Your references are encrypted in transit and at rest, used only to make your own characters. Delete a character and all its generations in one tap. We never sell your data or train on it without your opt-in.
The deletion is the part worth reading twice: removing a character removes the generations made from it, so you are not left with a deleted identity that still has outputs scattered behind it.
Identity protection is also a product surface here, not only a policy page. FaceShield exists so a likeness can be detected and protected rather than quietly reused, and digital twins are built to be licensed deliberately — you decide what your likeness is used for, and you can withdraw it.