Your privacy comes first

What we collect

We store your email, star photos, purchase history, generated looks, and Style-Up balance so the app can sync across devices and keep your gallery private. Payment details are handled by Apple or Stripe, and we only receive confirmation of the purchase.

Each of these records is linked to your account (email + Supabase user ID) so we can show you only your own data and honor your storage settings.

Face data (photos)

UrSalon Preview collects the photos you upload as your Star Photo and any optional inspiration photos. These images include your face. We do not create face templates, measurements, or biometric identifiers.

• Used to generate hair-only previews and display your private gallery.
• Star Photos and generated looks are stored in Supabase cloud storage and database tables scoped to your account.
• Inspiration photos are sent to the generation API to guide the hair change and are not stored unless you save the resulting look.
• Processed by our generation API on Vercel and the Gemini image model to create your preview. We do not use your photos to train unrelated models. See Google's Gemini API paid data use policy.
• Retained until you delete the photo/look or delete your account.

How data is linked

• Email and user IDs are the primary keys in Supabase auth; they gate every request for your photos, Style-Up credits, and purchase records.
• Your star photo lives in the private `star-photos` storage bucket and the `star_photos` table, both of which are scoped to `user_id` so uploads/read operations can only affect your data.
• Purchase history rows are written with `reason: "purchase"` and the signed-in user ID, and they are used only to authorize Style-Up packs and display what you bought.

How we use data

Data is used only to provide UrSalon Preview services like generation, storage, and account access. We do not sell personal information or use your photos to train unrelated models.

Data retention

We keep your star photos and generated looks until you delete them. If you delete your account or request data deletion, we remove stored photos and account records within 30 days.

Your controls

You can delete looks from the gallery, replace your Star Photo, or delete your account in the app. If you need help, contact us and we will confirm before removing stored assets. For data deletion requests, use the Help page.

Children's privacy

UrSalon Preview is not intended for children under 13. We do not knowingly collect data from children. If a parent or guardian believes a child has provided personal data, please contact us so we can delete it.

Crash & diagnostics data

We do not collect crash reports or runtime diagnostics ourselves, nor do we send them to third-party services. Any crash data comes directly from Apple's diagnostics (if shared by the customer) and is not tied back to your Supabase identity by us.

Tracking & third-party data

The iOS app does not use advertising SDKs or track users across apps or websites. The web app loads Vercel Analytics and Speed Insights when running in production to measure traffic and performance. Those services receive anonymized session and device signals for reporting, but we do not share other personal data with advertising partners or data brokers.