Privacy Policy
What we collect
When you sign up: your name, email address, year of birth (just the year, never the full date — it's used only to work out which experience is right for your age), and a securely hashed password (we never store your actual password). If you're under 13, we also collect a parent or guardian's email address to get their consent before your account can be used.
Your conversations
Your chats with Fernando are private to you — nobody else using this app can see them, including other guests. They're kept so you can come back to earlier conversations, until you delete a conversation or your account. Deleting a conversation removes its messages and any pictures in it immediately; deleting your account removes everything you own, at once.
Pictures you ask Fernando to make
Every picture request is checked against age-appropriate rules before anything is drawn, and every finished picture is checked by an on-device safety classifier before you see it; pictures that fail are never saved or shown. A picture Fernando makes for you is kept on this server for 24 hours so you have time to save it to your own device — after that it's deleted from the server. The prompt, seed, and settings used to make it are kept separately for 30 days, so it can be recreated exactly if you (or, for reviewing a flagged request, an admin) need to see it again — after 30 days those details are deleted too. A housekeeping sweep enforces these times every 15 minutes (and each time the service starts); it also removes any picture file that no longer belongs to a message. Email confirmation links expire after 24 hours and password-reset links after 1 hour; expired links are deleted by the same sweep.
Safety review (flags)
If a request looks like it breaks our rules for your age group, it's logged for a site admin to review, and (for policy violations, not for someone reaching out about self-harm — see our Terms of Use) your account may be temporarily paused while that happens. The flagged text is kept (encrypted) for as long as the flag is under review or on record; feedback you send through “Report an issue” is kept until an admin has reviewed it. Both are deleted with your account.
Who can see your data
Nobody but you can see your conversations or generated pictures. Site admins can see account details and the content of anything specifically flagged for review, but not your everyday conversations otherwise. We don't sell or share your data with advertisers, and we don't use your data to train AI models or show you targeted ads — there are none.
How your data is protected
Your conversations, the titles of your chats, picture descriptions, anything Fernando remembers for you, and feedback you send us are encrypted before they are written to our database, so they are never stored as plain text. Passwords are never stored at all — only a one-way hash. Everything travels over HTTPS. You can change your password from Account settings, and forgotten passwords are reset only through a time-limited link sent to the email address on the account (or the parent/guardian address, for under-13 accounts). Changing or resetting a password signs out every device.
Location (optional)
Fernando can use your location only if you switch on “📍 Share my location” in the menu (☰) and your browser asks you to allow it. It is sent with your messages while the switch is on, used to answer that message, and never stored — not in your chat history, not in logs. You can switch it off at any time, and it isn't offered at all on accounts for under-13s. For directions, Fernando gives you a link that opens in your own maps app; the route is worked out on your device, not by us. (If the site owner enables in-chat turn-by-turn routing, place names and coordinates — never your identity or messages — are sent to OpenStreetMap's public services to look up the route; this page will say so here if that is switched on.)
Where things run
The AI models that power Fernando's answers and pictures run under our own infrastructure — your prompts and images are not sent to a third-party AI company's servers for processing. We use Cloudflare to secure and route traffic to our service, and (where configured) to check you're a human rather than a bot when you sign up.
Your rights
You can ask to see, correct, or delete your data at any time by contacting the site owner. Deleting your account removes your profile, conversations, and any pictures still within their retention window.