Style Pro AI

Style Pro AI - Privacy Policy

Last updated :- 2026-09-24
This Privacy Policy explains how Style Pro AI handles your data.

The short version

You take a selfie. We send it to an AI provider for analysis. If you are not signed in, we do not store the image or the result at all. If you are signed in, we still store them only if you switch retention on in your profile settings — both switches are off by default. Live try-on runs on your device. We never sell your data. The details are below.

What we collect

⇰ Selfie images — sent to our AI provider to perform the analysis and held in memory for the request. The image is saved to our private storage only if you are signed in and you have turned on Retain face images in your profile settings. It is off by default. That setting also needs Retain analysis results on: a stored face image is deleted automatically about 24 hours later unless a saved analysis still refers to it.

⇰ Analysis results — the JSON we get back (skin tone, undertone, face shape, and similar). Saved only if you are signed in and you have turned on Retain analysis results in your profile settings. It is off by default.

⇰ Account data — you can sign in with Google, with Apple, or with your phone number by one-time SMS code. We store the email address, name and avatar your sign-in provider gives us, and your phone number if you sign in that way.

⇰ Optional profile details — if you fill them in on your profile, we store your name, date of birth, gender, and city. You can leave these blank.

⇰ Cycle data — only if you turn on cycle sync and consent to it. See Health and cycle data below.

⇰ Per-device data — your wishlist, history, diary entries and photos, and saved looks are stored in your browser or app storage on your device. They are not uploaded to us. See Data kept on your device below.

⇰ Push data — if you turn on notifications, we store the device push token or browser push subscription and your notification preferences, so we can send the notifications you asked for.

⇰ Outbound product clicks— when you click “Buy” on a product card, we log the click (product ID, destination, the referring page, your browser's user-agent string, and a coarse country). We do not store your IP address for this and we set no cookies of our own. This is for affiliate attribution and aggregate analytics.

⇰ Server logs — our hosting provider records standard request logs, which include IP address and user-agent.

Health and cycle data

Style Pro AI includes an optional cycle-sync feature. It is off unless you turn it on and give consent, and it is not available in every build of the app.

⇰ If you use it, we store the cycle phase and cycle day you record, and any notes you type.

⇰ Notes are encrypted before they are stored on our server (AES-256-GCM). If the encryption key is not configured, the app refuses to save the note rather than storing it unprotected.

⇰ Turning cycle sync off deletes your stored cycle logs.

This feature is for personal tracking and styling suggestions only. It is not a medical device and does not provide medical advice or diagnosis.

Camera, Try On and Live Coach

⇰ Try On — the face-mesh tracking that places makeup shades on your face runs on your device. Camera frames are not uploaded, and snapshots you capture stay on your device unless you save or share them yourself. Try On downloads its face-mesh model and code from third-party hosts (jsDelivr and Google), which see your IP address as part of that download.

⇰ Live Coach — a separate feature you have to start, available on paid plans and not enabled in every build. While it is running, a still frame is sent to our AI provider every few seconds so it can give you feedback. Those frames are not saved on our servers.

⇰ Photo scans — ingredient scans, product identification and the empties scanner send the photo you choose to our AI provider for that request. Those images are not stored on our servers.

AI processing and chat

⇰ Depending on how the app is configured, analysis and chat requests are handled by Microsoft Azure OpenAI, Google, or OpenRouter. OpenRouter is a routing service and may pass the request on to another model provider, under that provider's own terms.

⇰ We do not send your name, email, phone number or account ID to these providers with the request.

⇰ Chat — your messages are sent to the AI provider to produce a reply. If you have run an analysis, your most recent analysis may be included as context so the answers fit you. We do not store your chat messages on our servers.

Analytics

When analytics is enabled for a build, we use PostHog as our analytics processor. It records page views and basic interaction events, and it receives your IP address. We do not currently run crash or error reporting. We do not use advertising trackers.

Data kept on your device

⇰ Your wishlist, analysis history, diary entries (including any diary photos), saved looks and similar items are stored locally in your browser or app storage. They stay on your device and are not uploaded to us.

⇰ Signing out does not clear this local data, and neither does deleting your account.To remove it, clear your browser's site data, or delete the app's data on your device.

Who processes your data

⇰ AI providers (Microsoft Azure OpenAI, Google, OpenRouter) — perform the visual analysis and chat replies, as described above.

⇰ Microsoft Azure — hosts our application, database and file storage (Azure App Service, Azure Database for PostgreSQL, Azure Blob Storage). Account data and any retained images or analyses are stored here, and Azure receives standard server logs.

⇰ Firebase (Google) — Firebase Authentication handles sign-in. Firebase Cloud Messaging delivers push notifications when you enable them.

⇰ PostHog — analytics, when analytics is enabled for a build.

⇰ Stripe— handles subscription payments where payments are offered. Payment happens on Stripe's own checkout page; we never see your card details, and we store only which plan you are on.

⇰ OpenWeather — supplies local weather for climate-based routine suggestions, when you use that feature.

⇰ jsDelivr and Google — host the on-device Try On model and code that your device downloads.

⇰ Affiliate networks (Sovrn, Skimlinks, Impact, Amazon Associates) — when you click an outbound product link, the destination retailer may set their own cookies under their domain so we can be credited with a commission if you purchase. We never receive your purchase details — only a binary “converted” signal and the commission amount.

What we do NOT do

⇰ We do not sell your data to anyone.

⇰ We do not share your selfies or analyses with third parties beyond the processors listed above.

⇰ We do not use your data to train AI models ourselves, and we rely on our providers' published API terms for the same.

⇰ We do not share data across users (your wishlist is yours, no one else can see it).

⇰ We do not run third-party advertising trackers.

Your rights

You can:

⇰ Delete your account from your profile settings. This deletes the account record we hold and everything linked to it — analyses, looks, diary records, saved products, events, cycle logs, push tokens and notification preferences — along with any stored images in our storage. Your sign-in identity with Google, Apple or your phone number is held by Firebase Authentication and may remain after deletion; you can also remove the app's access from your Google or Apple account settings. Data stored locally on your device is not affected (see above).

⇰ Change what is retained — Retain analysis results and Retain face images in your profile settings control whether new analyses and selfies are saved to your account. Both are off by default, and switching either off stops future retention; it does not delete what was already saved. To remove data we already hold, delete your account.

⇰ Request a copy of your data — email us and we will put it together for you by hand.

⇰ Turn cycle sync off at any time, which deletes your stored cycle logs.

⇰ Withdraw consent by signing out and clearing your browser or app storage.

If you're an EU/UK user (GDPR) or California user (CCPA), all of the above are your statutory rights and we honor them.

Children

⇰ Style Pro AI is intended for users 13 years and older. The face-analysis pipeline includes a minor-protection check: if the analysis suggests a likely minor, we discard the request and store nothing.

⇰ Data controller: Style Pro AI. For GDPR / CCPA requests, write to the same address — we respond within 30 days as required.