Scry

Draft. This page has not been checked by a lawyer yet.

Last updated September 26, 2026

Privacy policy

What we collect, why, and what you can do about it. Short version: we use your photos to make your renders, keep them for you, and never sell them.

  1. 1What we collect

    • Your email address, to sign you in and to write to you about your account.
    • Your photos and renders: the photos you take or upload, the renders made from them, and what you chose to swap.
    • Purchases: which pack you bought, the price and Stripe’s payment reference. Stripe handles your card; we never see the card number.
    • Invites: your invite code, and who invited you, so we can give both of you the free renders.
    • Reports: what you write when you report a picture, and your email if you give it.
    • Technical data: to stop abuse we count requests per visitor. We store the IP address only as a scrambled code and delete those counts after a day. Our host keeps normal server logs.
    • In your browser: your sign-in session and the photo you are working on (for one day). We use no advertising or tracking cookies.

  2. 2How we use it

    • To read your photo, make your renders and keep them in My renders.
    • To take payments and give you the renders you bought.
    • To keep the service safe: limits, the safety filter, checking reports, and stopping misuse.
    • We don’t use your photos to train AI.
    • To answer you when you write to us.

  3. 3Who we share it with

    We don’t sell your data, and we don’t share it for advertising. These companies help us run the service:

    • Supabase: accounts, our database and file storage.
    • Higgsfield: makes the renders. It receives your photo and the product pictures. It keeps its copies, and the finished render, at unlisted web links for a limited time under its own terms. Anyone who has the exact link could open them. We can’t delete those copies.
    • Anthropic (Claude): reads your photo to find the parts you can swap. Under its terms for businesses, Anthropic doesn’t train its models on what we send.
    • Google: when you open the camera, your browser downloads a small object-finding model from Google’s servers, so Google sees your IP address. The camera picture stays on your device for that step.
    • SerpApi: finds store products for the part you pick. It receives the search words: the kind of part (for a car, its make, model and year) and any words you type. It never receives your photo, your email or your IP address. The product pictures come from Google Shopping.
    • Stripe: payments.
    • Vercel: hosts the website.

    When you make a share link, anyone with the link can see that before and after picture. If you send a link to the gallery and we approve it, its pictures are shown on our home page until you take it out.

    Shop links take you to the store’s own site, where its privacy policy applies. The link may tell the store that you came from us, so we can earn a commission. We may also share data if the law requires it.

  4. 4How long we keep it

    • Your photos and renders stay in your account for as long as you have it, so you keep what you paid for.
    • Share links stay up until you delete them, or until we remove them after a report.
    • If you scan without making a render, we don’t keep the photo ourselves. Only the partner copies above exist.
    • If you close your account, we delete your photos, renders, share links, purchase history and invite details. Stripe keeps its own payment records, as tax law requires.
    • Reports are kept as a record of what we checked and removed.

  5. 5Your choices

    You can delete any share link from its page. You can close your account at any time: open the account menu and tap Delete account. That deletes everything in it. Write to [contact email] to get a copy of your data or to correct it. We answer within 30 days. Some US states give you extra rights; we honour them for everyone.

  6. 6Keeping it safe

    Connections are encrypted. Your saved renders are in private storage and are only shown to you through links that stop working after an hour. Share links, and the Higgsfield copies described above, are at unlisted public links. Only our servers can read the database.

  7. 7Age

    Scry is only for people 18 and older. We don’t knowingly collect data from anyone younger.

  8. 8Changes and contact

    If we change this policy in a way that matters, we will tell you on the site or by email first. Scry is run by the Scry team. Questions: [contact email]. See also the Terms.