WallKoo Privacy Policy

Version: v1.2
Updated: July 22, 2026
Effective: July 22, 2026

1. About This Policy

WallKoo is an AI wallpaper generation and sharing service operated by the WallKoo team (“WallKoo,” the “Operator,” “we,” or “us”).
This Policy explains how we process personal information when you visit WallKoo, register or sign in, generate and publish content, upload reference images, purchase credits, download or favorite wallpapers, submit a complaint, or exercise privacy rights.
It applies to the WallKoo website and related services that expressly refer to it. Third-party websites and services process information under their own privacy policies.
The Operator determines the purposes and means of processing WallKoo users’ personal information. Our privacy contact is [email protected].
WallKoo serves users worldwide. Rights may differ by region, and this Policy does not restrict mandatory rights under applicable law.

2. Information We Process

2.1 Account and Sign-In Information

We may process:

email address, email verification status, and account creation and update times;
when you use Google sign-in, the account identifier, email, name, and avatar supplied by Google, plus access, refresh, and identity tokens, authorization scopes, and expiration data needed to maintain authorization;
hashes of email verification codes, email addresses, and IP addresses; send and verification times; expiration; attempt count; and use status; and
WallKoo internal user ID, role, and sign-in session information.

WallKoo uses Google’s basic identity and public-profile permissions. We do not request your Google contacts, Google Drive files, or unrelated Google data.

2.2 Profile Information

We may process the name, avatar, and related file information you set in your profile. Public works display your current WallKoo name and avatar; your email, Google account identifier, and payment details are not thereby made public.

2.3 Generation Inputs, Parameters, and Results

We may process:

prompts, reference images, original filenames, formats, sizes, and storage locations;
static or live output type, model, generation provider, dimensions, aspect ratio, duration, loop setting, visibility, and credit cost;
task, provider-task, and trace IDs; task state; start and completion times; response metadata; and errors;
results, thumbnails, machine-readable AI provenance metadata, and AI-generated titles; and
work ID, title, permalink, public or private status, review status, download count, and deletion status.

2.4 Purchase and Credit Information

We may process:

credit balance and ledger entries, credit pack, purchase amount, currency, order status, and times;
payment checkout session, payment intent, and event IDs, plus refunds and chargebacks; and
minimum transaction metadata needed for reconciliation, anti-fraud, support, and disputes.

Card number, expiration date, and security code are collected directly by the payment provider. WallKoo does not store these complete payment credentials.

2.5 Usage and Interaction Information

We may process:

favorited works and favorite times;
downloaded works, download times, signed-in user ID where applicable, hashed or truncated network identifiers, and browser type;
on the first visit, the IP address, User-Agent, operating system and version, system time zone, primary browser language, physical screen dimensions in pixels, and device pixel ratio;
current language, page requests, feature actions, request outcomes, and necessary fault-related data; and
after you allow analytics, Google Analytics processes page paths without query parameters, page views and interaction events, referring pages or traffic sources, browser, device, language, cookie or client identifiers, IP address, and approximate region inferred from it; and
communications and evidence concerning support, privacy requests, content complaints, rights notices, counter-notices, and appeals.

2.6 Security, Review, and Consent Records

To prevent misuse, abuse, and security incidents, we may process IP address, time, browser or device type, action category, success or failure, and related account, task, or order IDs.

We may also retain:

the accepted versions and times of the User Agreement and Privacy Policy and the associated account;
the version, time, and task for separate confirmation to publish a reference image;
the recipient, file, confirmation version, and time for files without visible AI labels;
automated and human review records, administrative logs, enforcement, and appeal results; and
security investigations, access controls, and legal-request handling records.

2.7 Processing We Do Not Perform at Launch

Within the current feature set, WallKoo:

does not use the device and network information described above for cross-site tracking or advertising;
does not use personal profiles for credit scoring or differential pricing;
does not sell or rent personal information; and
does not require identification documents, medical records, financial accounts, precise location, or other sensitive information unrelated to wallpaper generation.

If we add such processing, we will first update this Policy and separately notify you and obtain consent where the change is material or consent is legally required.

3. Sources of Information

We obtain information from:

information you submit directly, such as email, profile data, prompts, reference images, privacy requests, and complaint materials;
sign-in services you authorize, such as basic Google account details;
information generated as you use the Services, such as browser and device environment, IP address, task status, credit records, security logs, favorites, and downloads;
status, results, and necessary metadata returned by payment, email, storage, and AI providers; and
information lawfully or in good faith supplied by rights holders, agents, regulators, courts, law enforcement, or security researchers.

4. Purposes and Legal Bases

We do not treat “using WallKoo means consenting to all processing” as our sole basis. The legal basis depends on the law applicable where a user is located.

Purpose	Main information	Usual basis
Create accounts, verify identity, maintain sign-in	Email, code records, basic Google profile, login tokens, session	Necessary to enter into or perform the service contract
Receive inputs, generate and store works, deduct credits, deliver results	Prompts, reference images, parameters, tasks, results, credit records	Necessary to perform the service contract
Publish works and author profiles	Results, prompts, reference images, model parameters, name, avatar	User’s public choice and performance of the public-service arrangement; relevant consent where legally required
First publication of a non-public reference image	Reference image, task, confirmation record	Separate, explicit, revocable consent
Payments, refunds, chargebacks, reconciliation	Orders, amounts, credit ledger	Contract performance and legal duties
Measure device and language distribution, improve compatibility and the product experience, and support security, anti-abuse, troubleshooting, and reliability	IP, User-Agent, operating system and version, time zone, primary language, physical screen dimensions in pixels, device pixel ratio, page views and interactions, source, cookie or client identifiers, requests, tasks, errors, and action logs	First-party operational and security data rely on contract necessity, legal duties, or balanced legitimate interests where applicable; Google Analytics relies only on separate, off-by-default, revocable consent
Content review, complaints, appeals, rights protection	Inputs, results, review records, communications, evidence	Contract performance, protection of users’ and third parties’ lawful rights, and legal duties; consent where required
Retain financial, security, consent, and dispute records	Orders, ledgers, access and confirmation records	Legal duties and establishment or defense of legal claims
Optional model training or future non-essential cookies	Information separately described at that time	Separate, off-by-default, revocable consent

Withdrawal does not affect processing lawfully completed before consent was withdrawn. If the information is truly necessary for a core service, the related feature may stop working, but you may still download or delete accessible works and close your account.

5. Public Information and Public Works

Generation tasks are public by default. You may make them private before submission or change their status later in your library.
A public work may show any visitor its result, thumbnail, title, original prompt, original reference image, model, dimensions or aspect ratio, necessary publication time, download count, and your WallKoo name and avatar.
Titles and original prompts may remain in their original language on public pages in other languages and are not automatically translated with the page.
Search engines may index public content, and others may download, cache, screenshot, share, or use it with WallKoo’s “Make Similar” feature. Once published, you should not treat it as non-public information controlled only by WallKoo.
If a generation would first publish a previously non-public reference image, we obtain separate confirmation before task submission and credit deduction. Previously public reference images need not be confirmed again.
After you make a work private or delete it, we stop new public display in the Services but cannot retrieve prior lawful downloads, screenshots, search caches, or third-party copies.

6. Practical Limits of “Private” Status

WallKoo’s “private” status means that a work is excluded from the public gallery, public work page, and other public in-service entry points. It is not confidential storage or a technical guarantee that only the account holder can access it. Anyone holding an existing CDN URL may still access, save, or forward the file.

Therefore:

do not upload state or trade secrets, passwords, identity documents, financial accounts, medical records, or other confidential or highly sensitive material;
do not rely on private status for information requiring strict access controls;
WallKoo personnel and processors may still access private content for the purposes in Section 8; and
deletion or account closure starts deletion from active storage, but WallKoo does not control copies or caches on third-party devices.

7. Sensitive Personal Information, Real-Person Images, and Minors

WallKoo does not require government identification, financial account data, medical records, precise location, passwords, or other sensitive personal information unrelated to wallpaper generation. We may reject or delete clearly unnecessary content of this kind.
You may submit ordinary portrait references when you have lawful rights or permission. WallKoo uses them for generation, review, and troubleshooting; we do not verify identity, perform facial recognition, or extract or store face-template features.
You may not submit another person’s unauthorized private information, non-consensual intimate imagery, any sexual content involving minors, or real-person images used for fraud, impersonation, harassment, false endorsement, or similar harm.
Registration, generation, and credit purchases are only for users aged 18 or older. WallKoo is not directed to minors and does not allow users to submit personal information about children under 14. If collected inadvertently, we verify the circumstances and delete, restrict, or take other necessary action.
Before any future feature genuinely needs biometric, health, financial, or other sensitive personal information, we will explain its specific purpose, strict necessity, method, and possible effects, and obtain separate consent as required by law.

8. Automated Inspection and Human Review

WallKoo may automatically inspect public and private inputs and results and permit necessary sampling or review by authorized personnel under access controls.
Purposes are limited to safety and content governance, quality evaluation, feature testing, troubleshooting, complaint and appeal handling, intellectual-property protection, and legal compliance. Personnel may not browse user content out of unrelated curiosity.
Automated systems may reject generation, flag content, block publication, or temporarily restrict an account during urgent risk. Major final actions such as permanent bans or credit forfeiture are generally confirmed by a person and may be appealed for human review under the User Agreement.
WallKoo does not use these systems for advertising profiles, credit scoring, differential pricing, or solely automated decisions producing legal or similarly significant effects on users.

9. Model Training and Marketing

Unless you separately grant revocable consent that is off by default, WallKoo will not use prompts, reference images, or results to train or fine-tune models.
WallKoo does not authorize contracted AI providers to use this content for their own training and, where controllable, requires processing only to fulfill requests, ensure safety, and conduct necessary operations.
Publishing a work is not consent to model training. The public license is limited to hosting, display, downloading, promotion of WallKoo, “Make Similar,” and other purposes in the User Agreement.
Private content is not used for advertising or marketing. Public works may promote WallKoo under the User Agreement; after they become private or are deleted, we stop new promotional use, although existing caches and already published materials may take a reasonable time to remove.

10. Cookies and Local Storage

WallKoo uses cookies or similar storage necessary to provide the Services, including information needed for sessions, request security, anti-abuse, and payment flows. After the browser and device environment described above is first uploaded successfully, we also save a marker in local browser storage to avoid uploading it again. If that marker is cleared, the browser may upload the information again.
Disabling necessary cookies may prevent sign-in, generation, purchasing, or some security features.
Google Analytics does not load by default. It processes the information described in Section 2.5 and may set analytics cookies such as _ga only after you choose “Allow analytics”; we do not use it for advertising. Your choice is stored locally in your browser.
You may withdraw consent at any time through “Analytics settings” in the footer; we then stop analytics and attempt to delete Google Analytics cookies on our domain. Analytics stays off when your browser enables Global Privacy Control (GPC). Cookies on third-party pages such as Google remain governed by their policies.

11. External Providers and Data Recipients

We transmit information to providers only as needed to provide the Services. Providers and subprocessors may process data outside the user’s country or region. Actual locations depend on their infrastructure, selected models, and service arrangements.

Provider	Purpose	Possible data	Possible locations and policy
Google	Google sign-in; consent-based product analytics through Google Analytics	For sign-in: account ID, email, name, avatar, authorization tokens, and necessary technical data, with no contacts or Drive files requested; for analytics: page path without query parameters, page views and interactions, source, browser, device, language, cookie or client identifiers, IP address, and approximate region	Regions where Google and its providers operate, possibly outside the user’s location; Google Privacy Policy
Resend (Plus Five Five, Inc.)	Email verification codes and necessary service email	Email address, message content including code, delivery status, email transmission metadata	United States and regions where its subprocessors operate; Resend Privacy Policy
Cloudflare R2	Store avatars, reference images, results, thumbnails, necessary files	File content, object path, type, size, technical data needed for storage access	Cloudflare’s global infrastructure, possibly outside the user’s location; Cloudflare Privacy Policy
Waffo Pancake	Merchant-of-record checkout, payment, tax, refund, and transaction support	Email, billing details, product and order data, amount, currency, tax, payment identifiers, and necessary payment or technical data; WallKoo does not receive complete card credentials	Regions where Waffo and its providers operate, possibly outside the user’s location; Waffo Privacy Policy
EvoLink (EVO GLOBAL TECHNOLOGIES LIMITED)	AI image, video, or text requests and title processing	Prompt, reference image or thumbnail, parameters, task ID, output, status, errors; no user name, email, or payment details	Operator in Hong Kong, China; models or subprocessors may be elsewhere; EvoLink Privacy Policy

Providers receive only data needed for the relevant purpose. We do not send names, emails, or payment details to AI generation and title providers.

If we replace a provider with a similar one without changing the purpose or data categories, we update this table and the update date and give general notice. A provider receiving new categories, using data for a new purpose or model training, or materially increasing risk is treated as a material policy change requiring renewed consent.

Providers may use internal infrastructure subprocessors. We do not promise to list every subprocessor here, but link to public policies and provide additional information where legally required.

12. Other Sharing, Transfers, and Disclosures

Apart from Section 11, we process or disclose information only in these circumstances:

User publication. Public works and author details are displayed under Section 5.
User direction or consent. We provide information to a designated recipient at your express request.
Rights complaints. Necessary material may be forwarded to the relevant rights holder or uploader to handle an infringement complaint or counter-notice; unrelated sensitive information may be redacted.
Legal disclosure. Upon a legally effective court order, regulatory demand, law-enforcement request, or a real and urgent threat to personal safety, we verify the requester, authority, basis, scope, and duration and disclose the minimum necessary. Unless prohibited, likely to impede an investigation, or unsafe, we notify the user before disclosure or after a restriction ends. An ordinary email from a foreign authority is not automatically a valid demand.
Business succession. Necessary information may transfer if the WallKoo business passes to a company established or controlled by the Operator or a lawful successor. The successor must continue the then-current user, credit, deletion, and privacy duties, generally with at least 30 days’ notice. New processing purposes remain subject to the material-change rules.
Protection of rights. To the extent allowed by law, we may process necessary information to investigate fraud, attacks, or serious violations or to establish, exercise, or defend legal claims.

We do not sell personal information separately from the WallKoo business as a standalone user list or data asset.

13. Retention

We use different periods according to purpose rather than retaining everything indefinitely.

Category	Usual retention
Account and profile	For the life of the account; deleted or anonymized after closure except legally retained records
Used reference images, results, thumbnails	Until the user deletes the work or closes the account; public display stops immediately and permanent deletion from active storage occurs within 30 days
Uploaded files unused by a generation task	Deleted within 7 days of upload
Deleted data in isolated backups	Not restored to active systems and expires through a reasonable backup-rotation cycle
Fault logs containing prompts, reference-image URLs, responses, or other raw content	Usually no more than 30 days; long-term logs should avoid raw content, full URLs, and codes
Routine request metadata and security logs	Usually 180 days
Email-code records	30 days after use or expiration
Download events	12 months, then user association is deleted or de-identified; full IP addresses are not retained long term
Receipt records for files without a visible AI label	At least 6 months; longer periods apply where also a consent, dispute, or security record
User Agreement, Privacy Policy, public-reference-image, and other consent records; content-review, administrative-access, and appeal records	Life of account plus 3 years after closure
Orders, credit ledgers, refunds, chargebacks	5 years per transaction; disassociated from public profile after closure and extendable for law or disputes
Complaint, litigation, security-incident, and legal-request records	Until resolution and expiration of applicable accountability or limitation periods

If law requires a longer or shorter period, or an active dispute, security incident, or legal hold genuinely requires retention, we adjust the period and retain only what is necessary.

14. Information Security and Incidents

We use measures appropriate to an independent-developer operation, the nature of the Services, and data risk, including encryption in transit, access controls, administrative audit trails, key separation, backups, provider access restrictions, and security review.
Internet transmission and electronic storage cannot be absolutely secure. We do not promise that no security incident will ever occur.
On an actual or suspected leak, alteration, loss, or unauthorized access, we investigate, limit effects, remediate, and preserve necessary evidence.
Where applicable law requires it, we notify affected users and relevant regulators within statutory periods; we do not promise one fixed 72-hour period for every region.
User notices aim to describe the incident, information categories, likely effects, actions taken, and protective steps. Where individual notice is impossible and law permits, we may use a prominent in-service announcement or another reasonable method.
To avoid helping attackers or impeding an investigation, we may lawfully disclose technical detail in stages, but do not use this to conceal an incident that must be notified.

15. Your Rights and How to Request Them

Depending on applicable law, you may request access, a copy, correction, deletion, or restriction; withdraw consent; object to particular processing; obtain a portable copy; understand processing rules; and complain to a relevant regulator.

You can edit your name, avatar, and other profile details in your profile. Submit other applicable privacy requests to [email protected].

We generally respond within 30 days after receiving a verifiable request. We may extend for complex requests where law allows, explaining the reason and expected time. Requests are generally free; reasonable costs may apply only where law permits and a request is clearly repetitive or excessive.

To prevent impersonated deletion or data requests:

email requests should generally come from the address linked to the account;
we do not request identity documents by default; only if verification is genuinely impossible may we request minimum additional proof and allow unrelated details to be redacted;
an agent must provide authorization and complete necessary identity verification; and
we may lawfully reject or limit unverifiable, clearly repetitive, abusive, or rights-infringing portions, explaining the main reason and available appeal route.

16. Deleting Works and Closing Accounts

After a specific work is deleted, public display stops immediately and permanent deletion from active storage begins under Section 13.
After verification through the dedicated closure page, the account is disabled, its works stop being publicly displayed, and results, original reference images, and thumbnails begin deletion; related personal information is deleted or anonymized.
Voluntary closure causes remaining paid and free credits to lapse without an automatic refund, except for permanent service shutdown, payment abnormalities, material policy changes that substantially reduce purchased rights, or mandatory legal requirements.
Order, credit-ledger, refund, chargeback, anti-fraud, dispute, security, review, access, and consent records may remain under Section 13.
Search and browser caches, downloads by others, screenshots, and derivative content may remain, and WallKoo cannot retrieve them from third-party devices.

17. Policy Updates

Editorial corrections and updates to links or contact details that do not affect user rights may take effect on publication without renewed consent.
Material changes involving new purposes, data categories, model training, scope of content review, public licenses, or user responsibilities are generally notified by in-service message or email at least 7 days in advance with a summary; we aim for 30 days for materially adverse changes.
Changes immediately required by urgent security risk or law may take effect at once, with prompt notice.
After a material change, users must actively accept again to continue generation, credit purchases, or publication. Browsing public pages is not acceptance.
A user who disagrees may sign in, download or delete existing works, and close the account during a 30-day transition, but may not continue generating, buying, or publishing. If new terms materially reduce purchased rights, unused paid credits are handled under the User Agreement.

18. Contact

For questions about this Policy, personal-information processing, security incidents, or privacy requests, contact [email protected].