Washington Consumer Health Data Privacy Notice

Under the Washington My Health My Data Act · Separate from and in addition to our Privacy Policy · Electric Wonder LLC d/b/a FriedAI · support@fried.ai · 418 Broadway, Ste N, Albany, NY 12207

The short version: The only consumer health data we handle is the photo of your face that you upload to make your album covers. We use it only to generate your covers and to run safety screening, we delete it within 72 hours of upload, we never sell it, and we never use it for advertising. You can withdraw consent and delete your data at any time.

1. About this notice

This is the Consumer Health Data Privacy Policy for fried.ai, provided under Washington’s My Health My Data Act (RCW 19.373). It applies to Washington residents and to consumers whose consumer health data is collected in Washington. It covers only consumer health data as that term is defined by the Act. For all other information we handle, and for our full data practices, see our Privacy Policy.

fried.ai is operated by Electric Wonder LLC, doing business as FriedAI. We are the entity responsible for the consumer health data described here. You can reach us at support@fried.ai.

2. What consumer health data we collect

fried.ai turns a photo of your face into stylized album-cover artwork. Because a photograph of your face is biometric data, it is treated as consumer health data under the Act. The consumer health data we collect is:

The photograph or selfie you upload, which depicts your face and which we use to generate your album covers.
A temporary, machine-generated description of your appearance derived from that photo during rendering, used only to build your covers.

We do not collect any other category of health data. We do not use your photo to identify or verify who you are, we do not create face-recognition templates, and we do not match your face against any database.

3. Where this data comes from

We collect this consumer health data directly from you, at the moment you choose to upload a photo. We do not buy it, and we do not obtain it from data brokers or other third parties.

4. Why we collect it (purposes)

We collect and use this consumer health data for two purposes only:

To generate the AI album-cover artwork you request.
To run safety and content-moderation screening on uploads, so we can enforce our rules (for example, blocking content that appears to depict a minor or someone other than you). These are automated content-category checks; they do not create face-recognition templates or determine anyone’s identity.

We do not use this data for any other purpose. We do not use it for advertising, and we do not use it to train AI models.

5. How this data is shared

We share consumer health data only with service providers (processors) that act on our instructions under contract, and only as needed to provide the Service:

OpenAI: generates the artwork and runs automated safety screening. It does not use your content to train its models, and retains it only transiently to process the request and for a limited period for abuse monitoring.
Trigger.dev: runs the background render pipeline your photo passes through during a render.
Supabase: hosts the storage and database where your upload lives temporarily.
Cloudflare: provides abuse prevention on the create flow.
Resend: delivers service email such as sign-in links and render notifications.
Vercel: hosts and serves the website.

We do not sell consumer health data, and we do not share it for advertising. We may disclose it only where the law compels us to, or to protect people’s safety as the law requires. We do not share it with any other person for that person’s own purposes.

6. How long we keep it

Your uploaded photo and the temporary appearance description derived from it are deleted from our systems within 72 hours of upload, whether or not a cover is generated, and are never written to backups. Our AI provider receives the photo only to generate your covers and retains it briefly for abuse monitoring before deletion, without training on it. The full schedule is in our Retention and Destruction Schedule. The only exception is the narrow, legally required case where a specific upload is blocked by safety screening or reported for a safety violation, in which case we preserve that copy as evidence for as long as the law requires; that never applies to ordinary uploads.

7. Your rights

As a Washington resident, with respect to your consumer health data you have the right to:

Confirm and access whether we are collecting, sharing, or selling your consumer health data, and access that data.
Withdraw consent to our collection and processing of your consumer health data.
Delete your consumer health data.

We do not sell consumer health data, so we do not ask you for any separate authorization to sell it.

We will not discriminate against you for exercising any of these rights.

8. How to exercise your rights

You can withdraw consent and delete your data yourself at any time in Settings → History and Data: deleting your photo, or deleting your account, withdraws consent for further processing and removes your data on the schedule above. You can also delete individual covers there.

To confirm or access your consumer health data, to withdraw consent, or to make any other request under this notice, email us at support@fried.ai. We verify requests against your account email and respond within the time Washington law requires. If we decline a request, we will explain why and how to appeal; you may also contact the Washington State Attorney General.

9. Contact

Electric Wonder LLC d/b/a FriedAI · support@fried.ai · 418 Broadway, Ste N, Albany, NY 12207