Privacy Policy

ahhh.ai turns your photo into a trending meme video. The site is https://ahhh.ai. Privacy questions go to support@ahhh.ai.

Account: your email address, name, and sign-in method.

Photos: the pictures you upload so we can generate a video.

Device and network: a hash of your IP address and device information, used to limit abuse.

Analytics: our own statistics server, stats.kandiideas.com, runs on Cloudflare in our account. It stores a visitor ID and reads bot-check signals such as canvas output and Android motion sensor readings. Your IP address is kept only as a one-way hash. The visitor ID lasts up to 396 days. In the European Economic Area, the United Kingdom and Switzerland, analytics loads only after you accept it.

Payments: Waffo receives the order. We receive the order record, not your full card number.

We use this information to run your account, generate the video you asked for, prevent abuse, and answer support, reports, and appeals.

Uploaded photos and finished videos remain in your account's generation history for 30 days from when the video is generated successfully, whether the video is generated through APIMart or Kie. After 30 days they are no longer available in your account. The history entry stays and is shown as expired. Download the finished video and save it on your computer or phone.

A copy of a photo you have not submitted yet can sit in this browser's IndexedDB during a sign-in or payment handoff, so the upload can be restored. That copy is removed when the video job is created.

If you include audio, your browser mixes the template soundtrack into playback and download. The mixed file is not saved on our servers.

You can download the finished video and share that file. The video's media link stops working after a limited time.

We use these processors: APIMart or Kie for uploading photos and generating the video, APIMart for reviewing photos, Cloudflare for hosting and R2 storage, Waffo for payments, Google for sign-in and analytics, and Resend for email. We do not sell personal information.

A one-way hash of a verified signup email, not the email itself, is kept to prevent repeated signup bonuses. It is not automatically deleted on a schedule.

The analytics visitor ID and first-touch record last up to 396 days, its session record 1 day, and its bot-check verdict 7 days.

We use encryption in transit, access controls, and private storage. No system is perfectly secure.

We use cookies to keep you signed in and to remember settings. When a build enables Google Analytics, Google Analytics 4 measures how the site is used.

When analytics is on, stats.kandiideas.com writes the _pv_ cookies and keeps the visitor ID in localStorage. In the European Economic Area, the United Kingdom and Switzerland it loads only after you choose Accept in the banner. Cookie settings in the footer lets you withdraw, which clears those cookies and that ID and records the refusal in the first-party ahhh_consent cookie, so the next page arrives without the analytics tag.

You can ask us to access, correct, or delete the personal information we hold. Email support@ahhh.ai from the address on your account. Local law may give you more rights, including a complaint to a data protection authority.

The service is not for anyone under 16. You may only upload a photo of yourself or of a consenting adult. Do not upload a photo of a minor. There is no parent or guardian permission that changes this.

Privacy questions and requests: support@ahhh.ai.