Trust & Security

ComicMe turns a selfie you capture in your browser into a four-panel comic strip using generative AI. You can save comics to a personal gallery and optionally email them to yourself.

You sign in with an email and password (or Google) before generating or saving comics. Sessions are managed by our backend provider using industry-standard JWT-based authentication over HTTPS.

AI generation and email endpoints require a valid signed-in session — anonymous calls are rejected.

Selfies you capture are sent to our backend to be transformed into comic panels. The resulting comic images are stored in a private storage bucket scoped to your account. Access is enforced server-side, and the app uses short-lived signed URLs to display your images — they are not world-readable by URL.

You can delete comics from your gallery at any time. Deleting a comic removes the associated image objects from storage.

We send the necessary image and prompt data to AI providers (Lovable AI and Replicate) to generate stories, dialogue, and stylized panels. We do not sell your data. Email delivery is handled by Resend when you choose to email a comic to yourself.

Comics remain in your gallery until you delete them or delete your account. To request full account deletion, contact us at the address below and we will remove your account and associated comic images.

If you believe you've found a security vulnerability, please email security@comicme.lovable.app with details and steps to reproduce. Please do not publicly disclose the issue before we've had a chance to respond.

ComicMe is built on Lovable Cloud, which provides the underlying authentication, database, storage, and edge function infrastructure. Platform-level security controls are operated by Lovable; application-level controls (access rules, validation, retention) are operated by the ComicMe team. Users are responsible for safeguarding their account credentials.