Privacy Policy

Privacy policy for Peanut AI — GDPR, CCPA, data subject rights
Feb 9, 2026

Introduction

Welcome to Peanut AI ("we", "us"). Peanut AI is a free AI image generator built on the Peanut text-to-image model, available at peanutai.org. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

We collect information to operate, improve, and secure Peanut AI:

  1. Account Information

    • What we collect: Name, email address, and authentication details you provide when creating an account.
    • Purpose: Account creation, authentication, and customer support.
  2. Content You Provide

    • What we collect: Prompts, uploads, and any content you submit; generated images and feedback you share.
    • Purpose: To deliver Peanut AI AI image generation results, maintain history, and improve your experience.
  3. Usage Data

    • What we collect: Feature usage, session activity, pages visited, and error logs.
    • Purpose: Product analytics, troubleshooting, and performance improvements.
  4. Device & Technical Data

    • What we collect: IP address, browser type, device type, operating system, and general location derived from IP.
    • Purpose: Security, fraud prevention, and compatibility optimization.
  5. Cookies & Similar Technologies

    • What we collect: Cookie identifiers and local storage data.
    • Purpose: Authentication, preferences, and feature personalization.
  6. Payment Information

    • What we collect: Billing details and payment status from our payment processors (we do not store full card numbers).
    • Purpose: Subscription management and billing support.

How We Use Information

We use your information to:

  • Provide and operate Peanut AI AI image generation features.
  • Personalize and improve the product experience.
  • Monitor performance, prevent abuse, and secure the service.
  • Communicate service updates, support responses, and important notices.
  • Comply with legal obligations.

Information Sharing

We do not sell your personal information. We may share data only in these situations:

  • Service Providers: Trusted vendors for hosting, analytics, email, and payments under confidentiality agreements.
  • Legal & Safety: To comply with law, enforce our terms, or protect users and the public.
  • Business Transfers: In connection with a merger, acquisition, or asset sale.

Data Retention

We retain information as long as necessary to provide the service, comply with legal obligations, and resolve disputes. You can request deletion of your account and related data, subject to retention requirements.

Security

We implement reasonable technical and organizational measures to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

Your Choices

You can:

  • Access, correct, or delete your account information.
  • Manage cookie preferences in your browser settings.
  • Opt out of non-essential communications.

Your Rights Under the GDPR (European Economic Area, UK, Switzerland)

If you are located in the EEA, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent UK / Swiss laws give you the following rights regarding the personal data we hold about you. Peanut AI acts as the data controller.

Legal basis for processing. We rely on the following lawful bases:

  • Performance of a contract — to provide the AI image generation service you signed up for.
  • Legitimate interests — to operate, secure, and improve Peanut AI; to prevent abuse.
  • Consent — for non-essential cookies and marketing communications (you can withdraw consent at any time).
  • Legal obligation — to comply with tax, accounting, and other laws.

Your rights. You have the right to:

  1. Access — request a copy of the personal data we hold about you.
  2. Rectification — ask us to correct inaccurate or incomplete data.
  3. Erasure ("right to be forgotten") — request deletion of your data when it is no longer necessary.
  4. Restriction — ask us to limit processing of your data while a request is reviewed.
  5. Data portability — receive a machine-readable copy of the data you provided.
  6. Object — object to processing based on legitimate interests, including direct marketing.
  7. Withdraw consent — at any time where processing is based on consent.
  8. Lodge a complaint with your local supervisory authority (e.g. your national Data Protection Authority in the EEA, the ICO in the UK, the FDPIC in Switzerland) if you believe your rights have been violated.

How to exercise. Email support@peanutai.org from the email address associated with your account. We respond within 30 days. We may need to verify your identity before fulfilling the request.

International transfers. When we transfer personal data outside the EEA / UK / Switzerland, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

Your Rights Under the CCPA / CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights:

Categories of personal information we collect. We collect identifiers (name, email), commercial information (purchase history), internet activity (usage logs), geolocation data (general, IP-derived), and inference data. See the "Information We Collect" section above for the full list and purposes.

Your rights. You have the right to:

  1. Know — what personal information we collect, use, disclose, and (if applicable) sell or share.
  2. Delete — request deletion of personal information we have collected from you.
  3. Correct — ask us to fix inaccurate personal information.
  4. Opt out of sale or sharing — we do not sell personal information for monetary value, but we may share limited usage data with analytics and advertising partners. You can opt out by emailing support@peanutai.org or by enabling the Global Privacy Control (GPC) signal in your browser, which we honor.
  5. Limit use of sensitive personal information — we do not collect sensitive personal information as defined under CPRA.
  6. Non-discrimination — we will not discriminate against you (e.g. denying service, charging different prices) for exercising these rights.

Authorized agent. You may designate an agent to make a request on your behalf. The agent must provide signed written authorization and we may verify your identity directly.

Verification. To process a request, we may ask you to confirm information already on file (e.g. account email, recent activity) so we can verify the request is genuine.

How to exercise. Email support@peanutai.org with the subject line [CCPA Request]. We respond within 45 days (extendable by 45 days if needed, with notice).

California "Shine the Light" (Cal. Civ. Code § 1798.83). California residents may request information about disclosures of personal information to third parties for direct marketing purposes. We do not disclose personal information for third-party direct marketing.

Children under 16. We do not knowingly sell or share personal information of California residents under 16.

International Transfers

Your information may be processed in the United States and other countries where we or our providers operate. Where we transfer data out of the EEA, UK, Switzerland, or California, we use appropriate safeguards (e.g. Standard Contractual Clauses, adequacy decisions, or your explicit consent) as required by applicable law.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Website: peanutai.org Email: support@peanutai.org

By using Peanut AI, you agree to this Privacy Policy.