Dayi Privacy Policy
Version: v1.1 · Effective date: 2026-10-23.
1. Who we are
Dayi provides AI outfit image and video generation, creation management and sharing. The service is operated by LIGUOQING (gonewx). Contact: [email protected]. Website: https://dayi.gonewx.com.
2. Information we process
| Information | Purpose |
|---|---|
| Account information | The email address used for email-code sign-in, and account identifiers and email addresses (if provided) returned by Apple or Google authorization, for sign-in, account linking and security. We do not receive your third-party account passwords. |
| Authorization and age declarations | Records of service authorization, policy versions and your declaration that you are an adult. The service is only for users aged 18 or over, who must actively confirm this when registering. |
| Photos and profiles | Portraits, clothing images, identity reference images, and body details and outfit preferences you choose to provide, for profile management and the results you request. Photos may reveal your face, body and other personal characteristics. Only upload content you have permission to use. |
| Generation and usage records | Generation instructions, images, videos, task status, creations and interaction records, to provide generation, display, sharing and troubleshooting. |
| Payment information | Products, orders, transaction identifiers, credit balances and ledger entries, refunds and dispute status, for credit purchases, reconciliation and support. Payment channels process card and other payment details. |
| Device and operational information | Connection IP addresses, app and device versions, and necessary access and error logs, for transmission, security and troubleshooting. Device push tokens are also involved when notifications are enabled. |
We do not require identity documents or health diagnosis information. Do not upload other people's private photos, unauthorized portraits or photos of minors.
3. Photos, AI processing and public creations
When you submit a generation task, the reference images, prompts and parameters needed to complete it are sent to the AI interface in use. Image and video generation currently use the third-party gateway APIKEY.FAN (api.apikey.fan), which may forward inputs to upstream model providers or API channels. Use of OpenAI or Grok model names does not mean that the corresponding official API receives your request directly.
Under its privacy policy, effective October 17, 2026, APIKEY.FAN states that it does not retain AI request content or use it to train its own general-purpose AI models. It temporarily processes and forwards request content and retains necessary billing records and sanitized error logs. These statements apply to the gateway itself and do not cover its upstream providers.
We have not verified the actual upstream channels’ training practices, specific retention periods or processing locations. We therefore make no promise of no training, zero retention or a particular processing location across the entire processing chain. Consider this before submitting a generation request. If you do not accept it, you can choose not to submit personal photos or stop using generation features.
Original portraits use private storage and restricted access links and are not public material for the discovery page. Generated creations and original photos are separate data. Public creations, sharing links and identifiable portraits within them may be viewed, downloaded or redistributed by others. Check the content and its visibility before publishing or sharing. Deleting an original photo does not delete creations that have already been generated, published or saved by others.
We do not publish original portraits as public training datasets or sell personal photos.
4. Service providers and data flows
- Cloudflare provides edge networking, security and R2 file storage, processing transmission information and stored files. Private originals and publicly accessible media are managed separately.
- Resend processes recipient addresses, verification-code emails and delivery records when you request an email code.
- Apple / Google authenticate you when you choose their sign-in methods and return necessary account information under their own rules.
- AI API gateways and upstream providers process images, prompts and task information needed for generation, as described in Section 3.
- Stripe / Link and app stores process payments, refunds and transaction records when you use available payment channels. The seller and payment terms are shown at checkout or in the store order.
- Self-hosted GlitchTip processes error reports to help diagnose service failures. We try to keep personal photos, verification codes and complete credentials out of diagnostic information.
- Firebase Cloud Messaging / Apple Push Notification service deliver notifications when push features are available in the relevant client and you allow notifications. You can disable notifications in system settings.
Some providers and their infrastructure may be outside your country or region. Processing locations and applicable safeguards depend on the actual contracts and data protection arrangements for those services. We do not currently make commitments about third-party data processing agreements or cross-border transfer safeguards that have not been verified.
5. Retention, deletion and backups
We retain accounts, photos, profiles and creations for as long as needed to provide the relevant features. You can manage portraits and digital identities under Profile → Privacy. Once an original photo is deleted, it is no longer used for future generation; existing creations must be managed separately.
You can request an export of personal data. Export files are available for 7 days after generation, then expire and enter cleanup. Keep downloaded copies secure.
Account deletion starts asynchronous cleanup of associated product data, media and account records. Check the app for processing status. Pending transactions, refunds or disputes may need to be resolved first. Information that must be retained by law and records held independently by payment providers do not automatically disappear when your local account is deleted.
Deletion involves databases, object storage and background tasks; not all copies physically disappear at the moment you click. Historical backup copies are removed through backup rotation, and deleted content is no longer used in normal service. Accepted deletion requests should continue to be honored when restoring backups. Database backups run daily, retain the latest seven copies and are synchronized to separate backup storage. With consistently successful backups this covers about seven days; interruptions may retain older copies for longer. Diagnostic logs support troubleshooting and security response and are managed according to actual diagnostic needs. You can contact us about retention and deletion of relevant records.
6. Your choices and rights
You can manage photos and identity references, delete or unpublish creations, request a data export, delete your account and disable system notifications. Stopping future generation tasks avoids another round of AI processing but does not automatically withdraw requests already sent to providers.
Depending on applicable law, you may also request access, correction or deletion of personal data, withdraw consent-based processing, or request restriction, object or make a complaint. Contact the email in Section 1 with the subject “Dayi Privacy”. We verify the requester's connection to the account and respond within applicable legal time limits, without requiring unrelated identity information.
7. Security and policy changes
We use measures including encrypted transmission, private storage, short-lived authorized links and access controls to reduce risk. Protect your account and exported files, and do not publicly share private access links.
When we introduce new data uses, providers or important processing changes, we will update this policy and provide notice or obtain renewed consent as required. Historical versions and effective dates will remain available for reference.