Privacy Policy
Everyone's Design Studio Management ("Management") explains below how information is handled in Heartopia Everyone's Design Studio ("Service"). This is an unofficial fan-made tool with free features and optional paid plans, and is not an official Heartopia service.
1. Information Collected
We collect information needed to provide and operate the Service, prevent misuse, respond to inquiries and improve features. This includes Firebase user IDs, email addresses, login dates, in-app nicknames, saved and published designs, titles, favorites, optional social media accounts and Heartopia IDs, inquiry content, usage records, and analytics and advertising information. Google Login is used for authentication. Google account names and profile photos are not used as your public in-app profile; the app displays the nickname you set in the Service.
Ordinary image conversion is primarily processed in your browser. AI generation and conversion send necessary original/reference images, instructions and pattern information to the processing provider. Originals, results and processing records are stored with restricted access for recovery, reuse and troubleshooting. Generation data is retained for 180 days from generation and is eligible for automatic deletion afterwards. That limit does not apply to separately saved designs or work in progress. Results are not published to other users unless you publish them.
For paid plans, we retain customer, subscription and payment identifiers, subscription status, and diamond grant and usage records. Payment providers process card details; ARTPIA does not store card numbers on its servers.
2. Purposes
Information is used as necessary for authentication and account management; creating, saving, editing, publishing and sharing designs; requested AI processing, result storage, recovery and troubleshooting; paid enrollment, billing, changes and cancellation; diamond grants, consumption and expiration; payment errors, refunds, chargebacks, accounting and legal duties; inquiries and privacy or rights requests; preventing misuse; maintenance, improvements, analytics and advertising. We obtain prior consent when legally required for a change of purpose or use beyond those purposes.
3. Public Information
If you publish a design, your in-app nickname, published image, title and favorite count may be shown to others. Social media accounts and Heartopia IDs are optional and appear publicly when you permit publication of those fields.
4. Google Login
Firebase Authentication provides identifiers and email addresses for sign-in and verification. Your Google account name and profile photo are not used as your public in-app profile. The Service displays your chosen in-app nickname.
5. Google Analytics
We use Google Analytics to understand usage and improve the Service. Cookies and similar technologies may collect access information for statistical analysis rather than direct personal identification. Browser settings and Google's opt-out tools may allow you to disable collection.
6. Google AdSense
We use Google AdSense for advertising. Cookies may be used for ads based on interests and browsing. Browser and Google ad settings can be used to manage personalized advertising.
7. Third-Party Services
The Service uses Google (Firebase / Google Cloud) for authentication, storage and operation; Google Analytics / Google AdSense for analytics and advertising; and Stripe / Link for payments and subscriptions. These services handle the account information, saved data, usage information and payment details needed for their tasks. Payment providers process card details; ARTPIA does not store card numbers.
For requested AI generation or conversion, necessary original/reference images, instructions and pattern information are sent to the processing provider: OpenAI, Google Gemini or PixelLab. We do not send every image to every provider.
ARTPIA retains originals, generated results and related records with restricted access for 180 days for recovery, reuse and troubleshooting. This limit does not apply to separately saved designs or work in progress. Results are not published to other users unless you publish them.
External AI providers' retention and training use depend on their contracts, settings and data-handling terms. ARTPIA's 180-day period does not define their retention periods. See the provider information below. Do not input other people's personal information without the required rights or consent, sensitive personal information or confidential information.
Information may be processed outside Japan. For international transfers of personal data, we review contractual safeguards and provide information about destination countries and protective measures, and obtain consent, where required by applicable law. Questions and requests for information about data handling or international transfers are accepted through Section 10.
Provider information:
Google: https://policies.google.com/privacy
Firebase: https://firebase.google.com/support/privacy
Stripe: https://stripe.com/privacy
Link: https://link.com/privacy
OpenAI API: https://developers.openai.com/api/docs/guides/your-data
Gemini API: https://ai.google.dev/gemini-api/terms
PixelLab: https://www.pixellab.ai/privacypolicy
8. Third-Party Disclosure
We do not provide personal data to third parties without prior consent except where permitted by the Act on the Protection of Personal Information or other applicable law. Operational convenience, abuse prevention or handling a dispute alone does not authorize disclosure beyond those grounds.
We may outsource payment, authentication, storage, AI processing and other work within the scope necessary for the stated purposes, with necessary and appropriate supervision of processors. Disclosures that are not outsourcing and international transfers must meet their respective legal requirements.
9. Security
We use authentication and access restrictions, protected communications and separation of public and private information to help prevent unauthorized access, loss, alteration and disclosure. We also review outsourced handling. If an incident occurs, we make legally required reports and notifications and take necessary action. Information about security measures is available through Section 10, except details whose disclosure would undermine those measures.
10. Contact and Individual Rights
Contact Everyone's Design Studio Management through the Service's contact form without signing in or at artpiatool@gmail.com. Requests for the personal information controller's name, address and, for a corporation, its representative are also accepted through this contact.
We accept requests concerning notice of purposes, disclosure, correction, addition, deletion, suspension of use, erasure, stopping third-party disclosures and disclosure of third-party transfer records. Identify the information and the action requested. We verify your identity or an authorized representative's authority as necessary and respond without undue delay under applicable law. We explain verification steps and required documents after receiving the request, and give reasons if we cannot comply under law. Do not send passwords or card numbers.
11. Policy Changes
We may update this policy when laws, features or data practices change. We announce changes and their effective date, with advance notice for important changes. Where new purposes or disclosures require consent, we obtain it before applying the change. Posting the policy or continued use alone does not replace legally required consent.
11-2. Account Deletion and Retention
You may request deletion in My Page > User settings after Google identity verification and final confirmation. This does not delete your Google account. We delete the profile, saved designs, work progress, published works, completion images, favorites and inquiries sent while signed in. Copies of published designs in favorites are included; independent copies saved as other designs, downloads, external shares and search caches cannot be removed.
For paid accounts, subscription termination in Stripe is confirmed before design data is deleted. Remaining paid access ends. Deletion does not automatically issue a refund; legally required refunds and remedies are preserved. Canceling renewal alone preserves the account and designs and access until the paid period ends.
Saving and publishing are blocked during deletion to prevent recreation. Interrupted deletion can be resumed on next sign-in. Authentication information is removed after the designs and images.
Minimal completion records, including user ID and processing timestamps, are scheduled for deletion approximately 30 days after completion. Stripe/Link payment records and corresponding identifiers are retained with restricted access for periods required by accounting and tax obligations, refund/chargeback windows and unresolved disputes. They are deleted or de-identified when no longer necessary. Minimal abuse-prevention records may also be retained. Backups, non-identifying statistics and diagnostics, and provider records follow their respective retention policies. Questions may be submitted through the contact form.
12. Dates
Established: April 26, 2026
Last updated: October 11, 2026