Privacy Policy
Last updated: 12 October 2026
1. Who is responsible
Maxime Raafat, operating UV Gen as a sole proprietor in Switzerland, is responsible for processing your personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU and UK General Data Protection Regulation (GDPR). Contact details are in the Legal notice. For privacy questions or requests, email support@uvgen.com.
2. What we collect
- Account data: email address, password (stored only as a secure hash), and, if you sign in with Google or Discord, your name, profile picture, and account ID from that provider.
- Your content: prompts, uploaded images, generated images, textures, material maps, and generation settings.
- Usage and billing records: credit balance and history, plan, and subscription status. Stripe tells us your customer and subscription IDs and payment status; we never receive your full card details.
- Technical data: IP address, browser details, and server logs, used for security, abuse prevention, and fixing errors.
- Messages: what you send us by email or Discord.
3. Why we use it
- To provide your account, run generations, store your library, and manage credits and subscriptions (performance of our contract with you).
- To keep the service secure, prevent abuse and fraud, enforce our acceptable use rules, and fix problems (our legitimate interests).
- To keep accounting and tax records (legal obligation).
- To answer your messages and send essential service emails such as account confirmations, password resets, and important changes.
- To understand how UV Gen is used and improve it, based on anonymised or aggregated data where possible (our legitimate interests).
- To send occasional product updates to existing users. Every such email has an unsubscribe link.
We do not sell your data and do not use advertising trackers. We do not use your uploads, prompts, or outputs to train AI models unless you opt in.
4. Your content and storage
Uploads and outputs are stored privately. They are not publicly listed, and the app shows them to you through temporary, expiring links. To generate results, your prompt and any reference image are sent to our AI providers, which process them under their API terms to return the result. You can delete uploads, generated images, and textures in the app at any time, which removes them from our storage.
5. Service providers and international transfers
We use the following providers. Most process data only on our behalf; Stripe/Link, and Google and Discord when you sign in with them, also act under their own privacy policies.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Accounts, sign-in, and database | EU (Frankfurt) |
| Amazon Web Services | File storage and generation servers | USA |
| Vercel | Website hosting | USA and global edge network |
| fal.ai | Runs AI image and material models, including models from Google and OpenAI | USA |
| OpenAI | Prompt suggestions and prompt refinement | USA |
| Business email for all @uvgen.com mailboxes, and optional sign-in | USA | |
| Discord | Optional sign-in and our community server | USA |
| Stripe / Link | Payments, tax, invoices, and payment support | USA and Ireland |
Some providers are in the USA. Transfers rely on the Swiss-US and EU-US Data Privacy Frameworks where the provider is certified, and otherwise on the European Commission's standard contractual clauses as recognised in Switzerland.
6. Cookies
We use cookies and similar storage that are needed to keep you signed in and secure, and Stripe sets its own necessary cookies on its checkout pages. We may use privacy-friendly analytics that do not track you across websites. If we ever add optional cookies, such as advertising cookies, we will ask for your consent first.
7. How long we keep data
- Account data and content: until you delete them or ask us to delete your account. Routine backups expire within a few weeks.
- Billing and credit records: up to 10 years, as required by Swiss accounting law.
- Server logs: only as long as needed for security and debugging.
8. Your rights
You can ask for access to your data, a copy in a portable format, correction, or deletion, and you can object to or ask us to restrict certain processing. Email support@uvgen.com from your account email address; we respond within 30 days. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU or UK, to your local data protection authority.
9. Security
Data is encrypted in transit, stored files and the database are encrypted at rest, storage is private, and access is limited to what is needed to run the service. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as required by law.
10. Age
UV Gen is only for people aged 18 or older. We do not knowingly collect data from children.
11. Changes
We update this policy when our services or providers change, and the current version is always on this page. If a change significantly affects how we use your personal data, we will tell you in the app or by email. If UV Gen is transferred to a company we set up or to a successor, your data moves with it and this policy continues to apply.