1. Who we are
FIRSTDROPS is a byproduct of Hundox. For privacy questions or requests, use the contact details in our Terms. This policy describes the application as currently implemented.
2. Photos you select
Your selected photo is prepared locally in your browser. FIRSTDROPS does not upload the photo or its pixels to its servers or send it to an external AI model. Your browser temporarily handles the selected image and result while the page is open. Downloaded copies are stored on your device under your control.
The application checks your account access online before preparing a photo. That access check does not include the image. Keep your original file and review the downloaded result.
3. Technical information
Requests include technical information such as your IP address, browser information, requested URL, and the time of the request. The server and hosting infrastructure may record access or error logs for operation, security, and troubleshooting. The application does not add uploaded photo contents to its logs. Infrastructure logging and retention depend on the hosting setup.
4. Browser storage and cookies
The app uses a service worker and browser cache to store interface files so the page can open offline after a visit. It does not intentionally cache uploaded images or server-generated results in that offline cache. Your browser may keep a downloaded image or a selected file while you use the page.
The application uses an essential HttpOnly session cookie to keep you signed in, protect forms, remember checkout details, and connect payment actions to your account. Depending on hosting configuration, session data is kept in an encrypted browser cookie or in server-side session storage. Encrypted cookies cannot be read by page JavaScript. The application does not include advertising or analytics trackers. Razorpay checkout may use its own cookies or device data when opened. You can clear site data or remove the installed app using your browser settings, which may sign you out.
5. Support messages
If you email us using the contact details in our Terms, your email address, message, and any attachments are handled to answer your request. Share only information needed for support. Support correspondence is handled through the email service used by Hundox.
6. Accounts and payments
Supabase provides account authentication and stores account details such as your email, user identifier, authentication records, and payment-access records. Your password is submitted securely to Supabase for authentication; the application does not intentionally store or log your password. Encrypted-cookie or server-side sessions hold the access and refresh tokens needed to keep you signed in. Email one-time codes verify account ownership; no phone OTP is used.
When checkout is enabled, Razorpay processes the one-time INR 10 payment for the first 12 months. Your email may be prefilled in checkout. Razorpay receives the payment and device details needed to process the transaction under its own privacy terms. FIRSTDROPS does not collect or store full card numbers, CVVs, or UPI credentials.
FIRSTDROPS does not collect email or phone before the Razorpay Payment Button is used. Razorpay handles checkout details. Signed payment notifications and server API checks are used to record eligible captured payments with their checkout email. After you verify the same email through Supabase, the purchase is linked to your account. FIRSTDROPS stores your user identifier, provider order and payment identifiers, amount, currency, terms version, payment status, and access dates in Supabase. These records are used to verify payments, provide access, handle refunds, and reconcile interrupted checkouts. No automatic renewal is scheduled for this offer.
7. Why information is used and who handles it
Information is used to deliver downloads, keep the service working, respond to support requests, and address misuse or legal obligations. The current application has no photo-sharing or photo-sale feature. Supabase, Razorpay, hosting, and email providers may handle information needed to deliver their services; information may also be disclosed when legally required.
8. Retention and security
Selected photos and generated results stay in the browser and are not retained on the application server. Technical logs and support messages may remain in the systems that handle them for operational, support, security, or legal purposes. Account and payment-access records remain while needed to provide access, support reconciliation, address disputes, or meet legal obligations. Essential sessions expire after up to 30 days or are removed when you sign out. No fixed infrastructure or email retention period is asserted by this policy.
No internet service can guarantee absolute security. Use a secure connection and keep your original images.
9. Your choices and requests
You can choose not to upload, clear browser site data, and manage your downloaded files. Use the contact details in our Terms to ask about information held about you or request access, correction, or deletion, where applicable. We may need to verify your request and explain any legal or operational limits. We cannot retrieve your photos because they are not uploaded to the application.
10. Changes to this policy
We will update this policy when the service or its data practices change. Check the updated date on this page. Material changes to account, tracking, or payment practices will be reflected here.