Privacy · Ladybug

Who we are

Ladybug is made by 92learns (Alan Ayoubi), registered in the Netherlands, KVK 86068040, VAT NL004193942B11, Langstwater 681, 1069 EG Amsterdam. We decide how your data is used, which makes us the controller under the GDPR. Write to [email protected] about anything on this page.

What stays on your device

Everything you edit. Source images, videos, webcam footage and every exported file are processed in your browser and saved on your own computer. They never reach our servers or anyone else’s, unless you choose to publish a piece to the community or attach a screenshot to a support message.

What we keep on our servers

We keep your account and what you choose to save or send us. Your pictures and videos stay on your device.

Your email address, and your name if you add one.
Project and preset settings you save to your account, with a small preview thumbnail so you can recognise them. Never the media itself.
Your plan (free or Pro) and, for Pro, your subscription status.
Posts you publish to the community, with their media, because you asked us to show them.
Support messages you send us, and any screenshot or file you attach.
Answers you give to our short surveys.

What your browser keeps for Ladybug

These are needed for Ladybug to work, so they need no permission, and they never go to anyone else.

A sign-in cookie, for up to 30 days, so you stay signed in.
Two short cookies, for 10 minutes each, that keep Google sign-in and account restore secure.
Your cookie choices, for six months.
Your light or dark setting, and a count of the free exports you have used.
In the studio: your projects, settings, pinned controls and the models you download, so your work is there next time.

How we see what works

We count what happens in Ladybug, not who does it: which pages and steps people reach, where they stop, which effects are used and what fails. What we keep are totals. To count how many people visit each day, we turn your IP address and browser type into a code that changes every day, is deleted the next day and cannot be traced back to you; the IP address itself is never stored.

Ladybug also keeps a random number in your browser. Outside the European Union, the EEA, the UK and Switzerland we use it for anonymous journeys, to see where people get stuck: the steps that number took and whether it had an account or Pro, never your name, your email or your account. Journeys are kept for 90 days. Inside those countries we keep a journey only if you accept it; otherwise the number only helps count each day’s visits and graphics errors, through the same daily code. If you say no later, your journey stops, and what it kept is gone within 90 days.

Advertising

We advertise on Facebook and Instagram, and this website and the studio can use the Meta Pixel to see which ads work. When it is on, it sets Meta’s cookies in your browser and tells Meta which of our pages you visit.

If you are in the European Union, the EEA, the UK or Switzerland, we ask when you first arrive, and nothing goes to Meta unless you accept. Everywhere else it is on, unless your browser sends a Global Privacy Control signal, which we treat as a no.

Under the same rules, when you create an account, start a checkout or go Pro, our server tells Meta too, so the event is counted even when the Pixel is blocked. With it we send your email address and account number in hashed form (Meta compares hashes, never the originals), your IP address, your browser type, Meta’s cookie and, for a purchase, the amount in US dollars. For a checkout we keep your IP address, browser type and Meta’s cookie for at most 7 days, just long enough to report the purchase. After that we keep only a note of whether the purchase was reported, linked to your account, for 90 days or until you close your account, so that no purchase is ever reported twice.

Meta never receives your images, video, projects or anything you make. How Meta uses this data is set out in Meta’s privacy policy, and you can change your ad preferences in your Meta account.

Separately from Meta, and whatever you choose, we count which of our ads and links bring visits, sign-ups and purchases, using the codes in the link you arrived by. We keep these as totals. To count a purchase, the checkout keeps only those codes, never your name or account, until the purchase is counted, and for at most 7 days. None of this goes to Meta.

Your choices

In the European Union, the EEA, the UK and Switzerland we ask on your first visit to theladybug.app or the studio, and one answer covers both. Accept or Reject answers for journeys and advertising together. Reject keeps only the cookies the site needs to work. Show more about your choices lets you answer for each one, and the site works the same either way. Change your choices any time with Cookie settings at the bottom of every page of this website or in the studio’s Help menu. Each choice lasts six months, then we ask again. We keep a record that a choice was made, with no personal details, for 13 months, because the law asks us to be able to show it.

Support

When you send a message through Get help, we attach technical details that help us fix things: the app version, your browser and screen size, your graphics card, and which effects and layers you were using. Never your files, their names, text you typed or your picture. Whether a screenshot of your canvas is attached is up to you: it has its own tick box in the form.

Why we use your data

Your account, sync, Pro, support and the emails you ask for: to give you the service you signed up for.
Security (the bot check, sign-in protection, preventing fraud), the storage Ladybug needs to work, the anonymous totals and the daily visitor count: our legitimate interest in running a safe service and improving it.
Advertising and journeys in the European Union, the EEA, the UK and Switzerland: your consent, which you can withdraw at any time.
Advertising and journeys everywhere else: our legitimate interest in measuring our ads and improving Ladybug. You can object to either at any time with Cookie settings, and a Global Privacy Control signal counts as an objection to advertising.
Surveys: your consent. They are always optional.

Who we share it with

We never sell your data. These providers handle it for us, only for what we describe here:

Cloudflare: hosting, storage and the bot check.
Paddle: payments, as our merchant of record.
Resend: sending our emails.
Google: only if you choose to sign in with Google.
Meta: advertising, as described above.
Bunny: our tutorial videos.
Hugging Face: the model files the studio downloads when you use a feature that needs them.

Data outside Europe

Some of these providers are in the United States. When data goes there, it is protected by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

How long we keep it

Your account and what it holds: until you delete it, then as described under Deleting your account.
Checkout details for advertising (IP address, browser type, Meta’s cookie, the ad codes): at most 7 days.
The note of whether a purchase was reported to Meta: 90 days, or until you close your account.
Journeys: 90 days.
Records of your cookie choices: 13 months.
Anonymous totals: kept as totals, which identify no one.
Payment records: kept by Paddle, as tax law requires.

Your rights

You can ask to see, correct or delete your data, to limit or object to how we use it, and to receive it in a portable form. Where we rely on your consent you can withdraw it at any time, which does not affect what happened before. Write to [email protected] and we will answer within a month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Age

Ladybug is for people aged 13 and over. If you are under 16, ask a parent or guardian before you say yes to advertising or journeys, and before you buy Pro.

Emails

We send sign-in codes when you ask for them, and receipts if you go Pro. No newsletters without your explicit consent.

Payments

Pro payments are handled by Paddle, our merchant of record. Your card details go to Paddle directly and never touch our servers.

Deleting your account

You can delete your account from inside the app at any time. It closes at once: you are signed out everywhere, your posts leave the community feed and the roadmap, and exports and sync stop. If you have a paid plan, it is cancelled when you ask, before the account closes, with no automatic refund. Your invoices stay with Paddle, our payment provider.

For 14 days you can change your mind: sign in again and your account comes back. Pro does not come back with it.

After 14 days we erase everything the account owns: your settings, looks and presets, projects kept on our servers, community posts and their media, comments and likes, support messages and attachments, survey answers and sign-in records. Copies of media on our content network can take a short while longer to leave its caches.

For 180 days after that we keep only three things: a keyed hash of your email address (never the address itself), your Paddle customer and subscription ids, and the number of exports you used. They let us recognise a billing message that arrives late, and they stop free exports from starting over when someone signs up again. Then they are deleted too.

Files on your computer are yours and stay exactly where they are.

Questions

Write to [email protected].