Privacy Policy

Last updated: April 18, 2026

This policy explains what data we collect when you use Nano Banana, why, and how long we keep it. Written in plain English, no unnecessary legalese.

Data controller

IP Isaev V.V., operator of the Nano Banana service at nano-banana.pt. Privacy queries: privacy@doitong.com.

What we collect

Anonymized IP address (only /24 subnet) — to prevent abuse of the free tier.
Browser fingerprint — combination of screen, fonts, timezone; does not identify you personally.
Prompts and generated images — for 30 days to allow re-download. Then automatically deleted.
Email — only if you create a Pro or Nano Banana 2 account.
Payment data — processed exclusively by Stripe. We never see your card number.

What we do NOT do

We do not sell data to third parties.
We do not share prompts with advertising partners.
We do not use your prompts or images to train AI models.
We do not publish your content without explicit permission.

Processing via Google Gemini

Generations are sent to Google's official Gemini API in European data centers. Google does not retain prompts for training (API enterprise clause) and has no access to your identity — we only send the prompt.

Cookies and local storage

We use the browser's localStorage to store your anonymized fingerprint and generation history for 30 days. We do not use third-party tracking cookies. No Google Analytics in the current version.

Your rights (GDPR)

Right to access your data.
Right to rectification.
Right to erasure ("right to be forgotten").
Right to data portability.
Right to object to processing.

Email privacy@doitong.com to exercise any of these rights. We respond within 30 days.

Supervisory authority

If you believe we are not complying with GDPR, you can file a complaint with Portugal's National Data Protection Commission (CNPD).

Changes

If we change this policy, we update the date at the top and email Pro/Nano Banana 2 users 30 days in advance when the change is material.