Privacy Policy
Last updated 27 October 2026
A new look is made on a server, not on your phone, so HairStyle has to send your selfie there. This page says exactly what happens to it.
Your selfie is processed, not stored
When you choose a selfie or make a look, the selfie is sent to our server over HTTPS, held in memory for the seconds the request takes, and then discarded. It is never written to a disk, saved in a database, placed in a log file or attached to an error report. The same is true of the look made from it: it is sent back to your phone and not kept.
What the analysis reads
Before anything is made, the selfie is checked: one person, sharp and well lit, facing the camera, hair visible, aged 13 or over. It also reads your face shape and your hair (length, texture, colour depth) to suggest styles, and notes what must stay exactly as it is — such as glasses, facial hair and visible marks. That description travels back to your phone inside a signed token and is kept only there; our server does not store it.
No faceprint
The app finds your face in the photo on your phone, with Apple's Vision framework, to guide the camera. No faceprint or other biometric template is created or kept — on your phone, on our server or by the AI providers.
The AI providers
fal.ai makes the look. Google's Gemini model, reached through OpenRouter, checks the selfie and compares each look with it. Your selfie is sent to them as part of the request, and the app asks for your permission on its first screen before anything is sent. The image provider is asked to return the result directly and not to keep it, and requests to the language model go only to providers that retain no data.
There is no account
There is nothing to sign up for. Your device registers itself and receives a random identifier, kept in the device's Keychain so that your daily free look and your subscription survive a reinstall. We do not ask for, receive or store your name, email address, phone number or location.
What our server keeps
Numbers only: whether the first look was used; how many free looks were used today; the times of your Premium looks in the last seven days; how many requests your installation started today; a hash of this installation's recovery key; for seven days after each look, a random identifier and whether its free redo was used; your subscription status from Apple via RevenueCat; and request records without any image or description (style, outcome, duration).
Your looks stay on your device
Your selfies and looks are stored on your device only, in app storage excluded from iCloud and computer backups. There is no sync and no copy on our side — deleting the app, or Delete my photos in the app, removes them.
Purchases
Subscriptions are sold by Apple. We use RevenueCat to learn whether your device's random identifier has an active subscription. RevenueCat receives that identifier and the purchase information Apple provides — not your name, email or any photo.
Analytics and tracking
The app contains no third-party analytics, no advertising and no tracking.
Security records
To stop abuse, the server uses the network (IP) address of requests only to limit free looks per address each day; it stores a keyed daily digest of it, never the address itself, and deletes it after two days.
Children
HairStyle is for people aged 13 and over and is not directed at children. It refuses selfies of people who appear to be under 13.
Your rights and choices
Delete my photos in the app erases everything on your device and withdraws the permission to send selfies. To have the records on our side removed, write to us.
Changes to this policy
If a future version changes what is sent or kept, we will update this page and its date before that version is released.