Privacy Policy

Last updated: 10 July 2026

This policy explains what personal information rompix collects, why we collect it, who we share it with, and the choices you have. By using rompix you agree to the handling of your information as described here.

Who we are

rompix is operated by BlocksFusion Pty Ltd (ABN 25 697 273 037), based in New South Wales, Australia. For any privacy question or request, contact us at hello@rompix.com.

Information we collect

• Account information. When you sign in with Google, we receive your email address and basic profile details (such as your name) from Google. We use this to create and identify your account.
• Content you create. The prompts you write, reference images you upload, and the images and videos you generate. This content is stored so you can return to your iteration trees.
• Billing records. Your credit balance and a record of the credit purchases and any subscription you make through Stripe. Payments are handled by Stripe — we never receive or store your full card number.
• Connected provider keys (optional). If you subscribe and choose to connect your own AI provider keys (for example Google Gemini or Kling), we store those credentials encrypted at rest and use them only to run the generations you request. You can remove them at any time.
• Technical logs. Basic operational data such as request timing and error records, used to run the service securely and reliably.

How we use your information

• To run the AI generations you request and to store your results.
• To manage your credit balance, process purchases, and prevent duplicate or abusive spending.
• To secure the service, detect misuse, and diagnose problems.
• To respond to your support requests.

We do not sell your personal information, and we do not use your prompts or generated content to advertise to you.

Sub-processors

We share limited information with the service providers that make rompix work. Each processes data only to provide its part of the service, under its own privacy terms:

• Google — sign-in and account authentication.
• Stripe — payment processing. Stripe handles your card details under its own privacy policy; we never receive your full card number.
• Google (Gemini) and Kling — the AI models that produce your images and videos. The prompt text and any reference images needed for a generation are sent to the relevant provider to produce your result.
• Sentry — application error monitoring. Error reports may include a pseudonymous account identifier and technical details, but not your email, name, or generated content.
• Google Analytics — product and traffic analytics, loaded only after you accept analytics cookies. It receives pseudonymous usage data (such as pages viewed and a random client identifier) to measure traffic and the sign-up funnel, but never your email, name, or generated content.
• Our cloud hosting and object-storage provider — to run our servers and store your account data and generated media.

The prompts and reference images sent to an AI provider are processed by that provider under its own terms and privacy policy in order to return your result. We do not sell your information or use these providers to advertise to you.

Data retention and deletion

We keep your account information for as long as your account is active. Your prompts and generated media are retained until you delete them or delete your account.

You can delete your account and its data from your account settings. Deletion disables your account immediately — your sessions end and your content becomes inaccessible — and the data is permanently erased after a short grace period (currently up to seven days, which lets you reverse an accidental deletion). Erasure removes your account profile, your prompts, uploaded references, generated images and videos, your credit balance, and any connected provider keys. If you subscribe, deleting your account also cancels the subscription.

What we retain after deletion. We keep financial and transaction records (for example, the amount and date of a purchase and its Stripe reference) for as long as required to meet our legal, tax, and accounting obligations. After deletion these records are anonymised — the link to your account is removed so they can no longer identify you. Separately, operational logs and error reports may retain a pseudonymous account identifier (never your email or name) until they age out of their normal retention window.

Your rights

You can access, export, correct, or delete your information yourself from the app, or by emailing hello@rompix.com. We handle personal information in line with the Australian Privacy Principles and will respond to your request within a reasonable time.

Cookies

rompix uses a first-party essential cookie that keeps you signed in — clearing it simply signs you out. When you begin signing in we also set a short-lived first-party cookie that remembers which campaign or link brought you here, so the account you create records where it came from; it lasts 30 minutes, is never readable by scripts, is never shared with anyone else, and is not set at all if you only browse the site. With your consent, we also use Google Analytics to understand how the site and app are used so we can improve them. Analytics cookies are set only after you accept the cookie banner; until then no analytics cookies are stored and nothing is sent to Google Analytics.

Your choice is remembered in a rompix_consent cookie shared across rompix.com and app.rompix.com, so you are asked only once. You can change or withdraw your choice at any time using the “Cookie settings” control in the footer, or by clearing the rompix_consent cookie in your browser. We use Google Analytics for analytics only — we do not enable advertising or cross-site ad features, and we never send Google Analytics your email, name, or account identifier.

Security

Your account and content are isolated per user, we encrypt any connected provider keys at rest, and we use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.

Age requirement

rompix is intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as the service evolves. When we make material changes, we will update the date at the top of this page.

Contact

Questions about privacy? Email hello@rompix.com.