Your garage is stored on your device. When you request a connected AI generation, the selected photo and instructions are sent to our service and processing providers after you consent. Local storage does not mean cloud processing is anonymous.
Who we are
Hog Soup is operated by GBEC, LLC. This policy covers the Hog Soup app and this website. Contact contact@hogsoup.com for support or privacy requests. The app is currently offered as a private TestFlight beta.
Information we process
- On-device garage: motorcycle photos, project names, saved concepts, recipes, favorites, preferences, and exported creations. The native app stores its garage in its own database and media files. A browser preview uses browser storage.
- Connected requests: the photo or reference image you select, instructions, customization choices, generated images or films, job status, timestamps, and error or report details.
- Guest identity and consent: a generated user identifier, authentication session, consent version and time, support identifier, and service usage. The app does not require an email registration, but this identifier links your requests and subscription allowance.
- Subscriptions: store, product and transaction references, purchase status, entitlement, service periods, and usage. Apple, or Google where available, handles payment. Hog Soup does not receive your full payment-card information through store purchases.
- Support: your email address and the information you choose to send us. Do not send payment passwords, card details, or unnecessary sensitive photographs.
The app normalizes uploaded images and removes unnecessary EXIF metadata. The image itself may still show people, registration plates, locations, or other personal information.
How we use it
We use this information to authenticate requests, record consent, generate and deliver concepts, check content and output quality, save your work locally, verify and restore subscriptions, account for allowance, prevent duplicate requests and abuse, investigate failures, and respond to support and privacy requests.
We do not sell your submitted photos or use them to target advertising. We do not add an advertising network to the current app or website. Processing providers handle submitted content under their applicable terms, privacy policies, and service configurations.
Providers and sharing
The following providers receive the information needed for their part of the service:
- Supabase: guest authentication, database records, and private cloud media storage.
- Google Cloud and Trigger.dev: API hosting, generation workflows, scheduling, and operational processing.
- OpenAI: submitted content and images used for suitability checks, instruction interpretation, and output comparison.
- fal.ai and the selected model providers it hosts: source or reference images and generation instructions used to produce image and video concepts.
- RevenueCat and the relevant app store: subscription verification, transaction status, guest app identifiers, and restoration.
- Vercel: hosting and delivery of this website.
Provider-side retention depends on the applicable service and configuration. A request setting that disables stored response history is not a promise of zero provider retention.
We may also disclose information when needed to comply with applicable law, protect users and the service, or complete a business transfer subject to appropriate protections.
Storage and retention
Local garage: saved files remain on your device until you remove them, clear app data, or the device or browser removes the storage. This version does not automatically back up or sync the garage between devices.
Temporary cloud media: unused source uploads are scheduled to expire after 24 hours. A used source is scheduled to expire 24 hours after its last job finishes, fails, or is canceled; an active job protects its source. Generated outputs are scheduled to expire seven days after creation. Hourly cleanup normally adds up to one hour, and failures can delay removal.
Operational records: after 30 days, the cleanup process is designed to remove identifying recipe and provider details from terminal jobs and remove reports and processed webhook payloads. Minimal usage, billing, consent, security, and restoration records can remain. Not all remaining accounting records currently have a fixed automatic deletion date; we retain them while needed for those purposes or legal obligations and review deletion requests individually. Infrastructure logs and backups follow the hosting providers’ applicable retention arrangements.
Exported copies in Photos, Files, email, or another app are controlled by those destinations. Deleting a Hog Soup record does not remove copies you exported elsewhere.
Your choices and deletion
You can decline AI processing and continue with local features. You can stop new cloud processing by not requesting new generations. Camera and photo permissions can be managed in your device settings.
Use Delete app data in the app’s Settings to clear the local garage and request deletion of the guest identity and associated cloud media. Deletion clears the recorded processing permission and attempts immediate media and guest-authentication removal; scheduled cleanup retries failed removal. A provider request already in progress may have been transmitted before deletion. Minimal records described above may remain.
For access, correction, deletion, or another privacy request, email contact@hogsoup.com. Include your in-app support ID if available. If you lost access to the device, explain that in your request. We may need to verify the request before changing or disclosing data. Depending on your location, you may have additional rights or a right to complain to a data protection authority. We respond as required by applicable law.
Deleting data or uninstalling the app does not cancel a subscription. Manage renewal through your original app-store account.
Website and diagnostics
This website does not install advertising or analytics cookies. It serves fonts from our own deployment. Hosting infrastructure processes technical request information, such as IP address, browser information, timestamps, and security logs, to deliver and protect the site.
Optional app diagnostics are disabled in the current TestFlight configuration. If enabled in a future configuration, Sentry can receive redacted errors, device and SDK diagnostic metadata, and fixed product milestone events. We will update relevant disclosures before enabling materially different collection.
Security and international processing
We use encrypted connections, private media storage, authenticated access, and time-limited media links. No system is completely secure. Our providers may process information in the United States and other countries where they operate; protections and legal requirements may differ from those in your location.
Children and policy changes
Hog Soup is not directed to children under 13. If you believe a child has provided personal information, contact us so we can review and address it.
We may update this policy as the service changes. The effective date appears above. We will provide additional notice or request renewed consent where required for material changes.