Privacy Policy
Last updated: 14 October 2026 · Draft pending legal review
This policy explains what personal data AlterLure processes and why. The data controller is Ali Tarık Zadil, sole trader, Türkiye, trading as AlterLure. Contact: support@alterlure.me.
1. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and login details | Your account and sign-in | Contract |
| Identity and age verification (government ID, live selfie, date of birth) | Confirm you are an adult and who you are. Handled by our verification provider. We keep only the outcome (passed or failed), never the ID images or your date of birth. | Legal obligation and contract; explicit consent for biometric processing |
| Reference photos you upload | Create images of you; check each photo matches your verified selfie, shows one person and passes an age check | Explicit consent |
| Face comparison results | Confirm a photo shows you. Faces are compared on request; we don't store face templates or embeddings. | Explicit consent |
| Prompts and generated images | Create, store and show your images; safety checks | Contract and consent |
| Consent records and safety decisions | Prove consent, enforce our policies, handle reports | Legal obligation and legitimate interests |
| Technical logs | Security and preventing abuse | Legitimate interests |
2. Service providers
We use carefully chosen providers that process data on our behalf:
- Clerk: sign-in and accounts
- Persona: identity and age verification; keeps your verification selfie while your account exists, so new photos can be compared with it
- Amazon Web Services (Frankfurt, EU): face comparison
- Sightengine: automated safety checks (age estimation, nudity, image type)
- Runware: AI image generation
- Backblaze (EU Central): private, encrypted storage of your photos and images
- Cloudflare: domain, email and network security
Some providers are located outside your country, including outside the EU. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
3. How long we keep data
- Photos, generated images and prompts: until you delete them or close your account.
- Verification selfie (at Persona): while your account exists; deleted when you close it.
- When you close your account, we delete your personal data. We keep a small, anonymised record (consent history, verification outcomes, safety decisions) where the law requires us to show how we protected users.
- Content we must report to the authorities, or keep as evidence, may be preserved as the law requires.
4. Your rights
Depending on where you live (for example under the EU GDPR or Türkiye's KVKK), you can ask to access, correct, delete, restrict or export your data. You can also object to some processing and withdraw consent at any time, which stops new processing that relies on it. Most of this can be done in the app; otherwise email support@alterlure.me. You can also complain to your data protection authority.
5. Cookies
We only use cookies that are necessary to keep you signed in and secure. We don't use advertising or tracking cookies.
6. Security
Your content is private by default and stored encrypted. Access to it inside AlterLure is limited and logged. No system is perfectly secure, and we will tell you and the authorities about serious incidents where the law requires.
7. Children
AlterLure is only for adults. We don't knowingly process data of anyone under 18. See our Child Safety Policy.