Privacy Policy
Last updated: 19 September 2026
Who we are
Kissemall is an independent AI photo service run from the United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Kissemall is the controller of the personal data described on this page. You can contact us at contact@kissemall.com or by post at 49 Monks Park, Wembley, London, HA9 6JQ, United Kingdom.
What we collect, why, and for how long
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Photos you upload | To create the image you asked for | Contract (providing the service you requested) | Kissemall does not keep your uploaded photos on its own servers. They are sent to our AI provider, fal.ai, to create your result, and fal.ai handles them under its own retention policy. |
| Generated images | So you can view and download them again | Contract | Generated images are saved in your history so you can download them again, and stay there until you delete them. The image files are hosted by fal.ai: deleting one from your history removes it from your account, while fal.ai keeps the file under its own retention policy. |
| Account details: email address, name, credit balance | To run your account and your credits | Contract | While your account is open. Ask us to delete your account at any time. |
| Payment and transaction records | To take payment, issue refunds and keep accounts | Contract and legal obligation | As long as UK tax and accounting law requires. Card details are handled by Stripe and never reach us. |
| Consent confirmations (a fingerprint of the image, the style and the time) | To keep an auditable record that you confirmed permission | Legitimate interests (safety and preventing misuse) | While your account is open, and longer if needed to deal with a report of misuse. |
| Messages you send us | To reply and to help you | Legitimate interests | As long as needed to deal with your request. |
| Advertising and measurement cookies | To show ads to free users and measure the site | Consent (only after you accept) | Until you withdraw consent or the cookie expires. |
Your photos
Photos you upload are sent over an encrypted connection to our AI processing provider, fal.ai, only to generate the result you asked for. Before that, an automated content-safety check screens the image. Kissemall does not keep your uploaded photos on its own servers. They are sent to our AI provider, fal.ai, to create your result, and fal.ai handles them under its own retention policy. Location (GPS) and device details are removed from your photo in your browser before it is uploaded. Generated images are saved in your history so you can download them again, and stay there until you delete them. The image files are hosted by fal.ai: deleting one from your history removes it from your account, while fal.ai keeps the file under its own retention policy.
No AI training
We never use your photos or generated images to train AI models, and we never sell your data.
Who processes your data for us
- fal.ai: Runs the AI image models and the upload safety check, and stores uploaded and generated images under its own retention policy.
- Stripe: Takes card payments. We never see or store your card details.
- Vercel: Hosts the website and provides cookie-free, privacy-friendly analytics.
- ZeptoMail (Zoho): Sends sign-in codes and replies to your messages.
- Google: Advertising and measurement, only if you accept those cookies, and optional Google sign-in.
- Our database host: Stores your account, credits, history and consent records.
Transfers outside the UK
Some of these providers, including fal.ai, Stripe, Vercel and Google, process data in the United States or other countries outside the UK. Where they do, the transfer relies on the safeguards those providers offer under UK data protection law, such as the UK International Data Transfer Addendum or an adequacy decision. Contact us if you would like more detail.
Consent records
When you confirm you have permission to edit a photo, we record a cryptographic fingerprint of the image (not the photo itself), the style and the time, for safety and compliance purposes.
Cookies and your choice
Some cookies are strictly necessary: they keep you signed in and remember your preferences. These are always set, because the site cannot work without them. We also use Vercel Analytics, a privacy-friendly measurement service that does not use cookies or track you across sites.
Everything else is optional and off until you say otherwise. When you first arrive we ask whether you accept advertising and measurement cookies. Until you accept, no Google advertising or measurement script is downloaded at all, and Google Consent Mode is set to deny advertising storage, advertising personalisation, advertising user data and analytics storage. If you decline, those scripts are never loaded.
You can change your answer whenever you like using the Cookie settings link in the footer of every page. Choosing it clears your stored choice and asks you again.
Advertising
We show advertising to users on the free plan to keep free credits available. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third-party vendors' cookies at aboutads.info. Paid subscribers see no ads, and no ad script is loaded for them. For everyone else, advertising scripts load only after you have accepted advertising cookies.
Deleting your data
You may delete individual generations from your history at any time. This removes them from your account; the image files themselves are hosted by fal.ai and handled under its retention policy. To delete your entire account and all associated data, email us from the address on your account and we will confirm when it is done.
Your rights
Under UK data protection law you have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where we rely on consent. To use any of these rights, email contact@kissemall.com. We will reply within one month.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint.
Changes to this policy
We will update this page when our data handling changes and show the date of the latest version at the top. For the rules on what you may upload, see our Terms of Service.