1. Scope and operator
HairChanger ("HairChanger", "we", "us", or "our") operates the HairChanger mobile app, related backend services, and the website at https://hairchanger.app. This policy applies to those services. Third-party services have their own policies.
Privacy questions and requests can be sent to [email protected] .
2. Information processed by the app
2.1 Photos you select or take
When you start a generation, the app processes the photo you choose from your library or camera. Depending on the selected feature, this can include a portrait, hairstyle, face, facial hair, makeup, clothing, and background visible in the image. Do not upload a photo unless you have the right and permission to use it.
We ask first. Before your first generation, the app shows a consent screen that names the data being sent (the single photo you selected, plus the style instruction), names the recipient (the gpt-image-2 AI model), and states how long the result is kept. No photo is transmitted anywhere until you accept that screen. You can withdraw the permission at any time under Mine → AI & Data, after which no further photo is sent unless you accept again.
Once you accept, the app uploads the selected image to the HairChanger backend. The backend validates the file, converts it for transmission, and sends it with the selected preset instruction to the configured AI generation service. The backend does not write your original photo to disk — it is held in memory for the duration of the request and discarded. The source image is transmitted to and processed by the provider in order to produce your result.
HairChanger does not use your photos, or the results generated from them, to train any AI model, and does not sell them.
2.2 Generated images and videos
When a generation completes, HairChanger downloads the finished image or video from the provider and stores it in the HairChanger server media directory. The stored result receives a random media identifier and can be retrieved by the app through an authenticated media address.
Retention: generated images and videos are deleted automatically 30 days after the generation was created. A scheduled process on our servers enforces this — no action is required from you. You can also delete them sooner, at any time, as described in Section 10.
2.3 Job and service records
HairChanger stores limited job records such as a random job identifier, selected feature and preset, processing status, creation and update times, result media identifier, media type, and error information. The job record does not intentionally contain the original source photo.
2.4 Random app identifier and credits
The app creates a random identifier and stores it in the iCloud Keychain. The identifier can survive app deletion and may synchronize across devices using the same Apple Account. HairChanger sends it to the backend as a user identifier and to Adapty so subscription events can be connected to the correct credit balance.
The backend stores the identifier with the current credit balance and a limited history of processed subscription-period events. It is not a conventional HairChanger account and does not, by itself, include your name or email address.
2.5 On-device saved people, history, and settings
If you choose to save a person or generation history, the related files and records are stored in the app's local documents area on your device. Language, cached configuration, and similar preferences can be stored in local app settings. Images or videos are added to your Photos library only when you choose a save action and grant the required Photos permission.
3. Face data
Because HairChanger applies hairstyles, hair colour, facial hair, makeup and accessories to a photo of a person, the photo you select will normally show a human face. This section describes, in one place, exactly how HairChanger handles face data.
3.1 What face data is collected
HairChanger collects only the photographic image you choose to submit for a generation, which may depict your face and facial features. HairChanger does not create, derive, or store a faceprint, face template, face embedding, face geometry map, facial landmark set, or any other biometric identifier. It performs no face detection, face recognition, face matching, age or emotion estimation, and no identification or verification of any person. It does not use ARKit face tracking, Vision face analysis, or any equivalent biometric API. The image is treated as an ordinary picture that is transformed by a generative model.
3.2 How it is used
The photo is used for one purpose only: to generate the styled image or video you requested. It is not used for advertising, profiling, analytics, identification, or any form of model training — neither by HairChanger nor, under our agreement, by our provider.
3.3 Who it is shared with
The photo is sent from your device to the HairChanger backend, which forwards it to our AI generation
provider, the AI models that produce your result — currently the gpt-image-2 image model
and, for the optional outfit video, veo3.1-fast. The in-app consent screen names the model in
use at the time you accept it. It is processed only to produce that result. It is not sold, rented, or disclosed to anyone else, and it is not shared with advertisers, data
brokers, or analytics providers. Our AI processing provider is engaged as a service provider that is required to process the photo solely to fulfil your request and to provide protections for it equivalent to those described in this policy. Processing may take place on servers outside your country.
3.4 Where it is stored and for how long
Your original photo is not stored on HairChanger servers. It is held in memory only for as long as the request takes and is then discarded; it is never written to our media storage. The generated result is stored on HairChanger servers so the app can retrieve it, and is deleted automatically 30 days after the generation was created, by a scheduled deletion process. Copies you choose to keep on your own device or in your Photos library remain under your control and are not affected by that deletion.
3.5 Consent and withdrawal
No photo is sent anywhere until you have read the in-app consent screen — which names the data sent, names the AI model as the recipient, and states the retention period — and tapped to agree. You can withdraw that permission at any time under Mine → AI & Data, and you can delete every result stored for you on our servers using Delete My Server Data on the same screen, or by email as described in Section 10.
4. Purchases and subscriptions
Apple processes App Store payments. HairChanger does not receive your full payment card number or Apple Account password. Adapty supports paywall delivery, purchase status, subscription access, restoration, and server-to-server events used to grant app credits.
Purchase-related information can include product, subscription status, renewal period, transaction event, storefront context, and the random HairChanger app identifier used as Adapty's customer identifier.
5. Website data
5.1 Basic server information
Like most websites, hosting and security systems can process technical request information such as IP address, browser type, requested page, time, referrer, and security events. This information is used to deliver and protect the website.
5.2 Analytics choice
The website asks before loading Google Analytics. If you accept, Google Analytics can process page views,
browser and device information, approximate location derived from network information, and interaction data.
If you decline, the analytics script is not loaded by our consent control. Your choice is stored in your
browser under the key hairchanger-analytics-consent.
You can reopen analytics choices from the website footer. Browser storage can also be cleared through your browser settings.
5.3 Email communication
If you email HairChanger, we receive your email address, message, attachments, and any information you choose to include. We use it to answer the request, investigate a problem, keep a reasonable support record, and meet legal obligations.
6. Why we process information
HairChanger processes the information described above to:
- create and deliver the image or video you request,
- store and retrieve completed results,
- operate credits, subscriptions, purchase restoration, and fraud controls,
- save optional people, history, settings, and media on your device,
- provide support and respond to privacy or accessibility requests,
- secure, debug, maintain, and improve the app, backend, and website,
- measure website use when analytics consent is given, and
- comply with legal obligations and protect rights and safety.
7. Service providers
| Provider | Purpose | Relevant data |
|---|---|---|
| Apple | App distribution, purchases, subscriptions, iCloud Keychain, Photos permissions | Purchase and device-platform information handled under Apple's policies |
| Adapty | Paywalls, subscription status, restoration, webhook events | Random app identifier and purchase/subscription information |
| AI image & video generation provider | AI image and video generation (only after you accept the in-app consent screen) | Selected source photo (which may show your face), generation instruction, task data, generated result |
| Google Analytics | Consented website measurement | Page, browser, device, network-derived, and interaction information |
| Hosting and email providers | Website, backend, media storage, security, and support email | Server requests, stored results, service records, and support messages as applicable |
Providers can process information in countries other than your own and under their own privacy terms. We use them only for the service functions described here.
Each provider listed above is engaged as a service provider and is required to process the data it receives solely to perform the function described, and to provide protections for that data equivalent to those set out in this policy. In particular, our AI generation provider receives your photo only to produce the result you requested; it is not permitted to use it to train models, to sell it, or to disclose it to others.
8. Retention
- Original source uploads (including photos showing a face): not stored on HairChanger servers. Held in memory for the duration of the request, transmitted to the generation provider for processing, then discarded.
- Generated images and videos: deleted automatically 30 days after the generation was created, by a scheduled deletion process, or sooner if you delete them yourself.
- Job records: deleted together with the result they reference, on the same 30-day schedule.
- Credit records and random app identifier: retained while needed to operate access, purchases, and service integrity.
- On-device saved people and history: retained until you delete them in the app or remove the relevant local app data.
- Support email: retained as reasonably needed to answer, investigate, document, and meet legal obligations.
- Website analytics: retained according to the configured analytics settings and Google's applicable controls.
9. Security
HairChanger uses transport encryption for production network requests, authenticated app-to-backend requests, random job and media identifiers, file-type and size validation, and access controls intended to reduce unauthorized use. No online system can guarantee absolute security.
10. Your choices and privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability.
- You can withdraw your permission to send photos to our AI provider at any time under Mine → AI & Data. No further photo is sent unless you agree again.
- You can delete every result stored for you on our servers from inside the app: Mine → AI & Data → Delete My Server Data.
- You can deny camera, photo-library, or add-to-Photos permission through iPhone Settings.
- You can delete saved people and history items through available in-app controls.
- You can decline or reopen website analytics choices.
- You can manage or cancel subscriptions through Apple.
- You can also request deletion of server-stored results and related records by email.
For a server-result deletion request by email, write to [email protected] and include any result link, media identifier, or job reference you still have. Because HairChanger does not use an email login account and result records are not currently indexed by your email, those references may be necessary to locate the correct media. We may ask for limited verification before acting on a request.
11. Children
HairChanger is not directed to children under 13 or the higher minimum age required for independent consent in their location. Do not upload a child's image without appropriate authority and consent. A parent or guardian can contact us about a privacy concern.
12. International processing
HairChanger and its providers may process data in countries with privacy laws different from those in your location. Where required, applicable transfer safeguards and provider terms are used.
13. Changes to this policy
We may update this policy when the product, providers, retention practices, or legal requirements change. The revised policy will show a new "Last updated" date. Material changes may also be communicated in the app or website when appropriate.
14. Contact
Email: [email protected]
Website: https://hairchanger.app