Privacy Policy

1. Data we process

• Anonymous ID (Android app). The app does not ask you to sign in. Firebase creates a random anonymous ID for your installation that is not linked to your name or Google account.
• Photos you upload. When you use the AI try-on, the photo you choose and the selected hairstyles are sent over an encrypted connection to our server on Cloudflare and forwarded to OpenAI to create the preview images. Our server does not store your photo or the generated images.
• Your history. Your photos and results are saved only in the app on your own device. They are not uploaded to us.
• Subscription and credits. Linked to your user ID we store your plan, renewal date, credit balance, the ID of your Google Play purchase, and a daily usage counter (deleted after 48 hours).
• Payments. Subscriptions and credit packs are sold in the Android app and processed by Google Play. We never receive your card or bank details.
• Technical data. Our hosting provider Cloudflare processes your IP address and browser information to deliver the site and protect it against attacks. We use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.

2. Why we process it

• To provide the Service you asked for — creating previews, managing your subscription and credits (performance of a contract).
• To prevent fraud and abuse and keep the Service secure (legitimate interest).
• To meet legal obligations such as tax and accounting rules.
• Your photo is sent for AI processing only after you agree to it in the studio (consent). You can withdraw consent by not uploading photos.

3. Cookies and browser storage

We do not use advertising or tracking cookies. The website stores in your browser only your style-quiz answers so the quiz can show your results again.

4. Service providers

• OpenAI — creates the hairstyle images. Data sent through the OpenAI API is not used to train models and may be kept for up to 30 days for abuse monitoring.
• Cloudflare — website hosting, our server, analytics and storage of subscription records.
• Google — Firebase Authentication (anonymous app ID) and Google Play (payments).

5. International transfers

These providers may process data outside your country, including in the United States, under safeguards such as the EU Standard Contractual Clauses.

6. How long we keep data

• Uploaded photos are not stored on our server.
• Daily usage counters are deleted after 48 hours.
• Subscription and credit records are kept while your account is in use and deleted on request, unless the law requires us to keep them.
• History on your device stays until you delete it or clear your browser data.

7. Your rights

Under the EU GDPR, Turkey's KVKK and similar laws you can ask to access, correct, delete or export your data, and object to or restrict its processing. Write to [email protected]; we reply within 30 days. You can also complain to your data protection authority (for example the Bulgarian Commission for Personal Data Protection or Turkey's Personal Data Protection Authority).

8. Children

The Service is for people aged 18 and over. If you believe a child has used it, contact us and we will delete the data.

9. Security

All traffic is encrypted (HTTPS). Every request to our server must carry a valid Firebase app token, and the AI provider key is kept only on the server.

10. Changes

We may update this policy. The new version is published on this page with a new date.