Privacy Policy

What we collect, why we collect it, and who else sees it.

Last updated 27 July 2026

Draft pending legal and factual review. This describes our data handling as best we understand it from the codebase. It has not been verified against GDPR, CCPA, or other privacy regimes, and the sub-processor list below must be confirmed against what is actually deployed before this is relied upon.

What we collect

  • Wallet address. Your Hedera account ID when you connect. This is public information on the network.
  • Account details. Email address and profile information, if you create an account.
  • Content you make. Prompts, generated and uploaded images, collection names, and metadata.
  • Transaction records. Payments, mints, and transaction hashes — kept so we can prevent the same payment being used twice.
  • Basic usage data. Page views and error reports, used to keep the service working.

We do not collect your private keys or seed phrase. We cannot — your wallet never discloses them.

What is public by design

Anything minted goes on the Hedera public ledger and is permanently visible to anyone, including your wallet address and the artwork’s IPFS address. Artwork pinned to IPFS is publicly retrievable by anyone who knows its address. This is inherent to public blockchains and IPFS, and it cannot be undone after the fact.

Items you publish to the feed or a drop page are shown publicly alongside your creator profile.

Who we share it with

We use these third parties to run the service, each receiving only what its job requires:

  • Supabase — database and authentication
  • Vercel — hosting and analytics
  • OpenAI, Replicate, Fal — AI image generation and trait naming; receives your prompts and images
  • Pinata — IPFS pinning; receives artwork and metadata
  • Stripe — card payments, where used; card details go to Stripe, never to us
  • Resend — transactional email

We do not sell your personal data, and we do not share it with advertisers.

Training

We do not use your artwork or prompts to train our own models. Note that AI providers process your prompts and images under their own terms in order to return a result — review their policies if that matters to you.

How long we keep it

Account and content data is kept while your account is active. Transaction records are kept longer where needed for fraud prevention, accounting, and legal obligations.

On-chain and IPFS data cannot be deleted by us at any point, by anyone. Deleting your account removes your Amnt profile and off-chain content; it does not and cannot remove anything already minted.

Your choices

You can request a copy of your data, ask for corrections, or ask us to delete your account and off-chain content. Depending on where you live you may have further rights under GDPR, CCPA, or equivalent law. Contact us through the channel listed on the site and we will respond.

You can disconnect your wallet at any time, and revoke any HBAR allowance you granted directly from your wallet.

Children

Amnt is not intended for anyone under 18. We do not knowingly collect data from children, and will delete it if we discover we have.