Privacy Policy

What to Art collects and processes limited information so the site can generate prompts, save optional account data, and let users share results.

-Prompt inputs and settings you submit, including phrases, moods, modes, prompt options, and generated outputs.

-Email address information if you use the email sign in flow powered by Supabase authentication, including magic link, OTP, and authentication email delivery.

-Saved generation history and favorites when those features are used.

-Purchase and subscription records, transaction identifiers, product identifiers, and account-linking identifiers needed to verify payments and deliver credits.

-Shared content you choose to publish through the share feature, including the phrase, mode, mood, generated prompts, selected options, and theme.

-Technical data that service providers may process automatically, such as IP address, device or browser information, request metadata, and basic logs needed to operate and secure the service.

The web and iOS apps store some settings and content on your device, including theme preference, auto-create preference, local history, and local favorites.

Authentication and session state may also be stored in browser storage by Supabase so you can stay signed in.

On iOS, authentication tokens are stored in the device Keychain so you can stay signed in securely.

Your information is used:

-To generate art ideas through OpenAI and provide random phrase suggestions from WhatToArt's server-owned phrase pool.

-To authenticate users by email, send magic link, OTP, and authentication emails, and associate optional saved history or favorites with an account.

-To create public share pages and social share images when you choose to share a result.

-To maintain the service, debug failures, prevent abuse, and improve reliability.

-To verify purchases, prevent duplicate credit grants, process subscription changes, and respond to refunds.

Supabase is used for authentication and database storage, including public share records and account saved content.

Resend is used to send magic link, OTP, and other authentication emails and may process email addresses and related delivery metadata on our behalf.

OpenAI is used to process art-idea generation requests sent through the site's server-side API routes. The Randomizer uses a server-owned phrase pool and does not send Randomizer requests to OpenAI.

Stripe processes payments made on the web. Apple processes in-app purchases and subscriptions made through the iOS app. WhatToArt receives transaction status and identifiers but not full payment-card details.

Hosting, delivery, and infrastructure providers may process standard technical request data to serve the site.

If you use the share feature, the shared result is intended to be publicly accessible by link. Do not include private, sensitive, or confidential information in content you choose to share.

Data stored locally remains until you clear it, sign out where applicable, uninstall the iOS app, or the browser or operating system removes it.

Account data and saved items remain until you delete your account or they are no longer needed to operate the service. Public shares are separate records and may require their share link or a support request to identify for removal.

Backup or log copies may persist for a limited period after deletion.

You can avoid signing in, avoid using the share feature, clear browser storage, or remove locally saved iOS history at any time.

Signed-in iOS users can permanently delete their account and synced data from Profile > Delete account. You may also contact WhatToArt support using the contact information in the About tab.

Deleting a WhatToArt account does not cancel an Apple subscription. Apple subscriptions can be managed in the App Store subscription settings before account deletion.