Privacy
Last updated November 4, 2026
Your photo
When you create a preview, your photo is resized on your device and sent to our server, which removes its metadata (such as location) and passes it to our AI provider, fal.ai, which runs Google's Gemini image model to restyle your hair. We do not save your photo on our servers. The copy uploaded to fal.ai is set to expire after 15 minutes. The result is set to expire after 24 hours. Anthropic (Claude) receives the result image to check its quality. Our providers may keep limited records under their own policies.
Biometric information
Some laws, such as the Illinois Biometric Information Privacy Act, may treat information about face geometry in a photo as biometric information. Our own systems do not create or store a face template, face measurements or any identifier derived from your face. We use your photo only to create your preview and check its quality, and we do not sell, lease, trade or otherwise profit from it. You give written consent with the checkbox before uploading, and you must be 18 or older.
Color reading and face shape
For a color reading, your photo is sent to Anthropic (Claude), which checks only the photo's light and quality. Your skin and hair colors are read only at the two spots you mark on the photo. Our servers don't calculate or store facial measurements, landmarks or a face template. Your reading is kept only in your browser, and you can delete it there. Your photo is not stored on our servers.
On the face shape page, you place four lines on your own photo and the proportions are worked out in your browser. The photo, the dots and the measurements are never sent to us or anyone else. They are kept in this browser tab only, so a reload doesn't lose them, and are cleared when you close the tab. The shape name and your hair answers are saved in your browser until you clear it. Reading results (such as your season or face shape) are never used in analytics or ads.
Retention and destruction schedule
| Data | Kept for |
|---|---|
| Your photo on our servers | Not stored. Processed in memory and passed on. |
| A copy of your photo in your browser (try-on, color reading, face shape), with the spots or lines you placed | This tab only, so a reload doesn't lose your progress. Never sent to our servers from there. Cleared when you start over or close the tab. |
| Your photo at fal.ai | Set to expire after 15 minutes. We ask fal.ai not to keep request records. |
| Your result at fal.ai | Set to expire after 24 hours. |
| Result quality check at Anthropic (Claude) | Under Anthropic's API terms, which may include limited retention for safety monitoring. |
| Color reading photo at Anthropic (Claude) | Not stored by us. Under Anthropic's API terms, which may include limited retention for safety monitoring. |
| Your color reading and face shape | Only in your browser, until you delete it. For face shape, the shape name and your hair answers. Never sent to analytics. |
| That you reached a face shape result (a time only, with no photo, shape or measurements; only while purchases are open) | With your session, to check that a purchase follows real use of the site. |
| Preview record (style, what you're deciding, time and status; no photo) | Kept to operate the service and prevent abuse. |
| Your email address | Not stored on our servers. We keep a keyed one-way hash of it and a masked hint (first letter and domain, like m•••@gmail.com). Stripe keeps it with your payment; Google receives it to send our emails, and our Gmail sent mail keeps the emails we send you. |
| Your account (the previews, reports and files you bought, the masked email hint, which browser sessions are signed in) | Kept so your packs work on any phone or browser where you sign in. A browser stays signed in until you sign out of it. |
| Purchase record (pack, what it added, Stripe's checkout and payment IDs, account ID, session ID, email hash) | Kept to deliver your pack to your account and take it back after a refund or dispute. |
| Sign-in code and link (sent by email) | Stored only as hashes. Each works once. The code works for 10 minutes, only in the browser that asked for it. The link expires after 30 minutes, or 7 days when sent after a purchase. A copy of the email stays in our Gmail sent mail; the code and link in it stop working as above. |
What we do store
A random session ID in a cookie, so we can count your free preview. If you sign in, that session is linked to your account until you sign out of the browser. While you sign in, a second cookie remembers your code request for 10 minutes. A one-way hash of your IP address with a daily count, to stop abuse. For each preview: the style you picked, what you told us you're deciding, the time, and its status. Color readings use the same kind of session and daily counts. None of this includes your photo.
Purchases
Packs are sold through Link, part of Stripe, which is the seller (merchant of record) for each payment. You pay on Stripe's checkout page, so your card details go to Stripe and never reach our servers. Link emails your receipt. Stripe and Link handle payment data under their own privacy policies.
With each purchase we keep the pack, what it added (previews, reports, files), Stripe's IDs for the checkout and the payment, your account ID and session ID, the time, and a keyed one-way hash of your email. We use them to add the pack to your account and take it back if the payment is refunded or disputed.
Your email
Your account is the email you pay with. There is no password. You can enter your email before checkout; it fills in Stripe's checkout. After you pay, we send one email to the address you paid with. It has a link that signs in the browser where you open it; it works once and expires after 7 days. To use your packs on another phone or browser, tap Sign in and enter the email you paid with. If it has purchases, we email a 6-digit code that works for 10 minutes in that browser, and a link that works once for 30 minutes. A code stops working after 5 wrong tries.
We don't store your email address on our servers. We keep only a keyed one-way hash of it, to find your account, and a masked hint (the first letter and the domain) to show which email a browser is signed in with. We store codes and links only as hashes. Stripe keeps the address with your payment. We send our emails from our Gmail account at Google (styloomhelp@gmail.com), which receives the address to deliver them. A copy of each email we send, with any sign-in code and link in it, stays in that account's sent mail. We don't send marketing emails.
Checkout reminder. If you tick “Email me once if I don’t finish checkout”, we keep a record that you agreed (the time and the version of the wording) with your unfinished checkout at Stripe, and in our own records without your address. If the checkout expires unpaid, we send one email with a link back to that checkout, and none if you have bought since. We send at most one reminder to an address in 30 days. We don't use the address for anything else and don't share it beyond Stripe and our email provider.
Contact
Questions or deletion requests: styloomhelp@gmail.com