS Keychain, or encrypted storage on Android).

What is sent when you tap Create

• Your photo, if you add one. You pick it with the system photo picker or take it with the camera, and the app reads only that photo. Before upload, the app resizes it on your phone (to at most 1536 pixels on the long side) and re-encodes it as a JPEG.
• Your description, if you write one (up to 500 characters).
• The style and frame size you chose (square, portrait or story).
• Your confirmation that you own the photo or have permission from everyone in it.

The camera is used only when you choose to take a photo. Permission to add to Photos is used only to save a creation to an "Imagine by Tathya" album when you tap Save. The app does not use your microphone or location.

How your image is created

Your permission comes first. Before your first creation, the app shows what will be sent and who processes it, and asks you to allow AI processing. We record your choice with the version of that disclosure. You can turn AI processing off at any time in the Account tab, and our server checks your permission before every creation and again immediately before anything is sent to the AI provider. If we ever change the AI provider, the app asks for your permission again.

Safety checks. Before anything is sent, our server screens your description with automated rules. Requests for nude, sexual, violent or hateful images, realistic fakes of real people, or copies of a specific studio, brand or artist are blocked. A blocked request is not sent to the AI provider and does not use a daily creation. Our service logs record only the category of the block, never your description.

AI processing. Our server combines the style instructions with your description and sends them, with your photo if you added one, to these recipients:

• OpenRouter, Inc.: the AI gateway that routes the request to the model.
• Google LLC: provides the Gemini image model that creates the picture. Google may also apply its own safety filters.

We send every request with OpenRouter's zero-data-retention and no-data-collection settings, which restrict it to provider endpoints that do not retain request data or use it for training. The recipients may process requests in the United States or other countries where they operate. TathyaLabs does not use your photos, descriptions or creations to train AI models.

What we store, and where

The TathyaLabs API stores your Imagine data with Supabase, our database and storage provider:

• Your creations: the photo you uploaded, the image that was created, your description, the style, frame size, image size, the AI model used, and when it was created. Images are kept in a private storage bucket. The app shows them through links that expire after an hour, and no one else can see them.
• Usage records: for each creation, the feature, AI model, token counts, estimated cost, whether it succeeded, the style, frame size, whether a photo was included, and your plan. These records never contain your photo or description. We use them to run your daily quota, keep costs in check, prevent abuse and fix problems.
• Your daily creation count, which sets your quota. Only today's and yesterday's counts are kept.
• Your AI-processing permission: the disclosure version and when you allowed or turned it off.

On your phone, the app keeps a copy of your History list and images so you can view them offline, plus your theme and onboarding settings. Signing out or deleting your account clears this copy.

Service providers

We do not sell or rent your personal data, and we do not share it for advertising. We use these providers to run Imagine:

• Vercel: hosts the TathyaLabs API and this website.
• Supabase: sign-in, account emails, database and private image storage.
• OpenRouter and Google: AI image creation, as described above.

Like any web service, the API keeps short-lived technical logs of requests, such as the route, status, timing and a request ID, and Vercel processes your IP address to deliver and protect the service. These logs never include your photos or descriptions. They are kept for a limited time, typically between one hour and 30 days, unless we need a copy longer to investigate a security incident or abuse.

Our providers may store and process data outside the country where you live. We may also disclose information if the law requires it, or to protect our users, the service or TathyaLabs from fraud or abuse.

How long we keep data

• Creations (uploaded photo, created image and description): until you delete the creation or your account.
• Failed creations: the uploaded photo is deleted straight away. A short record of the request (style, description, frame size and an error code) stays with your account, is not shown in History, and is deleted with your account. In the rare case that a request is interrupted on our server, its photo stays in your private storage until you delete your account.
• Usage records and your AI-processing permission: until you delete your Imagine account.
• Daily creation counts: two days at most.
• Your Tathya account: until you delete it.
• Data on your phone: until you sign out, delete your account or uninstall the app.

Deleting creations and your account

One creation: open it and tap Delete. The created image and your uploaded photo are removed from our storage and the record is deleted.

Your account: open the Account tab and tap Delete account. This permanently deletes every Imagine creation, uploaded photo, description, AI-processing permission, usage record and quota count. If no other Tathya app uses your account, your Tathya account (email and login) is deleted too. If you also use another Tathya app, your login is kept for that app and you can delete it there.

By email: write to hello@tathyalabs.com from the email address on your account and we will delete it within 30 days.

Images you saved to Photos or shared with others stay where you put them.

Your choices and rights

You can browse without an account, turn AI processing off in the Account tab, decline or remove camera and Photos access in your phone's settings, delete any creation and delete your account.

Depending on where you live, you may also have the right to ask for a copy of your data, correct it, delete it, or object to or limit how it is used, and to complain to your local data-protection authority. To make a request, email hello@tathyalabs.com from the email address on your account. We may need to verify your identity first.

Security

Data travels between the app, our API and our providers over encrypted connections. Your images are kept in a private storage bucket that only our API can write to, database rows are readable only by their owner, and images are shown only through short-lived signed links. No system is completely secure, but we work to protect your information and keep only what Imagine needs.

Children

Imagine by Tathya is not directed at children under 13, and we do not knowingly collect personal data from them. If we learn that we hold personal data from a child under 13, we will delete it. Please upload a photo of someone else, including a child, only if you have their permission or the permission of their parent or guardian.

Changes and contact

If this policy changes, the date above will change with it, and if a change affects what is sent to an AI provider, the app will ask for your permission again. Questions, privacy requests and complaints can be sent to hello@tathyalabs.com.