One photograph.
Briefly seen.
The reading is the object. The photograph is only the sitting. What follows is the working contract: every promise the product is structured around, in plain editorial language.
Resized in your browser.
The moment you select a photograph, the browser scales it down to a 1600-pixel JPEG, quality 0.88. The original on your device is never opened, copied, or sent. Only the resized version is uploaded.
If the upload fails for any reason, slow network, refresh, connection drop, nothing has been transferred and nothing persists.
Used only to compose.
The resized photograph is sent to OpenAI's API, the model that composes the reading and the projected portrait, under terms that prohibit training on submitted images, signed in writing. That is the entire route. The bytes are not indexed, not classified against a permanent identity, not appended to any face database.
Our own storage runs inside a private Google Cloud project. OpenAI is the one third party that sees the photograph, briefly, and only to compose. Naming that plainly is the policy.
Erased within the day.
Within twenty-four hours every copy of the resized photograph is removed from our infrastructure by a scheduled deletion. The reading itself remains at its private link, and against your account if you chose to sign in; the projected portrait remains; the bare upload is gone.
If you choose to publish a shareable page, the bare photograph is opt-in, never published without your explicit consent on the share screen.
Not for training. Not for galleries.
Your photograph is never used to train a model, not ours, not anyone else's. There is no internal dataset of faces. The composing models are OpenAI's commercial APIs, whose terms prohibit training on submitted images, and we have signed those terms in writing.
Your photograph is never published to a gallery, leaderboard, social proof grid, or any public surface unless you click the share toggle yourself.
Write and it disappears.
If you would like every trace of the reading deleted, including the published share if you made one, including the stored Atlas, write to the desk. The deletion is permanent and processed the same business day.
The reading is the work. The photograph is only the way the reading begins.