Your account and data controls

The new personalized flow holds your raw description and follow-up answers in page memory. Leaving or reloading can lose work that has not produced a completed draft. It does not automatically save the description to your account. For a completed signed-in draft, one separate temporary recovery record may be available for up to 24 hours. It contains the canonical generated result and limited session metadata, not the request body, free-text answers, raw prompt, or a substitute saved session. Expired records are inaccessible and scheduled or lifecycle cleanup physically deletes them when it runs. Withdrawal and account deletion block access immediately; withdrawal cleanup can remain pending if it fails.

If you save a reviewed session, the account stores the script, its language, category, ending and an internal record of the session’s sources and checks. The script may contain details reflected from your description. In the separate guided interview, requesting an eligible session while signed in with the required consent saves your answers to your profile before generation. Those answers can remain saved if generation fails; use Clear saved interview data below to remove them.

Privacy choices records adult confirmation and the accepted policy versions. Sensitive-data consent is separate. Withdrawing it blocks new personalized processing and related writes, while access, export and deletion remain available.

Withdrawal does not erase saved data or recall processing that already happened.

Download account data provides your account details, saved answers, scripts and consent history as JSON. A downloaded copy is outside the app’s control; keep it private.

Clear saved interview data removes your profile answers and last-session summary. Delete individual saved sessions from the library, or delete your account to remove active account records.

Account deletion removes active app-controlled database records and attempts to clear the app’s known browser data and cached audio on the current device. The interface reports incomplete local cleanup.

This does not confirm deletion of exported files, other devices, provider records, security logs or backups. Production encryption, backup handling and provider retention have not been verified.