Your photo, treated with care

Privacy policy

This policy describes the free portrait preview and reservation service available today. The controller is Jessica Klimmek, trading as Lucen Pets, [TODO: street address], Lucerne, Switzerland. Contact hello@lucenpets.com about your data.

What we process and why

When you make a portrait, we process the photo you choose, your selected style, the generated images, a random portrait identifier and creation time. We use these to provide your requested preview. Your browser resizes the photo before upload; our server re-encodes it without retaining image metadata. Please upload a pet photo you have permission to use and avoid including people, addresses or other sensitive details.

We use the IP address supplied by our hosting connection to limit generation requests and prevent misuse. We store a one-way hash of the IP address with the hour of each portrait request for up to two days, not the address itself. Expired entries are removed on subsequent requests. Basic request and error information may also be processed to operate and secure the service. We do not use your photo for advertising, publish it in our gallery, or train our own models with it.

If you reserve a product, we store your email address, product choice, submission time and portrait identifier if provided. We use these details to contact you about your reservation and the launch. This is not a purchase and we collect no payment information. Email correspondence is used to answer your request.

Service providers today

• fal.ai (United States): receives your uploaded photo and style prompt, generates the portrait, and provides the resulting image. Its own infrastructure processes the request.
• Vercel: hosts the website and stores generated portraits, previews, reservation records and rate-limit markers in a private storage bucket in the United States. Uploaded originals are processed in memory only and never stored.
• Cloudflare (only if Turnstile is enabled): processes security tokens and technical browser/network information to distinguish legitimate requests from abuse. The widget is absent when Turnstile is not configured.

We do not run advertising pixels, analytics or non-essential cookies on this site. Where enabled, Turnstile may use security-related browser mechanisms. Our own preview and reservation flow does not set cookies.

International processing

Image generation sends your photo to fal.ai in the United States. Hosting and security providers may also process information outside Switzerland. Foreign laws and access rights can differ from those in Switzerland. Swiss law requires an applicable basis for international disclosure, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards applicable to a particular provider; we do not claim every provider is certified under a particular transfer framework.

Retention and deletion

Uploads and portraits have a 30-day retention limit on our storage. The uploaded original is processed in memory and is not saved to disk. Stored masters, previews and metadata are kept for 30 days from the day of creation; expired files are removed by an automatic cleanup that runs after successful portrait requests. Request-driven cleanup can therefore occur after the expiry date if there are no new requests.

fal.ai stores outputs on its infrastructure under its own retention arrangements. [TODO: confirm fal.ai output retention]. Deleting a local copy does not itself delete a provider’s copy. Contact us if you need help requesting provider deletion.

Reservation emails are kept until launch contact is complete or you ask to be removed. Portrait links in reservations expire after 30 days even if the reservation remains. We retain correspondence only as needed to resolve the request or satisfy a legal obligation. Technical logs follow the hosting provider’s retention settings.

Your choices and rights

You can use the public gallery without uploading a photo or leaving an email. To withdraw a reservation, stop launch contact or request deletion, email us. Include your reservation email or portrait identifier if you have it; do not send unnecessary identity documents. We may request proportionate information to verify that the data belongs to you.

Depending on applicable law, you can request access, correction, deletion, restriction, a portable copy or object to processing, and withdraw any consent for future processing. We respond within the period required by law and explain any lawful limitation. You may complain to the Swiss Federal Data Protection and Information Commissioner or another competent authority. We do not sell or share personal data for targeted advertising and do not make automated decisions producing legal or similarly significant effects. Making a portrait is automated image generation, not a decision about you.

Security and children

Portrait previews use unguessable identifiers but are not protected by an account. Anyone with the preview link can view it until it expires. Do not share a link you want kept private. We use file validation and request limits to reduce misuse; no system can guarantee absolute security. This service is intended for adults, and we do not knowingly collect data from children under 13. Contact us if a child has submitted personal information so we can address it.

When checkout opens

Stripe (payments), Printify (printing and shipping), Supabase (order and customer storage) and Resend (transactional email) are planned future recipients. They are not connected to today’s preview and waitlist flow. Before checkout launches, we will update this policy to describe the actual order data, providers, transfer safeguards and retention requirements.

Updates

We will publish material changes here before they apply to new processing. This policy was last updated on October 23, 2026. See our Imprint for business details.