────────────────────────────────────────

  1. WHAT WE COLLECT

a) The photo you choose When you tap "Take a Selfie" or "Choose from Library", the photo you select is read by the app. We compress it to a maximum width of 768 pixels and send it to OpenAI for image generation.

b) Generated hairstyle images After processing, we receive 32 hairstyle previews. These are stored only on your device, in the app's sandbox.

c) Purchase information When you buy a generation ($12.99 one-time), Apple processes the transaction through StoreKit. We receive only the result (success or failure) and a transaction receipt. We never see your payment details.

────────────────────────────────────────

  1. WHAT WE DO NOT COLLECT

────────────────────────────────────────

  1. THIRD-PARTY SERVICES
  2. THIRD-PARTY SERVICES WE USE a) OpenAI (AI image generation) We use OpenAI's image generation API to create the hairstyle previews from your photo. When you tap the consent checkbox and confirm a generation, your compressed selfie is transmitted to OpenAI over an encrypted HTTPS/TLS connection via our backend. What is sent: your selfie (compressed to max 768px wide). What OpenAI does with it: processes it to generate hairstyle preview images that are returned to your device. What we send back to you: 32 generated images, stored only on your device. Retention by OpenAI: per OpenAI's API data policy, request data may be retained for up to 30 days for abuse monitoring, then deleted. OpenAI does not use API inputs to train their models by default. Reference: https://openai.com/policies/privacy-policy We do not run our own server-side storage of your photos. The only server in our flow is a thin Cloudflare Worker proxy that forwards requests to OpenAI. b) Apple StoreKit In-app purchases are handled by Apple. Apple's privacy practices are described here: https://www.apple.com/legal/privacy/

────────────────────────────────────────

  1. DATA RETENTION