Last Updated: February 4, 2025 | Effective Date: February 4, 2025
TimeTwin ("we," "our," "us," or the "Company") is committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices in compliance with applicable privacy laws worldwide, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Lei Geral de Proteção de Dados (LGPD), and other applicable regulations.
For the purposes of applicable data protection laws, TimeTwin acts as the data controller for the personal information collected through our service.
For privacy-related inquiries, please contact us through our website.
| Data Category | Specific Data | Purpose | Retention Period |
|---|---|---|---|
| Contact Information | Email address | Payment receipts, order confirmation, customer support | Until deletion request or 3 years after last transaction |
| Uploaded Content | Photographs | AI character generation | Temporary only - deleted immediately after processing |
| Profile Information | Age, height | Character personalization | Not stored after generation completes |
| Payment Information | Transaction records (not full card details) | Purchase processing, refunds | As required by law (typically 7 years for tax purposes) |
| Data Category | Specific Data | Purpose | Legal Basis (GDPR) |
|---|---|---|---|
| Device Information | Browser type, version, operating system | Service optimization, compatibility | Legitimate interest |
| Network Information | IP address | Security, fraud prevention, approximate location | Legitimate interest |
| Usage Data | Pages visited, features used, timestamps | Service improvement, analytics | Legitimate interest |
| Referral Data | How you arrived at our site | Marketing effectiveness | Legitimate interest |
| Processing Activity | Legal Basis |
|---|---|
| Providing the service (character generation) | Contract performance (Art. 6(1)(b)) |
| Processing payments | Contract performance (Art. 6(1)(b)) |
| Sending transactional emails | Contract performance (Art. 6(1)(b)) |
| Fraud prevention and security | Legitimate interest (Art. 6(1)(f)) |
| Service analytics and improvement | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
| Marketing communications (if applicable) | Consent (Art. 6(1)(a)) |
We understand that uploaded photos are sensitive. Here's exactly what happens:
Our AI processing is provided by Google (Gemini). When your photo is processed:
We share data with the following categories of service providers:
| Provider | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Polar | Payment processing | Email, payment details | Polar Privacy |
| Google AI (Gemini) | AI character generation | Uploaded photos (temporary) | Google Privacy |
| Cloudflare | Hosting, CDN, security | IP address, usage data | Cloudflare Privacy |
We may disclose your information if required by law or in good faith belief that such action is necessary to:
In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change and your choices regarding your information.
Your data may be processed in countries outside your residence, including the United States. We ensure appropriate safeguards for international transfers:
For transfers from the EU/EEA to the US, we rely on Standard Contractual Clauses and ensure our US-based processors maintain appropriate security measures.
While we implement robust security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.
| Data Type | Retention Period | Reason |
|---|---|---|
| Uploaded photos | Deleted immediately after processing | No longer needed |
| Age/height information | Not retained after generation | No longer needed |
| Email address | Until deletion request or 3 years inactive | Customer support, legal compliance |
| Transaction records | 7 years | Legal/tax requirements |
| Server logs | 90 days | Security, debugging |
When data is no longer needed, we securely delete or anonymize it. You can request deletion of your data at any time (see Your Rights section).
Regardless of your location, you have the right to:
If you are in the European Economic Area or United Kingdom, you also have the right to:
Data Protection Authorities: You can find your local DPA at EDPB Members List
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:
We do not sell personal information. As defined under CCPA, we do not sell your personal information to third parties.
Shine the Light: California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not share personal information for direct marketing purposes.
Brazilian residents have rights under the Lei Geral de Proteção de Dados, including access, correction, anonymization, portability, and deletion of personal data.
Canadian residents have rights under the Personal Information Protection and Electronic Documents Act, including access to and correction of personal information.
Australian residents have rights under the Privacy Act 1988, including access to and correction of personal information.
Japanese residents have rights under the Act on Protection of Personal Information (APPI), including access, correction, and deletion rights.
TimeTwin is not intended for children under 13 years of age (or 16 in the EU/EEA). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. We will take steps to delete such information.
We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 in the United States.
| Technology | Purpose | Duration |
|---|---|---|
| Local Storage | Remember email for convenience (optional) | Persistent until cleared |
| Essential Cookies | Basic site functionality | Session |
You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.
Some browsers have a "Do Not Track" feature. We currently do not respond to DNT signals, but we also do not engage in cross-site tracking or behavioral advertising.
Our service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
For privacy-related questions, concerns, or to exercise your rights:
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority: