Privacy Policy

Account and Service Information

• Email address, account identifiers, profile settings, and preferences
• Subscription source, plan, entitlement, purchase status, and credit-usage information; payment-card details are handled by Stripe, Apple, or Google rather than MyHairMagic
• Support requests, feedback, and communications you send us
• A selfie or other photo you deliberately select with the system photo picker, capture with the camera, or load from the optional saved-selfie feature, together with the hairstyle, wig, product, and color selections used for a try-on

Color Analysis Information

• Quiz responses (questions about your natural coloring)
• Seasonal color profile (your determined color season)
• Color attributes (undertone, depth, contrast, chroma)
• Quiz completion analytics (time taken, questions answered)
• For the optional photo-enhanced My Colors feature, locally derived color values, color-analysis weights, confidence, and lighting-quality scores; the source photo itself is not uploaded for this analysis

Usage Information

• Device or installation identifiers used for complimentary credits, account protection, and in-app sessions
• Device, operating-system, app-version, IP address, user-agent, and technical log information
• Feature usage, product interactions, error, security, and abuse-prevention events
• Approximate request timing and source, such as web, iOS, Android, or an embedded page

What Face Data We Collect

• A photograph containing a face only when you deliberately select, capture, or load the photo and use it with a feature that requires it
• The in-browser face-shape analyzer may calculate facial landmarks locally on your device to produce a face-shape result
• We do not use photos or facial landmarks to identify you, authenticate you, build a biometric identity template, or perform facial recognition

How We Use Face Data

• AI hairstyle transformation: applying virtual hairstyles to your photo
• Face shape analysis: determining your face shape to recommend flattering styles
• Generating and returning a transformed result image
• Providing an optional reusable selfie and Wishlist for eligible paid accounts

Third-Party AI Processing and Permission

• Provider and data sent: MyHairMagic sends the selected selfie (including the depicted face), reference hairstyle or wig/product and color images, and the related hairstyle, product, color, and transformation instructions to Google LLC’s paid generative AI service. Google LLC processes those inputs and returns an image to create the try-on you requested
• How the data is collected: The selfie comes only from a photo you deliberately select, capture, or load. Reference images and instructions come from your selections and the MyHairMagic or MyHairMail product catalog. The request passes through MyHairMagic's Vercel-hosted service, which validates the request and obtains the catalog images before sending them to Google LLC’s paid generative AI service. MyHairMagic does not include your email address, account credentials, subscription information, or payment information in the third-party AI request
• Mobile permission is per selected source photo: Before the first Google AI processing request for a newly selected photo, the app shows "Allow Google AI processing?" with a "Privacy details" option. Choosing "Allow & Create Look" permits multiple styles only while that exact photo remains selected. Choosing "Not now" sends nothing to Google LLC and does not create the try-on. Selecting, capturing, or loading a different photo, switching app identity, restarting the app, or tapping "Withdraw AI Permission" below the selected photo clears permission and requires a new "Allow & Create Look" choice
• Google data use and retention: Our production integration uses Google LLC’s paid generative AI service. Under Google's paid-service terms, Google does not use the prompts, images, or responses to improve Google products. Google may log prompts and responses for a limited period solely to detect and prevent prohibited use and to make required legal or regulatory disclosures, and may use project-isolated in-memory caching with a maximum 24-hour time to live. Google also handles related service-usage and technical data, such as token counts, operational status, safety-filter triggers, errors, authentication details, and request or network metadata, to operate and maintain the service under its applicable privacy terms. We do not claim that Google provides zero data retention
• Local-analysis boundary: Face Shape and the optional photo-based My Colors analysis run locally on your device. For Face Shape, the source photo, pixel data, facial landmarks, and categorical face-shape result remain in on-device page memory and are not sent to Google LLC or MyHairMagic, and MyHairMagic does not store them. Result-free completion or failure analytics may record that the feature was used, but do not contain the photo, landmarks, or face-shape result. For My Colors, the source photo, pixel data, and facial landmarks remain on-device; locally derived color-analysis values and the resulting profile may be handled by MyHairMagic as described elsewhere in this Policy
• We do not sell facial images or disclose them to advertisers or data brokers

Photo and Result Storage

• Ordinary try-ons: MyHairMagic handles the selected source photo in request memory. Creating a try-on does not create, update, or save a new source-photo copy in your MyHairMagic account, database, or cloud storage. Google's limited logging and caching are described above
• Optional saved selfie: Through the separate "Save photo" action, an eligible paid user may keep one reusable source selfie in private storage. A previously saved selfie remains there when you create a try-on until you remove or replace it, or delete the account; using it for a try-on does not create another stored copy
• Wishlist: An eligible paid user may save multiple transformed result images. These results can contain a recognizable face, but the source selfie is not copied into the Wishlist
• Generated result: MyHairMagic returns the generated image to your device and does not save it to your account unless you choose the Wishlist. The mobile app may briefly create an on-device cache file when you choose to save or share a result and deletes that temporary file after the action
• Saved selfies and Wishlist results are private and delivered to the signed-in account through time-limited signed access
• You can remove the saved selfie or individual Wishlist results in the Service; both are removed when account deletion successfully completes

What Color Analysis Data We Collect

• Your answers to the color analysis quiz (e.g., skin undertone, eye color, hair color)
• Your calculated color season (Spring, Summer, Autumn, Winter)
• Color attributes derived from your answers (undertone, depth, contrast, chroma)
• Confidence score indicating match strength
• Quiz duration and completion status
• If you choose photo enhancement: extracted color values, color-analysis attributes and weights, confidence, and lighting-quality scores created locally from the photo; the source photo is not uploaded or saved for My Colors

How We Use Color Analysis Data

• Calculate your seasonal color profile
• Blend optional locally derived photo signals with your quiz answers
• Provide personalized color recommendations for clothing and accessories
• Generate shareable result pages (if you choose to share)
• Improve our quiz accuracy and recommendations
• This data is NOT used for advertising or sold to third parties

Color Analysis Data Retention

• Guest users: Quiz results remain in browser or in-app WebView local storage until that storage is cleared, the quiz is reset, or the native app identity changes
• Registered users: Color profile saved to your account and retained until you delete it
• Shareable links: Shared profiles remain accessible until the account holder deletes their profile
• User-linked color profiles and quiz analytics are deleted when account deletion successfully completes

Sharing Your Color Profile

• You can create shareable links to your color analysis results
• Shared links display your color season, confidence score, and color recommendations
• Shared links do NOT reveal your email, name, or other personal information
• You can delete your profile at any time, which invalidates shared links

• Google LLC, through its paid generative AI service, for the data and purposes specifically described in Section 3
• Supabase for authentication, databases, and private storage
• Stripe, RevenueCat, Apple, and Google for subscription, purchase, and entitlement processing
• Resend and similar delivery providers for support, account, and permitted lifecycle communications
• Vercel and other hosting, content-delivery, logging, and security providers
• Shopify and MyHairMail storefront services for product catalog content and user-directed shopping links
• Professional advisers and service providers bound to protect the information
• Legal authorities when required by law
• We do not sell personal information or facial images

Same or Equivalent Protection by Third Parties

• We require any third party with whom MyHairMagic shares personal information under this Policy to provide the same or equivalent protection of that information as stated in this Policy. Applicable agreements, terms, and legal duties must limit the recipient to the disclosed and authorized purposes and require appropriate confidentiality, security, retention or deletion, and subprocessor safeguards. If a recipient cannot maintain those protections, we will stop sharing personal information with that recipient
• Google LLC processes prompts, images, and responses sent through its paid generative AI service under Google's applicable Data Processing Addendum. That agreement includes processor instructions, security controls, deletion duties, and requirements for subprocessors. If a provider can no longer provide the required protection, we will stop sharing personal information with that provider. We will obtain any newly required permission before a materially different disclosure or use
• The narrow exception is a legally compelled disclosure to a court, regulator, law-enforcement agency, or other public authority that does not act as our service provider. In that situation, we disclose only the information legally required and seek available protections where permitted

• Encryption in transit (HTTPS) and at rest
• Secure cloud storage with access controls
• Administrative, technical, and access controls appropriate to the information and the service
• Data minimization and the retention limits described in this Policy

• Access or request a copy of personal information we hold about you
• Correct inaccurate account information
• Delete your saved selfie, Wishlist results, or color profile
• Delete your account through Settings, subject to completing required subscription-cancellation and billing-verification steps
• Decline a new Google AI disclosure by choosing "Not now," or withdraw permission for the currently selected mobile photo by tapping "Withdraw AI Permission" below that photo. Each newly selected photo requires a separate "Allow & Create Look" choice
• Object to or restrict certain processing where applicable
• Ask questions or submit a privacy request at privacy@myhairmagic.com

• Remember your preferences
• Maintain your session
• Enhance security
• Measure and improve website and product performance

• Ordinary try-on source photos: Creating a try-on does not create, update, or save a new source-photo copy in the MyHairMagic account, database, or cloud storage
• Google LLC paid-service try-on inputs and outputs: Because we use Google LLC’s paid generative AI service, Google does not use them to improve Google products. Google may keep project-isolated in-memory cache data for up to 24 hours and may log prompts and responses for a limited period solely for prohibited-use detection and required legal or regulatory disclosures. Google describes that logging period as limited but does not publish one fixed duration, so we do not represent the integration as zero-retention
• Optional paid saved selfie: Retained until it is replaced, removed, or the account is deleted
• Paid Wishlist transformed results: Retained until an item is removed or the account is deleted
• My Colors source photo: Analyzed locally and not uploaded or saved; locally derived results and analytics follow the color-analysis retention periods below
• Face Shape source photo, facial landmarks, and categorical result: Kept only in on-device page memory for the active analyzer view and not persisted by MyHairMagic. Clearing, reloading, or leaving the analyzer removes them from that page state. Result-free completion or failure analytics do not contain the photo, landmarks, or categorical result
• Color analysis (guest): Stored in browser or in-app WebView local storage until that storage is cleared, the quiz is reset, or the native app identity changes
• Color analysis (registered): Retained until the user deletes the profile or account
• Account information: Retained while account is active
• On successful account deletion, we delete account-linked stored images, color profiles and quiz analytics, support and feedback submissions, usage events, entitlements, and profile records
• Limited security, fraud-prevention, deletion-confirmation, legal, suppression, backup, or de-identified aggregate records may be retained when necessary. Account deletion cannot undo a completed AI request or require immediate deletion of Google's limited safety, abuse-prevention, or legally required logs; payment and app-store providers also retain their own records under their policies