Back

AI Makeup

Privacy Policy

Last updated: 5 July 2026

This Privacy Policy explains what data AI Makeup collects, why we collect it, how we use it, and the rights you have over it. The app is operated by Aylan Apps (“we”, “us”, “our”). By creating an account or using the app you accept this policy.

If anything here is unclear, email contact@aylantech.com.

1. What AI Makeup is

AI Makeup is an AI makeup try-on and look-design app. You take or upload a photo; our backend forwards that photo (and the design details you choose — style, colours, placement, and any chat context) to Google Gemini to generate makeup looks, try designs on your photo, and run a skin-tone / feature analysis. You can save looks, chat with an AI stylist, and share designs with a makeup artist. It is a beauty and styling tool, not a medical or dermatological service. See the Cosmetic Disclaimer for details.

2. Data we collect

2.1 Account data

  • Username and email address.
  • Hashed password.
  • Your timezone and app preferences.

2.2 Photos and design data

  • The photos you capture or upload for try-on, for “copy this look” inspiration, and for skin-tone / feature analysis.
  • Design choices and metadata (style, size, colour mode, placement) and your chat messages to the AI stylist.
  • Images you attach in the stylist chat.
  • The looks and designs you save to your library, and the results of skin-tone / feature analysis.

2.3 Device + abuse-prevention signals

  • A per-install random identifier (install_id).
  • Device model, OS version, app version, and platform.
  • Platform-stable identifiers used only for fraud prevention so a reinstall cannot reset free-tier limits:
    • iOS: DCDevice attestation token (Apple), falling back to identifierForVendor.
    • Android: AppSetId (Google Play Services).

2.4 Push tokens

Your Firebase Cloud Messaging (FCM) device token, registered when you allow notifications. We use it only to send the notifications you've enabled (e.g. “your design is ready”).

2.5 Analytics and crash reporting

The app is built with Firebase Analytics and Firebase Crashlytics. These are currently not active in production, so we are not collecting analytics events or crash telemetry at this time. We will update this policy before we enable them.

3. How your photo is handled

  • Before your first AI action, the app shows a consent notice stating that your photo and design details are sent to Google Gemini for processing.
  • Photos submitted for try-on, copy-design, and analysis are processed and then discarded — they are not kept as image files on our servers after the AI returns your result.
  • Images you attach in the stylist chat are stored in Firebase Storage, scoped to your account, so the conversation keeps working; you can delete them or your account to remove them.
  • All uploads travel over HTTPS.

4. How we use the data

We use the data to:

  • Generate the makeup looks, try-ons, and analysis you requested (contract basis).
  • Keep your saved designs and stylist chat working (contract).
  • Track free-tier usage and any Premium entitlement (contract).
  • Send the notifications you enabled (consent).
  • Detect duplicate-account / refund abuse (legitimate interest).
  • Keep the service secure and working (legitimate interest).

We never:

  • Sell your data.
  • Share your photos with advertisers.
  • Use your photos to train external AI models.
  • Make your looks or designs public without your action.

5. Third parties we share data with

We share the minimum necessary data with vetted infrastructure providers:

  • Google (Gemini API) — your photo plus design details, for makeup generation, try-on, and analysis.
  • Firebase (Google) — Cloud Messaging for push tokens, Storage for stylist-chat images, and Analytics / Crashlytics (currently inactive).
  • Our hosting provider (Render) — runs our backend API and stores your account data, designs, and analysis results.
  • RevenueCat — subscription receipts and entitlement state.
  • Apple / Google App Stores — purchase + restore receipts.

We do not transfer your data to other third parties for their own use.

6. Where data is stored and for how long

  • Our backend and storage are hosted in the United States (via our hosting provider and Firebase).
  • Data is encrypted in transit (HTTPS / TLS); passwords are stored as salted hashes.
  • Photos sent for AI processing are discarded after the result is returned; chat images and saved designs remain until you delete them.
  • We retain your account data while your account is active so your library stays intact.
  • If you delete your account, your personal data — including saved designs and stored chat images — is removed within 30 days, except where law requires us to keep records.

7. Age requirement

AI Makeup is intended for users 13 and older, and users under the age of majority should have a parent or guardian's permission. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, email us — we will delete the account and associated data.

8. Your rights

You can, at any time:

  • Access: email support for an export of your data.
  • Correct: update your profile in the app, or contact support.
  • Delete: Me tab → Delete account.
  • Restrict / object: contact support.
  • Withdraw consent for notifications: turn off notifications in your device settings.
  • Portability: contact support for a machine-readable export.

EU / UK users may also lodge a complaint with their local data protection authority. California residents (CCPA / CPRA) have the right to know, delete, correct, and to opt out of any “sale” or “sharing” of personal information — we do neither.

9. Cookies and similar

The mobile app does not use cookies. The companion website (aylan-apps.com) uses only essential cookies.

10. Security

  • All API calls go over HTTPS / TLS 1.2+.
  • Authentication uses short-lived access tokens.
  • Apple DCDevice and Google AppSetId gate registration against abuse.
  • Backend has IP-based and device-based rate limiting.

Report security issues to contact@aylantech.com — we acknowledge within 72 hours.

11. Changes to this policy

We update this policy when our practices change. Material changes trigger an in-app notice. Continued use after the change means you accept the updated policy.

12. Contact

Email: contact@aylantech.com

For deletion-only requests: Me tab → Delete account, or email with subject “Delete my account”.

← Back to legal information