Privacy Policy

Information we handle

• Portraits and look selections. When you create a preview, we receive the photo you select or capture, your chosen hairstyle, color, beard style and accessories, and the resulting generated image.
• Account information. If you choose to sign in with Apple or Google, we process the account identifier supplied by that provider and, where provided, your name, email address and profile image. Sign-in is optional for core look-generation features.
• Purchase and entitlement information. We receive subscription or purchase status, product and expiration information, and service identifiers needed to provide paid access. Payments are processed by Apple App Store or Google Play, as applicable, with our subscription service providers; we do not receive your full payment-card number.
• Service and security information. We process device/app identifiers, IP address, request timestamps, request status and limited diagnostic information to operate, secure and troubleshoot the service.

How we use information

We use this information to create the preview you request, show and save your generated looks, provide credits and subscriptions, support optional account syncing, protect the service from misuse, respond to support requests, and meet legal obligations. Photos are sent over encrypted connections to the image-generation service used to create your requested result.

How information is shared

We share only what is needed with service providers that help us host, secure, process payments, authenticate accounts and generate your requested preview. We may also disclose information when required by law or to protect users, our services or the public. We do not sell your personal information.

Optional rewarded ads in the mobile app

In Android app versions that offer rewarded ads, non-Pro users can choose to watch an ad for a look-generation reward. Verified Pro members do not need to watch an ad to generate a look. Availability depends on the app version, region, privacy choices and ad inventory. Declining an ad does not purchase a subscription.

We use Google AdMob and the Google Mobile Ads SDK to deliver and measure these ads and prevent fraud. The SDK may collect and share your IP address (which can be used to estimate a general location), device and advertising identifiers, app and ad interactions such as video views, and diagnostic information with Google and its advertising partners. Ad requests in this integration are configured as non-personalized; this does not mean that the SDK collects no data. Data is encrypted in transit. See Google's Privacy Policy and how Google uses information from apps that use its services for Google's processing and retention practices.

Where applicable, Google's User Messaging Platform presents privacy choices before ads are requested. You can revisit the choices available for your region through Profile → Ad privacy choices, including changing consent or exercising applicable opt-out choices. Android advertising identifiers can also be managed in your device's privacy settings. If ads cannot be requested with the current settings, you can cancel or explore Pro without watching an ad.

For reward verification, we send Google a random reward-session token, not your account email or portrait. Google's signed callback lets our server associate an earned reward with your account and prevent duplicate use. Our service stores reward-session status, timestamps and transaction identifiers for reward delivery and fraud prevention; these are separate from image-processing records. Our app does not include selected photos, generated images or hairstyle selections in its ad requests. Privacy requests about records held by us can be sent to the contact below.

Storage and retention

Selected portraits, visual references and generated images may be retained on protected systems with the related request data so we can operate the service, provide My Work and investigate security or support issues. We retain information only for as long as reasonably necessary for these purposes, to comply with law, or to resolve disputes. Access to these records is limited to authorized personnel and service providers performing services for us.

Your choices and rights

Camera and photo-library permissions are requested only when you choose to use them, and can be changed in your device settings. You can choose not to sign in. To request access, correction or deletion of personal information associated with your account or a generated look, email us with the subject line “Privacy request” and include the account email or relevant details so we can locate your request.

Children

The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can take appropriate action.

Changes and contact

We may update this policy when our practices or legal requirements change. The latest version will always be available at this address. For privacy questions or requests, contact zhuxuanyu0922@gmail.com.

Page visit analytics / 页面访问统计

We collect first-party page paths, visit counts and app environment to understand product usage. URL query strings, photos, phone numbers and IP addresses are not stored in this analytics dataset. Mini-program visitor identities are pseudonymized with server-side HMAC; the website uses a first-party anonymous visitor cookie for up to 90 days. Daily visitor records are retained for 90 days and event deduplication records for 24 hours. These identifiers are not used for advertising or cross-site tracking.

为了解产品使用情况，我们统计访问页面、访问次数及小程序版本环境，不在该统计数据中保存网址查询参数、照片、手机号或IP。小程序访客标识由服务端进行HMAC假名化；网站使用最长90天的第一方匿名访客Cookie。每日访客记录保留90天，重复上报去重记录保留24小时，不用于广告或跨站追踪。隐私咨询或删除请求可通过本政策的联系入口提出。