Last updated: 16 August 2026
Hairstyle Try-On Color Changer ("App", "we", "us", or "our") respects your privacy. This Privacy Policy explains what information the App collects, how it is collected, how it is used, who it is shared with, and how it is protected. By using the App, you agree to the collection and use of information as described in this policy.
Information We Collect
a) Photos
The App allows users to select a photo from their device library, or take one with the camera inside the App, to apply hairstyle and hair color effects.
How it is collected: only when you actively choose a photo or take one inside the App. The App never scans, reads, or uploads your photo library in the background, and cannot access photos you have not chosen.
Photos are used solely to provide the core functionality of the App: generating your hairstyle and hair color previews, and describing your current hair if you use the hair analysis feature.
To generate hairstyle and hair color results, your selected photo is sent to the third-party AI services listed under "Data Sharing" below. This only happens after you grant permission through the in-app consent prompt, and only when you tap to generate. If you decline, or later withdraw permission, no photo is sent and the AI features stop working; the rest of the App continues to function.
Photos are not linked to your name or email address.
We do not perform facial recognition or biometric identification. The third-party AI models may process facial features solely to render the requested hairstyle or color effect, and do not use this data to identify you.
b) Prompts, messages, and style preferences
How it is collected: text you type into the App, styles you tap, and the hair goal and hair texture you select during onboarding.
Used for: instructing the AI models what preview to create, and answering your hair questions.
c) Generated images
How it is collected: produced by the AI services from your photo and prompt.
Used for: showing you your result and keeping your in-app history.
d) Analytics Data
The App uses PostHog to understand how users interact with the App and to improve features and performance.
Analytics data includes product interactions such as taps, screens viewed, and app launches. A device-level identifier may be used for analytics purposes.
PostHog also records session replays — a reconstruction of what appeared on your screen while using the App. Because the App is a photo app, these replays can include the photo you selected and the text you typed. Session replays are used only to diagnose problems and improve the App, are stored by PostHog, and are not used for advertising.
Analytics data is not linked to your personal identity and is not used for advertising purposes.
e) Crash and Diagnostic Data
The App collects crash and diagnostic data to identify errors and improve app stability. This data is technical in nature and is not linked to your identity. It is not used for tracking, advertising, or marketing purposes.
f) Feedback you send
How it is collected: only when you tap Feedback in the App menu and write to us. Your message, and technical details about your device and app version, are sent to Wiredash.
Used for: responding to and acting on your report.
g) Push notification data
How it is collected: if you allow notifications, Google Firebase Cloud Messaging issues a device token which the App stores on our servers.
Used for: sending you the notifications you agreed to receive. You can turn notifications off at any time in your device settings.
h) Purchase and Subscription Data
The App uses RevenueCat to manage in-app purchases, credits, and subscriptions.
RevenueCat processes purchase-related information required to provide subscriptions. A pseudonymous user identifier is used to manage and restore your purchases.
The App does not collect or store payment or credit card information. All payments are securely processed by Apple through the App Store.
i) Advertising identifiers (non-subscribers only)
How it is collected: by the Google AdMob SDK when ads are shown. Subscribers are never shown ads.
On iOS, your advertising identifier (IDFA) is only read if you tap "Allow" on the App Tracking Transparency prompt. If you decline, ads are still shown but are not personalized and the identifier is not read.
Used for: serving ads and measuring their effectiveness.
We do not collect your name, address, precise location, contacts, health data, or browsing history.
How We Use Your Information
We use the collected information to:
Provide and improve the core features of the App.
Generate the hairstyle previews and hair analysis you request.
Analyze app performance and fix bugs via analytics and crash reporting.
Manage in-app purchases, credits, and subscriptions via RevenueCat.
Show ads to users who are not subscribers.
Comply with legal obligations.
Data Sharing
We do not sell or rent your personal data. Data is shared with the following third-party partners solely for the purposes described in this policy.
Third-party AI services that receive your photo and prompt:
OpenRouter, Inc. (openrouter.ai) — routes your photo and prompt to the Google Gemini image and text models used for previews, hair analysis, prompt improvement, and chat replies.
https://openrouter.ai/privacy
Google LLC — provides the Gemini ("Nano Banana") image and text models reached through OpenRouter.
https://policies.google.com/privacy
Fal AI, Inc. (fal.ai) — hosts the storage your uploaded photo is placed in so the image models can read it, and runs a backup image generation model used when the primary model is unavailable.
https://fal.ai/privacy
Infrastructure and other service providers:
Supabase, Inc. (servers in the EU, Stockholm) — hosts our database and file storage, where your uploaded photo and your generated images are stored so your history can be shown back to you.
https://supabase.com/privacy
PostHog, Inc. — product analytics, session replay, and error reporting.
https://posthog.com/privacy
RevenueCat, Inc. — subscription, credit, and purchase management.
https://www.revenuecat.com/privacy
Google Firebase (Google LLC) — push notifications and remote configuration.
https://firebase.google.com/support/privacy
Wiredash — in-app feedback, only when you submit feedback.
https://wiredash.io/privacy
Google AdMob (Google LLC) — advertising shown to non-subscribers.
https://policies.google.com/technologies/ads
Protection provided by these third parties: we have reviewed the terms and published privacy policies of each provider named above and require, by contract and by those policies, that they provide protection of your data equal to or greater than the protection described in this policy. In particular, they act as processors on our behalf, they process your photo and prompt only to return your requested result, they do not sell your data, and they do not use your photos or prompts to train their models.
Data Retention
Your uploaded photos and generated images are stored on Supabase infrastructure and on fal.ai storage so that your in-app history remains available to you. They are deleted within 30 days of a deletion request.
Photos sent to OpenRouter and Google for AI image generation are retained by those providers only as long as necessary to fulfill the request, per their respective privacy policies.
Analytics, session replay, and diagnostic data is retained for up to 12 months.
Subscription and purchase data is retained as long as necessary to provide and manage your subscription and to meet tax and consumer-law obligations.
Face Analysis
The App may analyze facial features from photos you provide to determine general face shape or appearance characteristics for hairstyle recommendations.
This analysis is performed solely to provide app functionality
No facial recognition or identification is performed. Facial data is not used to identify you.
Photos, including any facial features they contain, are sent to the third-party AI partners named above solely to generate your requested image or analysis.
Facial data is not used for tracking, advertising, or profiling, and is not used to train AI models.
Your Consent, and How to Withdraw It
Before the App sends any photo or prompt to a third-party AI service, it shows you an in-app disclosure naming what is sent and who receives it, and asks for your permission. Nothing is sent unless you agree.
You can review that disclosure and withdraw your permission at any time: open the App menu and tap Privacy, then "Withdraw permission". After withdrawing, no further photos or prompts are sent to the AI services until you agree again.
If we add a new third-party recipient, or materially change what is sent, we will ask you again inside the App rather than relying on the permission you previously gave.
Your Rights and Choices
You have the right to:
Decline to use the AI hairstyle and color features, in which case your photo is never sent to any third-party AI service.
Withdraw your AI data-sharing permission at any time, as described above.
Request a copy of the personal data we hold about you, or its deletion, by contacting us at the address below. We respond within 30 days.
Opt out of analytics tracking where applicable
Access information about what data is collected through this Privacy Policy.
If you are in the EEA or the UK, our legal basis for processing your photos and prompts is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time. For diagnostics, security, and fraud prevention we rely on our legitimate interests.
Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to remove that information.
Security
We take reasonable measures to protect the information collected through the App from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this policy. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
Contact
If you have any questions or concerns about this Privacy Policy or our data practices, or to request deletion of your data, please contact us at:
appx.ai.studio@gmail.com
https://appxai.carrd.co/