AI Beard

This Privacy Policy explains what data AI Beard collects, why we collect it, how we use it, and the rights you have over it. The app is operated by Aylan Apps (“we”, “us”, “our”). By creating an account or using the app you accept this policy.

If anything here is unclear, email contact@aylantech.com.

1. What AI Beard is

AI Beard is a beard try-on and analysis app. You take a selfie; our backend forwards that photo (and any style request you type) to Google Gemini to analyse your facial hair — density, coverage, symmetry, line-up, face shape, and a zone-by-zone breakdown (cheeks, jawline, chin, moustache, neck) — and to generate AI style previews that show your face with different beard shapes, lengths, or colours. It is a grooming and styling tool, not a medical, dermatological, or diagnostic service. See the Grooming Disclaimer for details.

2. Data we collect

2.1 Account data

• Username and email address (for registered accounts).
• Hashed password.
• You can also use the app as a guest, in which case we identify your install by a device-derived ID rather than an email.

2.2 Scan submissions and results

• The selfies you capture or upload for analysis and style previews.
• Any free-text style requests you type (e.g. desired shape, length, or colour).
• Derived results we compute and store against your account: face shape, beard density / coverage / symmetry / line-up scores, patchiness, the per-zone breakdown, and any grooming suggestions.
• AI-generated style-preview images we hand back to you, stored so you can revisit your history.

2.3 Device + abuse-prevention signals

• A per-install random identifier (install_id).
• Your device's Identifier for Vendor (IDFV), device model, OS version, and app version.
• An Apple DeviceCheck (DCDevice) attestation token, used only for fraud prevention so a reinstall cannot reset the free-scan limit.

2.4 What we do NOT collect

• AI Beard does not currently use third-party analytics or crash-reporting SDKs, and does not send push notifications, so we do not collect analytics events, crash telemetry, or push tokens.
• We do not access your contacts, location, or photo library beyond the single image you choose to submit.

3. How your photo is handled

• Before your first upload, the app shows an AI-processing consent notice explaining that your image is sent to an AI provider.
• The app downscales the image (to roughly 1280 px) before upload, and our backend strips EXIF metadata (including any embedded location).
• The photo is uploaded over HTTPS to our backend and forwarded to Google Gemini for analysis and style generation.
• The image is not retained on your device after analysis. Our backend keeps the submitted photo and generated previews linked to your account so your scan history works, until you delete them or your account.

4. How we use the data

We use the data to:

• Run the AI beard analysis and style-preview generation you requested (contract basis).
• Keep your scan history so you can revisit past results (contract).
• Track free-tier usage (1 free scan per month, then Pro) and your Pro entitlement (contract).
• Detect duplicate-account / refund abuse (legitimate interest).
• Keep the service secure and working (legitimate interest).

We never:

• Sell your data.
• Share your photos with advertisers.
• Use your selfies to train external AI models.
• Make your scans or previews public.

5. Third parties we share data with

We share the minimum necessary data with vetted infrastructure providers:

• Google (Gemini API) — your selfie plus any style request, for beard analysis and preview generation.
• Our hosting provider (Render) — runs our backend API and stores your account data, submitted photos, and generated previews.
• RevenueCat — subscription receipts and entitlement state.
• Apple App Store — purchase + restore receipts.

We do not transfer your data to other third parties for their own use.

6. Where data is stored and for how long

• Our backend and storage are hosted in the United States.
• Data is encrypted in transit (HTTPS / TLS); passwords are stored as salted hashes.
• We retain your data while your account is active so your history stays intact.
• Guest installs that are never converted are cleaned up after a period of inactivity.
• If you delete your account, your personal data — including submitted photos and generated previews — is removed within 30 days, except where law requires us to keep records.

7. Age requirement

AI Beard is intended for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us — we will delete the account and associated data.

8. Your rights

You can, at any time:

• Access: email support for an export of your data.
• Correct: update your profile in the app, or contact support.
• Delete: Settings → Delete account.
• Restrict / object: contact support.
• Portability: contact support for a machine-readable export.

EU / UK users may also lodge a complaint with their local data protection authority. California residents (CCPA / CPRA) have the right to know, delete, correct, and to opt out of any “sale” or “sharing” of personal information — we do neither.

9. Cookies and similar

The mobile app does not use cookies. The companion website (aylan-apps.com) uses only essential cookies.

10. Security

• All API calls go over HTTPS / TLS 1.2+.
• Authentication uses short-lived access tokens; credentials are stored in the device Keychain.
• Apple DeviceCheck attestation gates registration against abuse.
• Backend has IP-based and device-based rate limiting.

Report security issues to contact@aylantech.com — we acknowledge within 72 hours.

11. Changes to this policy

We update this policy when our practices change. Material changes trigger an in-app notice. Continued use after the change means you accept the updated policy.

12. Contact

Email: contact@aylantech.com

For deletion-only requests: Settings → Delete account, or email with subject “Delete my account”.