Privacy policy

Last updated: October 20, 2026

This policy explains what personal information KnitzNGritz (https://knitzngritz.com) collects, why, who we share it with, how long we keep it, and the choices and rights you have. KnitzNGritz is run by Wildfire Watchdog LLC, Bend, Oregon, USA ("we", "us"). We are the business (or "controller") responsible for your information.

The short version: we collect only what we need to run the service, we don't show ads, we don't sell or share your information for advertising, and we don't use third-party analytics or trackers. Your files delete themselves after 30 days.

Questions or requests: admin@wildfirewatchdog.com.

What we collect

• Account information: your email address and your password (we store only a secure hash of it, never the password itself).
• Billing information: your Stripe customer ID, your plan and whether it's active, and your purchase history. Stripe collects your card details. We never see or store your full card number.
• Usage information: how much of your monthly allowance and credits you've used (for example, how many Shorts or images you've made), and job status.
• Your content: what you upload (text, photos, audio, voice samples, video) and the results the tools make for you.
• Face photos and voice samples: if you use Avatar, Image Studio or other video tools with a photo of a face, or upload a voice sample for voice cloning. See the special section below.
• Consent records: for voice cloning, the record that you ticked the box confirming it's your own voice or that you have the speaker's permission.
• Server logs: your IP address, browser (user agent), the pages and features you request, and the time. These are made automatically when you visit.
• Messages: what you send us when you email us.

We don't knowingly collect sensitive information beyond what's described here. Please don't upload other people's sensitive information.

Why we use it, and our legal bases

• To provide KnitzNGritz to you (create your account, run the tools, store and deliver your files, count your allowance, take payment, send emails about your account and your files). Legal basis: to perform our contract with you.
• To keep KnitzNGritz safe and legal (security, preventing fraud and abuse, enforcing our terms of service, running automatic safety checks that block content showing minors or nudity, and meeting legal duties like reporting child sexual abuse material). Legal basis: our legitimate interests in a safe service, and legal obligations.
• To process face photos and voice samples to make the output you asked for. Legal basis: your consent, which you give when you upload them and start the job. You can withdraw consent at any time by deleting the file or asking us to.
• To keep records such as invoices and tax records. Legal basis: legal obligations.
• To tell you about important changes (price, allowance or policy changes). Legal basis: our contract with you and our legitimate interests.

We don't send marketing email without your permission. We don't use your information for automated decisions that have legal or similarly significant effects on you, other than automatic content filters, which block a render. If you think a filter blocked you by mistake, email us and a person will look at it.

Face photos and voice samples (biometric notice)

Some laws, such as the Illinois Biometric Information Privacy Act (BIPA), and similar laws in Texas and Washington, give special protection to face geometry and voiceprints. Here is how we handle face photos and voice samples:

• We use a face photo or voice sample only to make the output you requested (for example, a talking video or narration in that voice), and to run safety checks on photos (to detect a face, estimate whether the person might be under 18, and detect nudity).
• We do not build face or voice templates to identify or recognize anyone, we don't compare faces or voices against a database, and we don't use them to verify identity.
• The models do measure features of the face or voice while a job runs. Any such data exists only temporarily during processing and is not kept as a separate record.
• We never sell, lease, trade or otherwise profit from face photos or voice samples, and we disclose them only to the processing providers described below, or when the law requires.
• Face photos and voice samples are deleted under the same 30-day rule as all your files, or sooner if you delete them or ask us to. In any case, we delete them no later than when the reason we collected them is done, and within the time limits set by law.
• By uploading a face photo or voice sample, you agree to this processing. If it's not your face or voice, you confirm that you have the person's written permission, including their consent to this processing, as our terms require.

AI watermark

Voices made by KnitzNGritz carry an inaudible watermark (Resemble AI's Perth watermark). It marks the audio as AI-generated. It does not contain your name, email or other personal information.

Who we share it with

We share information only with the service providers that help us run KnitzNGritz, and only as much as they need:

• Our server in the USA, where your account, files and most processing live.
• RunPod, which rents us GPU servers in data centers in the USA and the European Union. Your files for a job are sent to a rented GPU server, processed, and the server is deleted after the job.
• Stripe, which processes payments and runs the Customer Portal. Stripe handles your card details under its own privacy policy.
• Google Drive, where our nightly backups are kept for 14 days.
• Google Fonts: our pages load fonts from Google's servers, so Google may see your IP address and browser details when you visit.

We send account email (sign-up, receipts, file deletion warnings) from our own mail server, not a third-party email service.

We may also disclose information if the law requires it (for example, a valid court order), to report child sexual abuse material to NCMEC and law enforcement, to protect people's safety or our rights, or as part of a merger or sale of the business (and we'd tell you).

We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising. We have no ads and no third-party analytics or tracking.

Cookies

We use only essential cookies: one to keep you logged in (your session) and one for CSRF protection, which stops other websites from making requests in your name. We don't use advertising or analytics cookies, so there's no cookie banner to click. If you block these cookies, you won't be able to log in.

How long we keep it

• Your files (uploads and results) are deleted automatically 30 days after they were created. About 5 days before, we email you a warning with a "download all" button.
• Account information is kept while your account exists.
• When you delete your account, your files are deleted right away and your account information is removed. Copies in our nightly backups roll off within 14 days.
• Billing records are kept as long as the law requires (up to 7 years).
• Server logs (IP address, user agent) are kept for 30 days for security and abuse prevention.
• If we must keep something longer for a legal reason (for example, a report to law enforcement or a legal claim), we keep only what's needed, only as long as needed.

Your rights and choices

Everyone can:

• Access and export your files with "download all" in My Media or in the warning email, and ask us for a copy of the other information we hold about you.
• Correct your information (for example, change your email on the Account page, or ask us).
• Delete files at any time, or delete your whole account on the Account page or by emailing us.
• Withdraw consent for face photos and voice samples by deleting them.

To make a request, email admin@wildfirewatchdog.com from the email on your account. We may need to confirm it's you. We'll answer within 30 days, or within the time your local law requires (45 days under California and Oregon law, which can be extended once when necessary). We won't treat you differently for using your rights.

California, Oregon and other US states

If you live in California (CCPA/CPRA), Oregon (Oregon Consumer Privacy Act) or another state with a similar law, you have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; to opt out of the sale of personal information, targeted advertising and profiling; and to limit the use of sensitive personal information. We don't sell or share personal information for advertising, don't profile you, and use sensitive information (like face photos and voice samples) only to provide the service you asked for. You can use an authorized agent to make a request; we may ask for proof that the agent is allowed to act for you. If we deny your request, you can appeal by replying to our answer, and if you still disagree, you can contact your state attorney general (in Oregon, the Oregon Department of Justice).

In the last 12 months we have collected the categories listed under "What we collect" (identifiers, commercial information, internet activity, audio and visual information, and sensitive information in the form of face photos and voice samples) from you directly and automatically from your device, for the purposes listed above, and disclosed them only to the providers listed above for business purposes.

Visitors from the EEA, UK and Switzerland

If you're in the European Economic Area, the UK or Switzerland, data protection law (GDPR and UK GDPR) gives you the rights to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent at any time (without affecting processing already done). You can also complain to your local data protection authority. The legal bases we rely on are listed above.

Children

KnitzNGritz is not for anyone under 18, and we don't knowingly collect information from children or teens. If we learn an account belongs to someone under 18, we delete it. If you believe a minor is using KnitzNGritz, please tell us at admin@wildfirewatchdog.com.

Security

We protect your information with encrypted connections (HTTPS), hashed passwords, access limited to people who need it, rented GPU servers that are deleted after each job, and regular updates. No system is perfectly secure, so we can't guarantee security. If a breach affects your information, we'll tell you and the authorities as the law requires.

International transfers

We're based in the USA, and your information is stored and processed in the USA. Some jobs run on rented GPU servers in the USA or the European Union. If you use KnitzNGritz from outside the USA, your information will be transferred to the USA, where privacy laws may differ from yours. Where the law requires, we rely on appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses offered by our providers.

Changes to this policy

If we make an important change, we'll email you before it takes effect and update the date at the top. If a change would let us use information you already gave us in a new way that needs your consent, we'll ask first.

Contact

Wildfire Watchdog LLC, Bend, Oregon, USA

Email: admin@wildfirewatchdog.com