Privacy Policy
Last updated 30 October 2026
TinyDesk Studio turns five photos into a short performance video. This page explains exactly what we collect, who touches it, and how long we keep it. We keep the list short because we do not run ads, sell data, or build profiles.
1. Who we are
TinyDesk Studio is an independent software product operated by a sole trader. For anything in this policy, the contact is [email protected].
2. What you give us
- Five photos you upload, one per role (three singers, a solo singer, a saxophone player).
- Your email address, if you buy credits — it is required to deliver the purchase and to let you recover access.
- Any message you send us by email.
3. What we generate
From your photos we produce one or more still frames and a 15-second video. Both are stored on our servers under random, unguessable paths so that they cannot be discovered by browsing.
We do not publish your video, your photos, or any derivative of them on this site. The example shown on the homepage uses photos of pets supplied for that purpose, not customer photos.
4. What we collect automatically
- Standard server logs: IP address, timestamp, requested path, response status, user agent. Kept for security and abuse prevention.
- Your browser's local storage, which holds your sign-in state, your credit balance and the list of sessions started on this device. This stays in your browser and is cleared when you clear site data.
5. Why we process it
- To deliver what you asked for: render your video, let you download it, keep it available for a limited time.
- To take payment and keep accounting records where the law requires it.
- To prevent abuse — for example, blocking automated mass generation that would exhaust capacity.
6. Who else touches your data
We use a small number of processors. Each one receives only what it needs to do its job:
- AI model providers (currently Black Forest Labs via fal.ai) — receive your uploaded photos and the prompts, in order to generate the frames and the video.
- A payment provider acting as merchant of record — receives your email and payment details. We never see or store your card number.
- Hosting and content delivery — stores the generated files and serves this website.
- An email provider — delivers your purchase receipt and any support replies.
7. How long we keep it
- Uploaded photos: deleted within 30 days, or immediately when you ask us to.
- Generated previews and videos: kept for 30 days so you can come back and download them, then deleted.
- Payment records: kept as long as tax and accounting rules require.
- Server logs: kept for 30 days.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to processing, or to lodge a complaint with your local data protection authority.
To exercise any of these, email [email protected] from the address you used. We answer within 30 days. Deleting your account also deletes your uploads and generated files.
9. Cookies and local storage
We do not use advertising or tracking cookies. The site stores your session state in your browser's local storage, which is technically necessary for the generator and the credit balance to work.
10. Children
The service is not directed at children. You must be at least 18 years old to use it, you must have the consent of every person whose photo you upload, and photos of anyone under 18 are not accepted.
11. AI-generated content and content moderation
Every video produced here is synthetic media generated by machine-learning models. We label it as such, and we ask you to do the same when you publish it: TikTok, Instagram and YouTube all provide a synthetic-media toggle.
Do not use this tool to depict a real person in a misleading way, and do not upload photos of someone who has not agreed to it.
Uploaded photos and generated frames are screened by an automated classifier before they are rendered or shown, and flagged items are reviewed by a person. The prohibited categories, the actions we take and how to report content are set out in our Content Standards, which form part of the Terms of Service.
12. International transfers
Our processors may store data outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
13. Changes
If this policy changes in a way that materially affects you, we will update the date at the top and, for significant changes, notify you by email.
Questions about any of this? Write to [email protected].