Privacy Policy
Last updated September 18, 2026
This policy explains what Productive Focus LLC collects when you use Productive Focus Studio, why, and who else sees it. Short version: we collect what it takes to run your account and your generations, we do not sell it, and your prompts and files go only to the providers that generate your results.
1. What we collect
- Account data: your email address and a password, held by Firebase Authentication. We never see your password itself.
- Generation data: your prompts, the files you upload as inputs, the settings you choose, and the results, so your gallery works and so we can meter credits.
- Billing data: your plan, credit balance and a ledger of credit movements. Card details are collected and stored by Stripe; we hold only Stripe’s customer and subscription identifiers.
- Technical data: server logs with request times and status codes, and a session cookie that keeps you signed in.
2. How we use it
To run the Service, generate your results, keep your gallery, bill your plan, prevent abuse, and answer support requests. We do not use your prompts, uploads or outputs to train models, and we do not sell personal data.
3. Who else receives data
- Model providers (Higgsfield and the underlying model makers it routes to) receive your prompts and input files to produce your results, under their own policies.
- Google Firebase for authentication and our database; Vercel for hosting and file storage; Stripe for payments.
- Authorities or others where the law requires it, or to protect the rights and safety of users and the Service.
4. Cookies
We use one essential cookie to keep you signed in and browser storage for interface preferences such as your last prompt and settings. We do not run advertising trackers on the studio.
5. Retention
Your gallery and uploads are kept while your account is active and can be deleted by you at any time. Ledger and billing records are kept as long as needed for accounting and legal obligations. Closed or long-inactive accounts may have stored runs deleted after 90 days.
6. Your rights
You can view and change your account details, delete runs, and request a copy or deletion of your data by emailing us. Depending on where you live you may have further rights under laws such as the GDPR or CCPA; we honor those requests.
7. Security
Data is encrypted in transit, sessions use signed, HTTP-only cookies, and access to production systems is limited to the people who operate the Service. No system is perfectly secure; tell us promptly if you believe your account has been compromised.
8. Contact
Productive Focus LLC · support@productivefocus.ai. We may update this policy; the date at the top shows the current version.