AI Hair Color & Style — Privacy Policy
Effective Date: August 10, 2026
AI Hair Color & Style ("the App") is developed by Mobile Card Games & Travel Apps LLC. This Privacy Policy explains what data the App collects, how it is used, and how your privacy is protected.
1. Data We Collect
The App collects the following data that you provide directly:
- Photos: Photos that you select from your photo library or take with your camera. These photos typically contain your face and hair, as the App is designed for hair color visualization.
- Hair color preferences: The hair color, technique, tone, and other styling options you select within the App.
- Purchase information: Transaction records for in-app credit purchases, managed by Apple and RevenueCat.
The App does not collect your name, email address, location, or advertising identifiers. It contains no analytics SDKs, serves no ads, and does not track you.
2. How We Collect Data
All data is collected directly from you through your explicit actions within the App:
- You choose to take a photo or select one from your photo library.
- You select your desired hair color options.
- You tap "Try This Color" to initiate the AI transformation.
During onboarding, before your first use, the App discloses that your photo is processed by OpenAI and asks you to agree before continuing.
3. How We Use Your Data
Your photo and hair color preferences are used solely to generate an AI-powered hair color visualization. Specifically:
- Your photo is resized and compressed, then sent to OpenAI's image editing API to produce a modified image showing your selected hair color.
- The AI changes only the hair color in your photo. No facial recognition, face mapping, biometric identification, or facial feature analysis is performed.
- Your face is preserved exactly as-is in the generated result — it is not analyzed, classified, or identified.
4. Face Data
Because the App is designed for hair color visualization, the photos you provide typically contain your face. We want to be transparent about how this data is handled:
- What face data is collected: Photos you select or take that contain your face and hair.
- How face data is used: Your photo (including your face) is sent to OpenAI solely so the AI can identify your hair in the image and apply the selected color change. The face itself is not the subject of analysis — it is preserved unchanged.
- No facial recognition: The App does not perform facial recognition, face mapping, biometric scanning, or facial feature extraction. The App does not use Apple's Vision framework, ARKit face tracking, or any face detection APIs.
- Face data sharing: Your photo (which contains your face) is shared with OpenAI for processing. See the Third-Party Data Sharing section for details.
- Face data retention: Your photos exist in transit only during the API request — they are not stored on any server we operate. On your device, photos and results are stored locally until you delete them from the App's gallery or uninstall the App. For OpenAI's data retention practices, see their usage policies.
5. Third-Party Data Sharing
Your photo is shared with the following third-party services:
- OpenAI (openai.com): Your photo and hair color preferences are sent to OpenAI's image editing API to produce the hair color visualization. The data is transmitted through AIProxy (aiproxy.com), a secure API relay service, over an encrypted HTTPS connection. According to OpenAI's API data usage policies, data sent through the API is not used to train their models.
- RevenueCat (revenuecat.com): Manages in-app credit purchases. Payment is processed entirely by Apple — the App never sees your payment card details. RevenueCat receives purchase transaction tokens from Apple and a random anonymous app-user ID — never your name, email, or photos.
We do not sell, rent, or share your data with any other third parties.
Abuse prevention: every AI request the App sends also includes your device's Apple identifier-for-vendor and an Apple DeviceCheck token. These are used solely to prevent abuse and rate-limit AI requests; they are not linked to your name or identity and are not used for advertising or tracking.
6. Data Storage and Retention
- On your device: Original photos and AI-generated results are stored locally for the in-app gallery. Results you choose to save are written to your photo library.
- In your iCloud: Your credit balance and related purchase state are synced across your devices via Apple's iCloud key-value storage, tied to your Apple ID. We cannot access this data. Your photos are never synced to iCloud by the App.
- On our servers: We do not operate servers that store your photos or personal data. Your photo exists in transit only, during the encrypted request to OpenAI.
- Deletion: You can delete individual results from the App's gallery at any time. Uninstalling the App removes all locally stored data.
7. Data Security
All data transmitted to third-party services is sent over encrypted HTTPS connections. API keys are protected through the AIProxy relay service and are never embedded directly in the App.
8. Your Rights
You have the right to:
- Delete your locally stored photos and results at any time through the App's gallery.
- Remove all App data by uninstalling the App.
- Deny camera or photo library permissions, which prevents the App from accessing your photos.
Depending on where you live, privacy laws such as the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) give you rights over your personal data, including the rights to know, access, correct, and delete it. Because we do not hold your data on servers we operate, there is typically nothing for us to access or delete on request — deleting the App deletes your data. Where the App does process data in transit, or a third-party service described above collects data, you may contact us at the email below to exercise your rights, and we will respond as required by applicable law.
9. Children's Privacy
The App is not directed at children under 13, and we do not knowingly collect data from children under 13. In some regions, including the European Union, a higher minimum age applies to consent for data processing; the same statement applies there — we do not knowingly collect data from anyone under the applicable age.
10. Data Breach Notification
In the unlikely event of a data breach affecting user data on any system we operate, we will notify affected users as required by applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Effective Date" at the top of this page.
12. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
v5cqpsj4e3u4@opayq.com