Legal
Privacy Policy
Last updated: July 26, 2026
This Privacy Policy describes how I'm Emage ("we," "us," or "our") collects, uses, and discloses information when you use our website and services (the "Service"), available at https://imemage.com. I'm Emage is operated by YES AI Studio.
1. Information We Collect
Account Information
When you sign in, we use Firebase Authentication (a Google service) to handle your login. Depending on how you sign in, we receive your email address, your name and profile photo (if you sign in with Google), and a unique account identifier (UID).
We store your UID, email address, subscription plan (Free or Pro), and sign-in timestamps in our own database (hosted on Cloudflare) to manage your account and plan status. We do not store your password — that is handled entirely by Firebase Authentication.
Your Content
We do not collect or upload your images, videos, or audio files. All editing tools in I'm Emage — cropping, resizing, filters, compressing, and other image, video, and audio operations — run entirely in your browser. Your files never leave your device unless you explicitly choose to export or share them yourself.
Usage Data
We may automatically collect limited technical data when you use the Service, such as your IP address, browser type, and access timestamps. This is used only for security, abuse prevention, and troubleshooting.
We do not use Google Analytics or any third-party analytics or tracking tool.
2. How We Use Your Information
We use the information described above to create and manage your account and authenticate your sign-ins, determine whether your account is on the Free or Pro plan and unlock the corresponding features, respond to support requests you send us, and maintain the security and integrity of the Service.
We do not sell your personal information, and we do not use it for advertising profiling beyond what is described in Section 3 below.
We process your personal information on the basis of your consent, the performance of our contract with you (our Terms of Service), and our legitimate interests in operating and securing the Service.
3. Third-Party Services & Data Processing
Data Processing Entrustment
We entrust the processing of certain personal information to the following providers, who process it only on our instructions and for the purposes described below. Our agreements with these providers prohibit processing personal information beyond the scope described here, require appropriate technical and administrative safeguards, restrict further subcontracting, and allow us to supervise their handling of your data.
| Provider | Entrusted Task | Retention |
|---|---|---|
| Firebase Authentication (Google) | Handles sign-in via Google or email/password | For the life of your account |
| Cloudflare (Workers & D1 database) | Hosts our backend and stores your account record (UID, email, plan, timestamps) | For the life of your account |
Other Third Parties
The following providers act independently, for their own purposes, rather than on our instructions:
- Google AdSense — All visitors, signed in or not, may see ads served by Google AdSense. AdSense may set cookies and use data about your visits to select, serve, and measure ads. See our Cookie Policy for details and how to manage your preferences.
- Ko-fi — our footer and sidebar include an optional link to our Ko-fi page for visitors who want to support the Service. This is a plain link, not an embedded widget or script — we don't load anything from Ko-fi on our site, and no data is shared with Ko-fi unless you click through and interact with their site directly, which is governed by Ko-fi's own privacy policy.
4. Cookies
We use Firebase Authentication's local browser storage (not a cookie) to keep you signed in, and a small local storage entry that remembers whether you prefer light or dark mode. We do not use analytics cookies. Google AdSense, which serves ads to all visitors, sets its own advertising cookies. Where required by law (for example, for users in the EEA, UK, and Switzerland), we use Google's consent management platform, integrated with AdSense, to obtain your consent before these advertising cookies are set, and you can change your choice at any time. See our Cookie Policy for full details.
5. Data Retention and Destruction
We retain your account information for as long as your account is active. Accounts can request deletion at any time from account settings. If you have an active paid subscription from before Pro became free, cancel it first by contacting [email protected]. Once a deletion request is made, we apply a 14-day grace period before permanent deletion: if you sign back in with the same account within 14 days, your account and data are automatically restored and the deletion request is canceled. After the 14-day grace period expires, we permanently delete your account record (UID, email, plan, timestamps) from our database, except where we are required to retain limited records for legal or security purposes. In accordance with South Korean law, access logs to our systems are retained for at least 1 year.
Because your data is stored electronically, destruction is carried out using methods that prevent the data from being restored or reconstructed, such as permanent deletion from our database. We do not keep any personal information in paper form.
6. Your Rights
You can review or update your account information from your account settings at any time. You may also contact us to request access to, correction of, or deletion of your personal data.
7. International Data Transfers
We do not operate our own servers. Firebase Authentication and Cloudflare (Workers & D1) run on their own global infrastructure, so your personal information is transferred to and stored outside of South Korea. In accordance with South Korea's Personal Information Protection Act, we disclose the details of this transfer below:
| Item | Details |
|---|---|
| Information transferred | Email address, name and profile photo (if applicable), UID, subscription plan, and sign-in timestamps |
| Country, timing & method | Transmitted electronically over the internet at the time of sign-in and account use, and stored by each recipient in its home country: the United States for both Google LLC and Cloudflare, Inc. |
| Recipients | Google LLC, USA (Firebase Authentication) and Cloudflare, Inc., USA (Workers & D1 database) |
| Purpose & retention | Account authentication and account/plan management, for the life of your account (see Section 5, Data Retention and Destruction) |
This transfer is necessary to provide sign-in and core account features. If you do not agree to it, you will not be able to create an account or use features that require sign-in.
8. Children's Privacy
We respect the minimum age for using online services set by the laws of your country, including children under 14 in South Korea and under 16 in the European Economic Area (EEA). We do not knowingly collect personal information from users below the applicable age, and we do not use any personal information from users we know to be children for marketing or ad-personalization purposes.
A parent or legal guardian may contact us at any time to request access to, correction of, or deletion of their child's personal data. If we become aware that we have collected personal information from a child without the required consent, we will delete that information and the associated account without undue delay.
9. Security
We take reasonable technical and organizational measures to protect your information. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and for material changes we will provide additional notice where appropriate.
11. Privacy Officer
We have designated the following privacy officer to handle privacy-related inquiries, complaints, and requests to exercise your rights, including under South Korea's Personal Information Protection Act (PIPA):
YES AI Studio
Email: [email protected]
Contact Us
If you have any questions about this Privacy Policy, please contact us at [email protected].
We will acknowledge your request and provide a status update within 10 days of receipt, and provide a final response within 30 days, in accordance with applicable law. As a small, independently operated service, response times may vary with the complexity of your request, but we are committed to handling every request as promptly as possible.