Privacy Policy

1.1 Information You Provide

• Facial Photos: Selfies and photos you upload for AI analysis of face shape, skin tone, and features.
• Personal Profile: Age, style preferences, lifestyle information, and beauty goals.
• Account Information: Name, email address, and subscription details.
• Feedback: Details you share when contacting our support team or rating recommendations.

1.2 Automatically Collected Information

• Device Information: IP address, operating system, device type, and App version.
• Usage Data: Actions performed within the App (e.g., feature usage, recommendation interactions).
• AI Analysis Results: Computed data about your face shape, skin tone, color season, and style profile.

1.3 Third-Party Services

We share data with the following third-party services to provide our features:

• OpenAI: Facial photos and style data are processed through OpenAI's GPT-4 Vision API for AI-powered facial analysis, face shape determination, and personalized style recommendations. Images submitted via API are not used for model training per OpenAI's API terms.
• Google Gemini: Facial photos may be processed through Google Gemini for AI-powered image generation, styling visualizations, and personalized recommendations.
• Analytics: Mixpanel for understanding user behavior and app improvements (does not receive facial photos or biometric data).
• Payments: Stripe for subscription processing and RevenueCat for subscription management (does not receive facial photos or biometric data).

3.1 Facial Analysis

When you upload photos, our AI analyzes:

• Face shape and proportions
• Skin undertones and color characteristics
• Eye color and shape
• Hair color and texture (if visible)

3.2 Data Protection for Photos

• Photos are encrypted during transmission to third-party AI services
• We do not store original photos on our servers
• Photos are immediately deleted after AI processing is complete
• Only computed features and analysis results are retained on our servers
• Original photos and generated images are stored locally on your device only
• No photos are shared with third parties for marketing purposes

3.3 Biometric Data Rights

In jurisdictions with biometric privacy laws:

• We obtain explicit consent before collecting biometric data
• You can request deletion of biometric identifiers at any time
• Biometric data is not sold or shared for commercial purposes

3.4 Detailed Face Data Collection and Use

5.1 Data Protection

We implement comprehensive security measures including:

• End-to-end encryption for photo transmission
• Secure cloud storage with encryption at rest
• Regular security audits and penetration testing
• Access controls and multi-factor authentication
• SOC 2 compliant infrastructure

5.2 AI Model Security

• AI processing occurs in secure, isolated environments
• Models are regularly updated to prevent bias and improve accuracy
• No training data includes personally identifiable information

6.1 Age Verification

We do not knowingly collect information from children under 13. If we discover we have collected such information, we will:

• Immediately delete all associated data and photos
• Terminate the associated account
• Notify parents/guardians if possible

8.1 GDPR Compliance (EU Users)

For EU users, we ensure compliance with GDPR through:

• Explicit consent for facial analysis processing
• Data minimization and purpose limitation
• Right to be forgotten implementation
• Data Protection Officer appointment

8.2 Data Transfers

Data may be transferred to the United States for processing. We ensure adequate protection through Standard Contractual Clauses and other approved mechanisms.