Privacy policy
Last updated: 21 October 2026
Vizioner asks for personal things: photos of your face and honest answers about your life. This page explains what we keep, why, who else touches it, and how to take it back.
What happens to my photos?
- Where they're stored
- In a private storage bucket that only our servers can read. Nothing in it has a public address: when the app shows you a photo, it uses a link that expires within an hour.
- What they're used for
- Only to paint you. Your starred photo is the reference for your Future Self portrait, and your photos are the reference whenever a vision is painted with you in it. For that one request the photo is sent to our image-generation provider. We don't use your photos to train AI models, and never for advertising. Photos are optional — without them, Vizioner paints scenes without you.
- Who can see them
- You. Your original photos are never shown to anyone else. The images painted from them appear on your boards, and every board is private by default. If you switch a board to “Anyone with the link” in its Share panel, people with that link can see that board's images — including your likeness — until you switch it back to Private. Boards you finished before this setting existed were left viewable by link so links you'd already sent keep working; you can switch each one to Private.
- How to delete them
- Delete one photo or all of them under Profile → My photos at any time. Images already painted from a photo stay on your boards until you delete those boards. Deleting your account erases your photos, your Future Self portraits and every image painted for you from our storage.
What we collect
Only what the product needs to work:
- Your account: your email address, how you sign in, and your first name if you give it.
- If you join the waitlist without an account: your email address, your language, your personal referral code, the link of the friend who sent you, and when you joined (see “The waitlist” below).
- Photos you upload, and the Future Self portraits painted from them.
- What you create: your life-area ratings, your conversations with the AI coach, your visions (including the hard part you name and any “this came true” marks), the images painted for them, your boards and notes, and the one-line reflections you leave on daily check-ins.
- Memory, if you turn it on (see below).
- Orders: what you bought, the delivery name and address for prints and the payment status. Card details go straight to Stripe; we never see them. For VAT we also keep three country codes with each payment — see “Where you are, for VAT” below.
- Gifts you buy: the recipient's name and email address, the note you write and the delivery date. We use them only to send that one gift email in your name and to show the recipient your note; they go when you delete your account.
- Feedback you send us from the app.
- Usage data: which screens you open and which features you use, so we can see where Vizioner helps and where it gets in the way.
The waitlist
You can join the waitlist with just an email address, no account. This is exactly what that involves. If you create an account with the same address while you are still waiting, your waitlist entry joins your account and follows its rules instead.
- What we store: your email address, a standardised copy of it (so one mailbox can't join twice), your language, your personal referral code, how many friends joined with it, the code of the friend who sent you (if any), which version of this notice you saw, and when you joined, when we emailed you and when you were invited. We don't store your IP address.
- Why: to tell you your place and email you when a seat opens, and to credit a friend whose link you joined with. We don't use it for anything else, and it isn't a marketing list.
- Legal basis: our legitimate interest in running a fair, orderly waitlist, and taking steps at your request before you sign up.
- How long: until you're invited. We then delete your waitlist entry 30 days after the invitation, unless it has become part of an account. That happens when you create an account with the same address while you are still waiting: the entry is linked to your account and goes when you delete the account. An entry that was never linked is deleted 30 days after the invitation even if you sign up afterwards.
- Leaving: reply to any of our emails, or write to support@vizioner.ai, and we remove you. If you share your personal link, we count how many people joined through it to move you up the list; we never tell them who you are.
Memory
Memory is off unless you turn it on. When it's on, Vizioner keeps short, plain-language facts drawn from your finished boards — a goal you keep coming back to, for example — and your life-area ratings over time, so your next board can start where the last one left off and show your progress.
You can read, edit or delete every fact under Profile → Memory, or switch memory off. A conversation in which you told the coach you were struggling is never turned into a memory.
How the AI parts work
Your coaching conversation is processed by Anthropic's Claude models. Your images are painted by an image-generation provider — currently OpenAI, with fal.ai as an alternative. Each receives only what one request needs: the conversation so far, or an image description plus, if the vision includes you, your reference photo. We don't use your conversations or photos to train AI models.
The coach is a creative tool, not therapy, and not medical, legal or financial advice. If something you write suggests you're having a hard time, it will point you towards real support instead of carrying on.
Who else handles your data
A small number of providers, each only for its own job. We don't sell your data or share it with advertisers.
- Supabase — database, sign-in and file storage
- Railway and Vercel — the servers that run the app
- Anthropic — the AI coach and memory
- OpenAI and fal.ai — image generation
- Stripe — payments and receipts
- Gelato — printing and delivering your poster (it receives the print file and your delivery address)
- Brevo — sign-in emails, emails about your orders and waitlist emails, reminder emails if you switch them on in your profile, and the one gift email we send on your behalf
- Google — only if you choose to sign in with Google
- PostHog — product analytics, hosted in the EU. Session recordings never include your photos or generated images, and text on private screens is masked.
Where you are, for VAT
Prices include VAT, and the rate depends on where you are, so EU rules ask us to keep evidence of the country for each sale. We keep three two-letter country codes with each payment: the country your internet connection was in when you checked out, the country that issued your card, and the country the sale was taxed in — your billing country, or the delivery country for a print. We never store the IP address itself.
The connection country is looked up on our own server from a free database — IP Geolocation by DB-IP — so your IP address is not sent to anyone for this. Legal basis: our legal obligation to account for VAT. The codes are part of your order record (see “How long we keep it”).
Email reminders
Email reminders are off unless you switch them on under Profile → Account settings. When they're on, we may email you when visions on a board are still waiting to be painted — a note a day after you stop and one a week later, never more — and, occasionally, news from Vizioner. We don't send them to anyone who hasn't switched them on, and never when the coach noticed you were having a hard time.
Legal basis: your consent. We record the date and time you switch reminders on. Switch them off any time in your profile or with the link in every reminder email; using that link switches them off for you.
How long we keep it
We keep your data for as long as you have an account. Delete your account under Profile → Danger zone and we erase your profile, photos, boards, images, memory, coaching conversations, daily check-ins and orders. Payment records that Stripe must keep under tax law stay with Stripe.
Boards you never bought anything for and haven't opened or worked on for 90 days are deleted automatically, together with their sketches and coaching conversations — never a board with a painted vision or an order, and never any board of a paying customer. Opening a board keeps it.
If you delete a vision or a board, the one-line reflections you wrote on it are erased with it. We keep only the days you checked in, so your streak doesn't shrink; those go when you delete your account.
Backups are kept for a limited period; the exact period will be stated here before public launch.
Your rights
You can take a copy of your data at any time: Profile → Download my data gives you everything in one file — profile, photos, boards, memory, coaching conversations, daily check-ins, feedback and orders. You can correct your details, delete anything you created, switch memory off, or delete your account.
If you live in the EU or the UK you also have the right to object to or restrict how we use your data, and to complain to your data-protection authority. For anything else, write to us at the address below.
Who we are
Vizioner is in private beta. The company responsible for your data, and its address, will be named here before public launch. Until then, write to us at the address below with any privacy question or request.
Changes to this policy
When this page changes in a way that matters, we'll tell you in the app before the change takes effect. The date at the top shows the current version.