Privacy Policy

Last updated: November 2, 2026

AI Coffee Fail Team operates AI Coffee Fail at aicoffeefail.org from the United States. “We” and “us” mean AI Coffee Fail Team. This policy explains how we handle personal information when you browse our website, create an account, purchase credits, submit a generation, download a result, or contact us. We are an independent project.

1. Information we collect

• Account and sign-in data: email address, name, account identifier, email verification status and profile picture when supplied. Google sign-in also provides authentication identifiers and tokens used to manage access. Email sign-in uses a verification code. Signing in does not import your Google Photos, Gmail messages or Drive files.
• Photos and generated media: two required subject photos in Person or Pets mode, the selected environment, output quality, and the generated video and thumbnail.
• Generation and credit records: generation instructions, quality and environment choices, task and provider identifiers, file locations, timestamps, status, errors, reserved and settled credits, and provider-cost records.
• Payment records: PayPal order and transaction identifiers, package, amount, currency, payment status, refund amount and associated credit records. PayPal handles payment credentials; we do not receive full card or bank-account details.
• Technical data: session records, IP addresses, browser and device information, access times, page activity, performance measurements and diagnostic logs.
• Marketing attribution data: campaign parameters, referring domain, landing page, country code, broad device category and timestamps used to connect account registration, purchases and product activity with acquisition channels. We do not store a full IP address, city or device fingerprint for attribution. You may contact us to request access to or deletion of this account-linked data.
• Support correspondence: your email address, messages and files you choose to send us.

2. Photo and AI processing

Before you submit

Selecting a photo creates a local preview. Before sign-in, the planner can save selected photos and scene choices only in this browser so you can return after sign-in.

A browser draft can be restored for up to 24 hours. You can remove it with Clear saved setup and photos in the planner or by clearing this site's browser data. Creating this pre-sign-in browser draft does not upload photos.

When checkout and live generation are unavailable, a signed-in user who confirms permission and saves the setup uploads the selected photos to private Cloudflare R2 storage. The files are associated with the user and setup identifier, are not sent to an AI provider, do not start a generation or use credits, and are scheduled for deletion after 24 hours.

After you submit

When live generation is available, photos are uploaded to private Cloudflare R2 storage after sign-in, permission confirmation and generation submission, then associated with a Neon task record. The required credits are reserved before provider submission.

API Mart is the primary generation provider and Kie API is the fallback. The provider selected for an attempt receives temporary signed links to the two submitted photos, the selected quality and environment, and generation instructions for Wan 3.0 video generation. The site adds the preset audio locally after generation.

Generated results

A completed output is validated, copied from the provider to private Cloudflare R2 storage, and delivered through authenticated media routes. Provider result URLs are not used as permanent public delivery links.

Photos can show a person’s appearance and clothing or a pet’s appearance. We use them to provide the requested coffee-mishap generation. We do not use this workflow to identify people or build a facial-recognition database. Google sign-in data is used for your account, not as an AI input.

AI Coffee Fail Team does not use uploaded photos or generated media to train or fine-tune AI models. API Mart states that it does not use customer data to train AI models and temporarily stores generated outputs only to provide its service. We have not independently verified an identical commitment or deletion behavior across API Mart, Kie API and every underlying model operator; their published policies and contractual terms govern their processing.

3. How we use information

• Authenticate you, maintain your account, process authorized photos, generate and deliver videos, and provide authenticated downloads.
• Create and reconcile PayPal orders, grant purchased credits after verified capture, reserve and settle generation credits, release credits for failed or invalid tasks, and process refunds and reversals.
• Provide support and necessary sign-in, security, and service messages, including account-confirmation email.
• Diagnose failures and improve reliability using operational and usage information.
• Investigate unauthorized photo use, abuse, fraud and security incidents, and meet legal obligations.

Improving the service does not authorize training on your content or publication of it. Authorized team members may access saved setups when needed for support, troubleshooting, safety, or legal requests. We do not use uploaded photos for advertising. Optional analytics events are described below; the site denies advertising storage and personalization in its Google tag configuration.

Where EEA or UK data protection law applies, our legal bases depend on the activity: contract performance for accounts, purchases, generation and delivery; legitimate interests for proportionate security, fraud prevention, diagnostics and service protection; legal obligations for required payment and dispute records; and consent for optional analytics or other processing requiring consent. Withdrawal does not affect processing that was lawful beforehand.

4. Service providers and disclosures

We disclose information needed to deliver the service to:

• AI generation providers — API Mart primary, Kie API fallback:

  For a live generation, the provider selected for an attempt receives temporary signed links to the two submitted photos, the selected output settings, the coffee-mishap prompt, a task identifier and technical request data needed to create the video. API Mart is attempted first; Kie can receive the same categories only when fallback is enabled and used.

  The selected provider routes the request to a Wan 3.0 video service and returns a result URL, which we download, validate and copy to private first-party storage before delivery. The providers can use underlying model operators to complete the request.

  We do not intentionally send your account email, name, payment credentials or Google authentication tokens in model-generation requests.

  Provider documents: API Mart’s privacy policy, API Mart’s terms of service, Kie API’s privacy policy, and API retention documentation.

  API Mart and Kie are active processors only when selected for a live generation attempt. API Mart identifies prompts, inputs and outputs as Content Data; Kie documents generated-media and task-log periods. Their published materials do not establish one complete input-photo and underlying-operator deletion period for this entire workflow. Provider-controlled deletion requests require support review and provider confirmation.

• Hosting, database, object storage and delivery providers: Vercel hosts the website and provides analytics and performance measurement when enabled. Neon PostgreSQL stores account, payment, credit and task records. Cloudflare Workers runs the generation workflow, and private Cloudflare R2 storage holds submitted photos, generated videos and thumbnails. These providers receive the data needed to operate the service.
• Google: authentication data when you choose Google sign-in. See Google’s privacy policy.
• PayPal: order identifier, package, amount, currency, account-linked checkout data and return URLs when you explicitly start a purchase. PayPal handles payment credentials and sends payment, refund and dispute events to us. See PayPal’s privacy statement.
• Brevo: recipient addresses, message content, delivery events and marketing-consent records for sign-in, welcome and opted-in one-time first-video reminder emails. See Brevo’s privacy policy.
• Google Analytics 4: page views and current product events, including photo preparation, account access, and package selection. Account access can be associated with an internal user ID. We do not intentionally send photos, filenames, email addresses, prompts, or payment credentials in these events. See Google’s privacy policy.
• Microsoft Clarity: website interaction and session data when you allow optional analytics. See Microsoft’s privacy statement.
• Vercel Analytics and Speed Insights: website usage and performance data where these integrations operate. We do not intentionally include your photos or generated media in analytics events. See Vercel’s privacy policy.

We may also disclose information when legally required, to address fraud or safety incidents, to protect legal rights, or in a business transfer subject to applicable protections and required notices.

5. Privacy and optional public display

We do not automatically publish uploaded photos or saved setups in a public gallery. Accepting this policy does not grant permission to use them in examples, social posts, or marketing. Such use requires a separate, optional opt-in identifying the content and proposed use.

A public-display opt-in is not currently available in the planner. Until separate permission is obtained, uploaded content is not eligible for public examples. We do not feature content depicting minors. Permission for content showing multiple people must cover everyone shown.

You may withdraw permission by emailing us. We will stop future use and remove displays under our control, subject to applicable law. We cannot retrieve copies others have downloaded or reposted.

Uploaded photos and completed videos are not automatically public. Viewing and downloading through the service requires sign-in to the account that created the task. API Mart or Kie receives expiring signed links only when selected for a live generation attempt; those links are not public gallery URLs.

6. Retention and deletion

To request deletion: support@aicoffeefail.org.

1. Send the email from your account address and include the relevant task identifier if available.
2. Say whether you want the associated uploaded photos and task media removed, your account closed, a provider-copy request submitted, or a combination of those actions.

A deletion request does not automatically clear browser drafts. Use the planner's clear control or clear this site's browser data for those local copies. Signed-in non-generation uploads expire after up to 24 hours; include the setup identifier in your request if you need earlier first-party cleanup.

For account closure or a separate privacy request, we will verify the request, explain what can be removed and what must be retained, and confirm the outcome. Contact support if first-party file cleanup remains pending.

We cannot promise immediate erasure from backups or records that must be retained by law.

API Mart, Kie and their underlying model operators control their own copies and logs. We can submit a provider deletion request where a process is available, but cannot promise immediate provider or model-operator deletion without confirmation.

7. Cookies and analytics

We use session cookies for sign-in and may store theme or language preferences in cookies or browser storage. Disabling necessary cookies can prevent sign-in or saving a setup. Usage and performance integrations are described above; not every analytics service uses cookies.

Use Privacy settings below or at the bottom of the site to accept or withdraw optional analytics consent. Optional analytics remain disabled until you consent. Withdrawal stops future optional analytics loading and clears our attribution cookies; it does not automatically erase data previously sent to analytics providers or necessary server and security logs. Contact us about earlier account-linked attribution or analytics processing.

8. Your rights and requests

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a portable copy of personal data; object to or restrict processing; withdraw consent; and complain to a data protection authority. Applicable US state laws may also provide appeal and opt-out rights. These rights and exceptions vary; not every regional law applies to every request.

Email support@aicoffeefail.org, preferably from your account address. Describe your request and include the relevant task identifier if available. We may need proportionate information to verify your identity or authority to act for someone else. Do not send passwords, payment credentials, or identity documents unless we explain why further verification is needed and arrange a suitable method.

We respond within applicable legal deadlines, explain permitted extensions or refusals, and do not discriminate against you for exercising privacy rights. You can request review of a denial by replying to our response. Account settings currently do not offer complete correction, export or account-deletion controls. Revoking Google access does not delete your account or files.

9. Age and photo permissions

AI Coffee Fail is for people aged 13 or older. Users aged 13–17 need permission from a parent or legal guardian to use the service, but every depicted person must be a consenting adult aged 18 or older. Anyone under 13 must not create an account or submit personal information. Meet any higher minimum age required where you live. We do not currently collect birth dates or independently verify age or guardian permission.

Person mode accepts only consenting adults aged 18 or older. Pets mode accepts pets you own or are authorized to depict. Do not upload minors, celebrities, public figures, protected characters, or anyone whose permission you do not have.

Upload your own photo only if you are 18 or older, another consenting adult’s photo only with authorization, or an authorized pet photo. Permission to generate is separate from permission to publish. If you or your child appear in an unauthorized upload, contact us to investigate, restrict access and address deletion under applicable law.

10. Security and international processing

We use authenticated account access and encrypted connections for service requests. No transmission or storage method is completely secure. Historical media links and third-party processing have the limitations explained above. Contact us about suspected unauthorized access to your account or content.

We operate from the United States and serve users internationally. API Mart is based in Singapore; Kie, infrastructure providers and underlying model operators may process information in the United States, Singapore or other countries with different privacy laws. Our location does not mean all data stays in the United States. Where international transfers require safeguards, the relevant processing must use them. Contact us to ask about the providers, locations and safeguards applicable to your request and how to obtain available documentation.

11. Policy updates

We update the date on this page when our practices change. Material changes will receive an appropriate website notice or email notification, with fresh consent where required. An update does not itself authorize new public-display or model-training uses.

12. Contact us

AI Coffee Fail Team
United States
Privacy and support: support@aicoffeefail.org

Read our Terms of Service for the rules governing use of the service.