Privacy Policy for HairlyAI – Hairstyle Try On

Last Updated: July 31, 2026

This Privacy Policy applies to the mobile application HairlyAI – Hairstyle Try On ("the App"), developed and published by PeacePeak Inc. ("we", "us", or "our"). By using the App, you agree to the collection and use of information as described in this policy.

HairlyAI is an AI-powered styling and image transformation service. The App uses your photos to generate AI-based hairstyle previews, facial structure analyses, and style recommendations.

1. Information We Collect

When using our Service, you may voluntarily upload photos that may contain facial data (including front or side profile images) in order to receive AI-generated styling previews and visual transformations.

We collect:

• User-uploaded photos (which may contain facial images)
• Facial structure analysis results generated by AI (e.g. face shape, jawline, skin tone — stored as text metadata, not as biometric templates)
• Gender information voluntarily provided by or inferred for the user
• Device information (device model, operating system version)
• Crash reports and anonymous usage analytics

2. Collection, Use, and Disclosure of Face Data

Photos uploaded by users may contain facial data. "Face data" as used in this policy refers to uploaded images containing a person's face and any AI-derived descriptors (such as face shape category, skin tone classification, or symmetry scores) produced during processing.

Specifically, face data is collected and used for the following purposes:

• AI-generated hairstyle try-on: Your photo is sent to our AI model to digitally apply selected hairstyle, beard, glasses, or color changes and return the transformed image.
• Facial analysis and profile creation: Front and side photos are analyzed to generate a face profile report containing face shape, skin tone, jawline, cheekbone, forehead structure, and related attributes. This report is stored so that future style recommendations can be personalized to your face.
• Style recommendations: Face profile data (stored as descriptive text attributes, not biometric identifiers) is used to generate personalized style recommendations for haircuts, hair colors, glasses, and facial hair.
• Blurred preview generation: A blurred version of your photo may be stored and shown to you as a privacy-preserving preview while the full-quality result is being processed.

Facial data is never sold, rented, disclosed to advertisers, or used to train third-party AI models outside the scope described in this policy.

3. Face Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your face data or personal photos to any third party for their own use.

To provide AI processing features, your uploaded images are transmitted securely to the following third-party service providers:

• Google LLC (Google Gemini API / Google Cloud): Images are sent to Google's Gemini AI models for generating transformed hairstyle images and facial analysis. Google LLC processes this data strictly to deliver the AI-generated result and does not use it for advertising or other unrelated purposes. Images transmitted to Google are governed by Google's Privacy Policy and Gemini API Terms of Service, which provide equivalent or greater data protection standards for the face data shared.
• Cloudflare R2 (Cloudflare, Inc.): Processed images and source images are stored in Cloudflare R2 object storage. Cloudflare does not access or use stored images for any purpose other than storage and delivery. Cloudflare's data protection practices are governed by the Cloudflare Privacy Policy, which provides equivalent protection of face data as described in this policy.

No other third party receives your face data. Any third party with whom we share face data is contractually required to uphold data protection standards that are equivalent to or greater than those described in this Privacy Policy.

4. Face Data Retention

We retain face data for the following periods:

• Source photos (original uploaded images): Retained until you delete them within the app or submit a deletion request to us. You can delete your source images at any time from the app's "My Photos" or profile section.
• AI-generated result images: Retained until you delete them within the app, or upon account/data deletion request.
• Facial analysis profile (text-based descriptors): Retained as part of your face profile record until you delete the profile from within the app or request deletion. This data does not contain raw images — only descriptive text attributes (e.g., "Oval face shape", "Medium skin tone").
• Blurred preview images: Retained alongside source images and deleted at the same time.
• Temporary AI processing data: Any intermediate face landmarks, embeddings, or buffers generated during AI processing are discarded immediately after the result image is returned. These are never permanently stored.
• Crash logs and analytics: Retained for up to 90 days for service improvement purposes. These logs do not contain face images or biometric data.

5. Face Data Deletion – How to Revoke Consent and Delete Your Data

You have full control over your face data. You may revoke consent and request deletion at any time using the following methods:

1. In-App Deletion: Navigate to your profile or photo library within the App and delete individual photos or your entire face profile. Deletion takes effect immediately in the app interface. Backend records are permanently removed within 7 days.
2. Account Deletion: You may request full account and data deletion by contacting us at vividgen.llc@gmail.com. We will permanently delete all associated photos, face profiles, generated images, and personal data within 30 days of your verified request.
3. Revoking Consent: To stop providing face data, you may simply stop uploading photos. You may also request deletion of all previously submitted data at any time by contacting us at the email address below. Once deleted, no face data is retained.

6. User Consent

Before any image containing facial data is transmitted for AI processing, you are presented with a clear and explicit consent notice within the app, explaining that your image will be securely transmitted to Google Gemini (Google LLC) for AI-based processing. Processing only begins after you provide affirmative consent by proceeding with the upload or generation.

You may withdraw your consent at any time by ceasing use of the face-based features and requesting deletion of your previously submitted data as described in Section 5.

7. Use of AI Services

Images are transmitted using encrypted HTTPS connections. Google LLC processes face data under strict security, confidentiality, and data protection standards.

Images are processed solely to generate the AI-based results requested by the user and are not used by Google for model training or advertising purposes as stated in the Gemini API Terms of Service.

8. Third-Party Analytics Services

The app may use the following analytics and crash-reporting services, which collect limited, anonymized technical information:

• Google Analytics for Firebase
• Firebase Crashlytics

These services do not receive face data or personal photos. They operate under their own privacy policies.

9. Log Data

In case of application errors, we may automatically collect log data including IP address, device type, operating system version, and anonymized usage statistics to improve app stability and performance. This data does not include photos or biometric information.

10. Security

We use commercially reasonable safeguards including encrypted HTTPS transmission, access-controlled cloud storage, and industry-standard security practices to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure.

11. Children's Privacy

This Service is not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has submitted face data to our Service, we will promptly delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your face data, please contact us at:

PeacePeak Inc.
Email: vividgen.llc@gmail.com