Privacy Policy

Last updated: 5 May 2026

This privacy policy explains how Prompt Frenzy ("Prompt Frenzy", "we", "us") collects, uses, shares and protects information about you when you use promptfrenzy.com and our related services (the "Service").

We try to keep this document plain-English. If anything is unclear, email support@promptfrenzy.com.

1. Who we are

Prompt Frenzy is a free-to-use library and generator for AI prompts and AI-generated images and videos. We are based in the United Kingdom and we serve users worldwide. For privacy questions you can contact us at support@promptfrenzy.com.

2. What we collect

2.1 Account information

When you create an account we collect the email address you sign up with and a display name / username. If you sign in via a third-party identity provider we receive whatever profile information that provider exposes (typically email and name).

2.2 Content you submit

When you use the Service to generate or save AI content, we collect:

  • Prompts — the text you submit to a prompt template, including any text variables you fill in.
  • Uploaded images — any photos you upload as inputs to image-to-image prompts.
  • Generated outputs — the images and videos returned by the underlying AI model.
  • Engagement signals — likes, saves, shares, and forks of prompts and generations.

2.3 Billing information

If you purchase a paid plan, our payment processor (Stripe) collects your payment details directly. We never see or store full card numbers; we only receive a customer identifier and the metadata Stripe returns (subscription state, last four digits of the card, and country).

2.4 Automatic / technical data

Like most websites, we automatically collect:

  • IP address, approximate location (country / region) and ISP.
  • Browser type, device type, operating system, and language.
  • Pages visited, time spent, referring URL, and outbound clicks.
  • Aggregated performance metrics such as page-load timing, errors, and Core Web Vitals.

We use this data to operate the Service, fight abuse and bots, debug issues, and understand which content is useful.

2.5 Cookies and similar technologies

We use cookies and similar technologies for: keeping you signed in, remembering your preferences, measuring traffic and engagement (Google Analytics 4), and protecting the Service from abuse. We do not use third-party advertising cookies.

3. How we use your information

  • To provide, operate and improve the Service.
  • To send your prompts and uploaded images to the AI providers needed to generate your output (see "Sub-processors" below).
  • To create and manage your account and authenticate you.
  • To process payments and manage subscriptions.
  • To send transactional and account-related emails (e.g. sign-up confirmations, receipts, security notices). You can unsubscribe from non-essential email at any time.
  • To measure, analyse and improve content performance and to detect and block scraping, fraud, and abuse.
  • To comply with legal obligations and enforce our terms.

4. Who we share information with (sub-processors)

We rely on a small number of trusted service providers. Each one only receives the data they need to perform their role:

  • Supabase — database, authentication, and file storage (US/EU region).
  • Vercel — application hosting, CDN, and edge security.
  • OpenAI, Google (Gemini), and Kling AI — the AI models that generate images and videos. Your prompts and uploaded images are sent to whichever provider powers the prompt you chose. We do not control these providers' downstream training practices; please review their own policies before submitting personal images.
  • Stripe — payment processing and subscription management.
  • Resend — transactional and product emails.
  • Google Analytics 4 — privacy-respecting site analytics (IP-anonymised).
  • Pinterest, Facebook, and other social platforms — when we (or you) publish a public AI generation as a social post, the image and caption are sent to that platform via its public API. We never share your account email or private content this way.

We do not sell your personal information. We do not share your data with advertisers or data brokers.

5. Where your data is processed

Our infrastructure is primarily located in the European Union and the United States. By using the Service you consent to your information being transferred to and processed in those locations.

6. How long we keep your data

  • Account data: kept for the lifetime of your account and deleted within 30 days of account deletion.
  • Prompts, generations and uploaded images: retained while your account is active so that you can access your library and so that public generations remain visible. We are working on a more granular per-image retention and deletion control; in the meantime you can request deletion at any time (see "Your rights").
  • Billing records: retained for as long as required by tax and accounting laws (typically 6 years in the UK).
  • Analytics and security logs: retained for up to 26 months in aggregated / pseudonymised form.

7. Your rights

Depending on where you live (UK / EEA under UK-GDPR & GDPR, California under CCPA, and several other jurisdictions), you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated personal information.
  • Object to or restrict certain processing.
  • Receive a portable copy of your data.
  • Withdraw consent for non-essential cookies and emails.
  • Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

To exercise any of these rights, email support@promptfrenzy.com from the email address on your account. We respond within 30 days.

8. Security

We use industry-standard measures to protect your information, including TLS in transit, encryption at rest in our managed databases and storage, role-based access controls inside our team, and rate-limiting / WAF rules to slow down abuse. No internet service can be 100% secure; if we ever become aware of a security incident that affects your data we will notify you in line with applicable law.

9. Children

Prompt Frenzy is not directed at children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email or by a prominent notice in the product before they take effect.

11. Contact

Questions, requests, or complaints about privacy: support@promptfrenzy.com.