Privacy Policy

1. Information we collect

• Account information: your email address, a password hash rather than your plain-text password, an optional @tag, and account creation and update information.
• Card content: titles, draft and published designs, text, links, uploaded images, and the card selected for your permanent link.
• AI requests: descriptions you submit, generated layouts, and successful-generation usage needed to enforce daily limits.
• Technical information: sign-in sessions, IP addresses, browser information, request and error logs, and operational details such as generation timing and token usage. Depending on logging configuration, request logs may include descriptions or submitted card content.

2. How we use information

We use this information to create and secure accounts, save and publish cards, serve images and embeds, generate AI layouts, support password resets, enforce usage limits, respond to requests, and investigate errors or misuse. The current service does not sell personal information or use advertising trackers.

3. Public cards and private drafts

Publishing makes your live card and the images it uses publicly accessible. Your @tag and the contact details, photos, and links you publish are visible to visitors. Public cards can be embedded by other websites and may be indexed, cached, or copied by search engines or other people.

Drafts require account access and are not displayed at your public card link. The operator and service providers may process drafts to operate and support the service. Uploaded files may also be accessible to anyone who obtains their file URL; do not treat an image URL as a confidentiality control.

4. AI design and Google Gemini

When you use AI design, we send your description, layout instructions, and a design schema to Google's Gemini API. Your description can include personal information if you put it there. The current integration does not send your account password, automatically attach your existing card, or send uploaded images to Gemini. Generated text and layout are returned for preview and editing; images are placeholders.

Google's handling of prompts and responses depends on its applicable terms, region, and the API billing setup. Under Google's unpaid-service terms, content may be used to improve its products and reviewed by humans; paid-service terms provide different protections. Do not include confidential or sensitive information in a prompt. Read the Gemini API terms and Google Privacy Policy for Google's practices.

5. Cookies and embedded cards

We use essential cookies for sign-in and session-related functions. Blocking or deleting them may prevent account features from working. The current app does not add advertising or third-party analytics cookies.

When someone loads an embedded card, their browser connects to MYO Cards to request the card and its assets. We receive technical request information such as IP address, browser information, and potentially the referring website. The website containing the embed may collect information separately under its own privacy policy. Opening a link on a card takes you to a website with its own privacy practices.

6. Service providers and other disclosures

Providers supporting hosting, data and file storage, email delivery when configured, and AI processing may handle information needed for those services. Our operator may also access information to provide support, maintain the service, and investigate misuse. Information may be disclosed where required by law or reasonably necessary to protect people, rights, or the security of the service.

Service providers may process information outside your country. The protections available depend on the provider, its terms, and applicable law. Contact us for questions about the current hosting and processing setup.

7. Retention and deletion

We retain account and card information while it is needed to provide the service and meet operational, security, or legal needs. Removing an image layer does not necessarily delete the uploaded file: previous uploads can remain associated with a card to support Undo and published snapshots. There is currently no automatic retention deadline for every uploaded file.

You can edit your drafts and delete inactive designs in My Cards. Contact kyle@myo.cards to request account deletion, removal of a live card, or deletion of associated data. We may need to verify your identity. Backups and logs may retain copies until they are removed through their normal lifecycle or no longer needed; copies held by other websites or search engines are outside our control.

8. Your choices and privacy rights

You choose what to publish, can edit card content, can avoid AI generation, and can sign out or clear cookies. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or object to or restrict certain processing. Send requests to kyle@myo.cards. We will respond as required by applicable law. You may also have a right to complain to your local privacy regulator.

9. Security and age eligibility

We use measures such as password hashing, signed sign-in cookies, account ownership checks, and file and content validation. No internet service or storage system can guarantee complete security. MYO Cards accounts and AI design are intended for adults aged 18 and over. Contact us if you believe an ineligible person has provided account information.

10. Updates and contact

We may update this policy as features, providers, or practices change. We will update the date above and provide additional notice when appropriate or required by law. Contact kyle@myo.cards for privacy questions or requests.