Stylist AI

Color Analysis

Privacy Policy

Updated at

Stylist AI (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Stylist AI.

This Privacy Policy applies to our website, and its associated subdomains (collectively, our “Service”) alongside our application, Stylist AI. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

Definitions and key terms

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:

Information automatically collected

There is some information like your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our platform. This information may be used to connect your computer to the Internet. Other information collected automatically could be a login, e-mail address, password, computer and connection information such as browser plug-in types and versions and time zone setting, operating systems and platforms, purchase history, (we sometimes aggregate with similar information from other Users), the full Uniform Resource Locator (URL) clickstream to, through and from our Website that may include date and time; cookie number; parts of the site you viewed or searched for; and the phone number you used to call our Customer Services. We may also use browser data such as cookies, Flash cookies (also known as Flash Local Shared Objects) or similar data on certain parts of our Website for fraud prevention and other purposes. During your visits, we may use software tools such as JavaScript to measure and collect session information including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.

We automatically collect certain information when you visit, use or navigate the platform. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about who and when you use our and other technical information. This information is primarily needed to maintain the security and operation of our platform, and for our internal analytics and reporting purposes.

Photos & face data

What face data we process

When you use a feature involving a face, Stylist AI processes the photograph you take or select and may create cropped images of facial areas, including the eyes.

The app also processes facial landmarks, measurements, and other information derived from the photo. Depending on the feature, this includes skin tone and undertone, hair and eye colors, face shape, facial proportions, contrast, and color-season recommendations. Some features generate facial-proportion scores, explanatory comments, and visual overlays.

We treat these photographs and the associated facial information and results as face data.

How we use face data

We use face data to provide the features you request: personal color analysis, style and makeup recommendations, facial-proportion visualizations, virtual makeup, and saved analysis results and preferences.

We do not sell face data or use it to target advertising. We do not use submitted face data to train AI models or authorize our processing providers to use it for that purpose.

Optional 3D face scan (ARKit)

On supported devices, you can choose a guided face scan instead of uploading a selfie. This feature uses Apple’s ARKit face tracking and the front camera, including TrueDepth capabilities where available. It processes camera frames, facial geometry and landmarks, head position and movement, eye direction, and eyelid openness. We use these signals to guide your position and head movement, display the scan overlay, and select a clear photo for your requested analysis.

The ARKit face mesh, facial landmark coordinates, raw head-pose and eye-direction values, and expression coefficients are processed on your device. The face mesh is held in memory for the scan and the analysis animation; it is not saved as a 3D model or uploaded to our backend or AI providers. Unselected camera frames are not saved as a video recording. Temporary scan data is released when the relevant processing objects are released or the app ends.

The selected camera photo follows the same cloud-analysis process as an uploaded selfie. The app may also send cropped eye images and sampled color information to Google Firebase / Google Cloud and OpenAI, as described below. The cloud color analysis uses those photographic inputs, not the ARKit 3D mesh. Saved photos, avatars, visualizations, and analysis results follow the storage and deletion rules below.

The scan is a capture aid for your style analysis. It does not authenticate you and does not access your Face ID enrollment or authentication data. The scan is optional: you can cancel it or choose Upload a selfie. On devices that do not support ARKit face tracking, the scan option is not offered.

Face-data sharing and third-party protection

Some facial measurements and visual processing take place on your device to support the app’s features. Cloud analysis uses the separate processing steps described below.

Google Firebase / Google Cloud. For cloud analysis, the app sends the selected photograph and relevant analysis inputs to our Google-hosted backend. Inputs may include cropped eye images, sampled colors, and existing appearance information needed for the requested feature. Google provides backend processing and server logging.

OpenAI. Our backend sends the relevant images and inputs to OpenAI to generate the requested analysis or recommendation. The result is returned to the app through our backend.

We share face data with Google Firebase / Google Cloud and OpenAI to provide the cloud analysis you request. We do not sell or rent face data or share it with advertisers or data brokers.

We require every third party receiving face data, including Google Firebase / Google Cloud and OpenAI, to provide the same or equal protection of that data as described in this Privacy Policy and required by Apple’s App Review Guidelines. Providers may process face data only for the disclosed service and associated security and legal obligations, subject to the safeguards and retention and deletion practices described here.

Storage and retention

For face data, the specific collection, use, sharing, protection, retention, consent, and deletion rules in this section take priority over the general provisions elsewhere in this policy.

Face data may be stored on your device, in Google Cloud server logs, and in OpenAI’s systems. The retention periods for each are described below.

Temporary processing on your device. Temporary camera frames and intermediate measurements are used for the active feature. Information incorporated into a saved photo, visualization, or analysis follows the saved-data retention below.

Saved photos and results. Saved photographs, visualizations, analysis results, and associated local data are stored in the app’s local storage. They have no automatic expiry and remain until removed, including by deleting the app and its data.

Google Cloud server logs. Our application logs are stored by Google Cloud and can contain submitted photographs, associated analysis inputs, and generated responses. These entries are retained in Google Cloud Logging’s default log bucket for 30 days from creation, after which they expire automatically under Google Cloud Logging’s retention policy.

OpenAI processing records. Under its standard API controls, OpenAI may retain submitted content in its systems for abuse monitoring for up to 30 days. Longer retention may apply for legal requirements or protection against harm. Images flagged for potential child sexual abuse material may be retained for manual review.

OpenAI does not use API inputs or outputs to train its models by default. See OpenAI’s API data controls for its published processing and retention practices.

Device backups may contain locally saved app data, depending on your device and backup settings. Photos or results you export to Photos or share elsewhere are separate copies managed through those services.

Our providers may process and store data outside your country. Where required, we use appropriate safeguards for international transfers.

Consent and withdrawal

Providing a photo for cloud analysis is optional, but features that depend on it cannot operate without the necessary data. Before your first color analysis through the selfie or guided-scan flow, if you have not already given valid consent, we show an alert identifying Google Cloud and OpenAI and linking to this privacy policy. By tapping Agree & upload, you agree to these providers processing your photos and related face data for the current and future style analyses you request, within the same disclosed features, purposes, and providers.

We save your agreement when you tap Agree & upload, before opening the photo picker or starting the guided scan, and before submitting a photo. Reading this policy or choosing Not now does not give consent. If you agree and then cancel photo selection, no photo is submitted, but your saved agreement remains in place.

Optional guided scan. The existing consent for cloud photo analysis also applies to the photo selected during a guided scan. Camera access requires iOS camera permission, which is requested if it has not already been granted. The camera permission message explains the face scan and access to our camera features. You can cancel a scan or turn off camera access in iOS Settings.

We store the consent date and notice version on your device. This record does not contain your photos or face data. We do not ask you to agree again while the relevant agreement remains valid. You can change your consent later in Settings. We ask again if the saved agreement is missing, withdrawn, or no longer covers material changes to the data, purposes, or providers.

You can withdraw the consent saved for future selfie analyses and face scans in Settings > Withdraw photo consent. This clears the saved cloud-analysis agreement. The app asks again before a later selfie analysis or guided scan. Withdrawal also prevents a pending scan or photo-selection attempt from submitting its photo. Withdrawal does not automatically delete photos, results, or other information already saved or submitted. To request deletion of face data held in our cloud systems, go to Settings > Request cloud data removal.

You can decline consent by choosing Not now, or decline to provide a photo by cancelling selection or leaving the upload screen. Device camera and photo-access permissions are separate from consent to cloud processing. Changing those permissions restricts the access they control; it does not automatically withdraw your saved cloud-processing consent or delete data already held.

Deleting face data

To remove the app’s locally stored photos, results, and associated data, use your device’s Delete App function to remove Stylist AI and its app data.

Deleting and offloading are different. Offloading keeps the app’s documents and data. Backups and copies exported to Photos or other services must be managed separately.

Request cloud removal. In Settings > Request cloud data removal, you can ask our team to remove face data held in our cloud systems. We send your app user ID, Firebase authentication ID, and request time to our Firebase database so our team can handle the request. No photograph or facial measurements are attached to the request.

Our team processes requests within 24 hours. The app’s confirmation means that the request was received, not that deletion is complete. We remove photos, facial inputs, and analysis results that we can identify and control, and coordinate applicable deletion requests with our providers. Provider-held records may remain subject to the security and legal retention described in “Storage and retention.” We do not promise that every provider-held copy can be erased within 24 hours.

A cloud-removal request does not withdraw consent for future uploads or remove data from your device, device backups, or copies you exported. Withdrawal and deletion do not immediately erase provider-held records from previous submissions; the retention rules above continue to apply to any records that remain.

For help withdrawing consent or requesting deletion, including if you cannot use the app, contact contact@bestme.mobi. We may ask for non-photo information needed to verify your request and locate relevant records. If we cannot identify a record or a provider’s retention requirements prevent immediate deletion, we will explain the limitation and available next steps.

Please do not send another facial photograph to make a privacy request.

Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of Stylist AI or any of its Corporate Affiliates (as defined herein), or that portion of Stylist AI or any of its Corporate Affiliates to which the Service relates, or in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceeding, provided that the third party agrees to adhere to the terms of this Privacy Policy.

Affiliates

We may disclose information (including personal information) about you to our Corporate Affiliates. For purposes of this Privacy Policy, "Corporate Affiliate" means any person or entity which directly or indirectly controls, is controlled by or is under common control with Stylist AI, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy.

Governing Law

This Privacy Policy is governed by the laws of Russian Federation without regard to its conflict of laws provision. You consent to the exclusive jurisdiction of the courts in connection with any action or dispute arising between the parties under or in connection with this Privacy Policy except for those individuals who may have rights to make claims under Privacy Shield, or the Swiss-US framework.

The laws of Russian Federation, excluding its conflicts of law rules, shall govern this Agreement and your use of the app. Your use of the app may also be subject to other local, state, national, or international laws.

By using Stylist AI or contacting us directly, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you should not engage with our website, or use our services. Continued use of the website, direct engagement with us, or following the posting of changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept those changes.

Your Consent

We've updated our Privacy Policy to provide you with complete transparency into what is being set when you visit our site and how it's being used. By using our app, registering an account, or making a purchase, you hereby consent to our Privacy Policy and agree to its terms.

Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by Stylist AI. We are not responsible for the content, accuracy or opinions expressed in such websites, and such websites are not investigated, monitored or checked for accuracy or completeness by us. Please remember that when you use a link to go from the Services to another website, our Privacy Policy is no longer in effect. Your browsing and interaction on any other website, including those that have a link on our platform, is subject to that website’s own rules and policies. Such third parties may use their own cookies or other methods to collect information about you.

Cookies

Stylist AI uses "Cookies" to identify the areas of our website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We use Cookies to enhance the performance and functionality of our app but are non-essential to their use. However, without these cookies, certain functionality like videos may become unavailable or you would be required to enter your login details every time you visit the app as we would not be able to remember that you had logged in previously. Most web browsers can be set to disable the use of Cookies. However, if you disable Cookies, you may not be able to access functionality on our website correctly or at all. We never place Personally Identifiable Information in Cookies.

Blocking and disabling cookies and similar technologies

Wherever you're located you may also set your browser to block cookies and similar technologies, but this action may block our essential cookies and prevent our website from functioning properly, and you may not be able to fully utilize all of its features and services. You should also be aware that you may also lose some saved information (e.g. saved login details, site preferences) if you block cookies on your browser. Different browsers make different controls available to you. Disabling a cookie or category of cookie does not delete the cookie from your browser, you will need to do this yourself from within your browser, you should visit your browser's help menu for more information.

Remarketing Services

We use remarketing services. What Is Remarketing? In digital marketing, remarketing (or retargeting) is the practice of serving ads across the internet to people who have already visited your website. It allows your company to seem like they're “following” people around the internet by serving ads on the websites and platforms they use most.

Payment Details

In respect to any credit card or other payment processing details you have provided us, we commit that this confidential information will be stored in the most secure manner possible.

Kids' Privacy

We collect information from kids under the age of 13 just to better our services. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data without your permission, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

Changes To Our Privacy Policy

We may change our Service and policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our Service and policies. Unless otherwise required by law, we will notify you (for example, through our Service) before we make changes to this Privacy Policy and give you an opportunity to review them before they go into effect. Then, if you continue to use the Service, you will be bound by the updated Privacy Policy. If you do not want to agree to this or any updated Privacy Policy, you can delete your account.

Third-Party Services

We may display, include or make available third-party content (including data, information, applications and other products services) or provide links to third-party websites or services ("Third- Party Services").

You acknowledge and agree that Stylist AI shall not be responsible for any Third-Party Services, including their accuracy, completeness, timeliness, validity, copyright compliance, legality, decency, quality or any other aspect thereof. Stylist AI does not assume and shall not have any liability or responsibility to you or any other person or entity for any Third-Party Services.

Third-Party Services and links thereto are provided solely as a convenience to you and you access and use them entirely at your own risk and subject to such third parties' terms and conditions.

Information about General Data Protection Regulation (GDPR)

We may be collecting and using information from you if you are from the European Economic Area (EEA), and in this section of our Privacy Policy we are going to explain exactly how and why is this data collected, and how we maintain this data under protection from being replicated or used in the wrong way.

What is GDPR?

GDPR is an EU-wide privacy and data protection law that regulates how EU residents' data is protected by companies and enhances the control the EU residents have, over their personal data.

The GDPR is relevant to any globally operating company and not just the EU-based businesses and EU residents. Our customers’ data is important irrespective of where they are located, which is why we have implemented GDPR controls as our baseline standard for all our operations worldwide.

What is personal data?

Any data that relates to an identifiable or identified individual. GDPR covers a broad spectrum of information that could be used on its own, or in combination with other pieces of information, to identify a person. Personal data extends beyond a person’s name or email address. Some examples include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnicity.

The Data Protection Principles include requirements such as:

Why is GDPR important?

GDPR adds some new requirements regarding how companies should protect individuals' personal data that they collect and process. It also raises the stakes for compliance by increasing enforcement and imposing greater fines for breach. Beyond these facts it's simply the right thing to do. At Stylist AI we strongly believe that your data privacy is very important and we already have solid security and privacy practices in place that go beyond the requirements of this new regulation.

Individual Data Subject's Rights - Data Access, Portability and Deletion

We are committed to helping our customers meet the data subject rights requirements of GDPR. Stylist AI processes or stores all personal data in fully vetted, DPA compliant vendors. We do store all conversation and personal data for up to 6 years unless your account is deleted. In which case, we dispose of all data in accordance with our Terms of Service and Privacy Policy, but we will not hold it longer than 60 days.

We are aware that if you are working with EU customers, you need to be able to provide them with the ability to access, update, retrieve and remove personal data. We got you! We've been set up as self service from the start and have always given you access to your data and your customers data. Our customer support team is here for you to answer any questions you might have about working with the API.

California Residents

The California Consumer Privacy Act (CCPA) requires us to disclose categories of Personal Information we collect and how we use it, the categories of sources from whom we collect Personal Information, and the third parties with whom we share it, which we have explained above.

We are also required to communicate information about rights California residents have under California law. You may exercise the following rights:

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

We do not sell the Personal Information of our users.

For more information about these rights, please contact us.

California Online Privacy Protection Act (CalOPPA)

CalOPPA requires us to disclose categories of Personal Information we collect and how we use it, the categories of sources from whom we collect Personal Information, and the third parties with whom we share it, which we have explained above.

CalOPPA users have the following rights:

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

We do not sell the Personal Information of our users.

For more information about these rights, please contact us.

Contact Us

Don't hesitate to contact us if you have any questions.