Privacy policy.
Last updated 5 November 2026
The short version: we collect what we need to run your account and make your avatars. We share prompts and images with the AI provider that generates them, and with the companies that host the app. We don't sell your data, we only use cookies needed to keep you logged in, and you can delete everything from your account settings.
1. Who's responsible
Avatar Creator (makeavatarapp.com) is run by [OPERATOR: your legal name or company], the controller of your personal data. Contact us at hello@makeavatarapp.com.
2. What we collect
You give us
- Account details: your name and email address, and a securely hashed password if you use one. If you sign in with Google, we receive your name, email and Google account ID.
- What you create: what you type to Muse, your avatars' names and profiles, and the images generated for you.
- Your choices: whether you'd like product updates by email.
Collected automatically
- Security and usage data: your IP address (to limit abuse and protect logins), browser type, when you signed in, and when you last used the app.
- Analytics: we use Cloudflare Web Analytics, which counts page visits without cookies and without tracking you across sites.
3. How we use it, and why we're allowed to
- To provide the service (create your account, generate and store your avatars, sign you in): needed to perform our contract with you.
- To keep it safe (rate limits, preventing abuse, enforcing our terms) and to understand and improve it (aggregate usage): our legitimate interests.
- Service emails such as sign-in codes and a welcome note: needed to run your account.
- Product updates and tips: only if you opt in. You can unsubscribe at any time.
4. Who we share it with
We don't sell your personal data. We share it only with providers that help us run Avatar Creator, under contracts that limit their use of it:
- Cloudflare: hosting, database, file storage, email delivery and analytics.
- OpenAI: generates avatar images and Muse's replies from what you type and from your images. Data sent through OpenAI's API isn't used to train their models by default.
- Google: only if you choose to sign in with Google.
We may also share data if the law requires it, or to protect people's safety or our rights. Some of these providers process data outside your country, including in the United States; where required, transfers are covered by appropriate safeguards such as standard contractual clauses.
5. How long we keep it
We keep your account and creations until you delete them or your account. When you delete your account, we delete your profile, avatars and images straight away; copies in backups and logs expire within 30 days. Records we must keep for legal or tax reasons (for example, invoices once paid plans exist) are kept for as long as the law requires.
6. Cookies
We only use cookies that are needed for the app to work: one to keep you logged in, one to remember that this browser has used Avatar Creator before, and a short-lived one during Google sign-in. We don't use advertising or tracking cookies.
7. Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to or restrict how we use it. You can delete your account yourself from Account › Privacy & data, and change your name in Account › Profile. For anything else, email hello@makeavatarapp.com. You can also complain to your local data protection authority (in the UK, the ICO).
8. Children
Avatar Creator is for adults aged 18 and over. We don't knowingly collect data from anyone younger.
9. Changes
If we change this policy in a significant way, we'll tell you by email or in the app.