Privacy Policy

Hairla: AI Hair & Makeup · Operated by PremiumsOnly LLC · Last updated: August 25, 2026

This Privacy Policy explains how PremiumsOnly LLC ("Hairla", "we", "us") collects, uses, and protects your information when you use the Hairla iOS app (the "App"). By using the App you agree to this Policy.

Plain-language summary: We use the selfie you provide to generate AI beauty looks. Your photo is processed to create your results, stored only as long as needed, and never sold. You can delete your photos and your account at any time from inside the App.

Your face data — in short. This is the notice the App shows you before you start, word for word:

What we collect. Only the selfie you choose to upload. No faceprints, no facial recognition — it is never used to identify you.
What stays on your iPhone. Live Filters, Makeup & Aesthetic Studio and Colour Analysis run fully on-device. Nothing from them is uploaded.
How it’s used & stored. Only to create the looks you ask for. Stored encrypted on our servers in Finland (EU) and processed briefly by our AI provider, fal.ai. Never sold, never used for ads or AI training.
How long we keep it. Deleted automatically after 30 days.
Your control. Delete your photos or your whole account anytime in Profile. 13+ only — upload your own photo.
Consent. You accept this by ticking the box in the App (on first launch, or before your first upload if you skipped it). You can withdraw it at any time by deleting your data in Profile.

Full details: Sections 1, 2, 4 and 6 below.

1. Information We Collect

Photos & facial imagery you provide. When you upload or capture a selfie, we process that image — including the facial features within it — to generate hairstyles, hair colors, makeup, filters, glow-up transformations, and cosmetic-style previews. This processing of facial geometry is done solely to produce the visual results you request.
On-device face detection (never uploaded). Live Filters, Makeup Studio, Aesthetic Studio previews and Colour Analysis locate facial landmarks (eyes, lips, face outline) using Apple's on-device Vision framework. That landmark data exists only in your iPhone's memory while the feature is open; it is not stored and is never sent to us or to anyone else.
Account information (optional). You can use the App without creating an account. In that case we hold only a random, anonymous user ID created for your installation, which lets us store your generated looks and honour your subscription. If you choose to sign in, we also hold your email address (for email sign-in) or an Apple/Google identifier (for social sign-in). Signing in exists so you can use your looks and your subscription on more than one device; it is never required to use or purchase anything.
Subscription & purchase data. Managed by Apple and our subscription provider (RevenueCat). We receive your subscription status and entitlements; we never receive your full payment-card details.
Usage & device data. Basic app interactions, generation counts, crash/diagnostic data, and device/OS type, used to operate and improve the App.

2. Biometric Data & Consent

To create your results, the App analyzes the facial features in your photo. Depending on your jurisdiction, this may be considered "biometric information." We show you a plain-language face-data notice when you first open the App and ask for your explicit, affirmative consent there (and again before your first upload if you skipped it); you may withdraw consent at any time by deleting your data in the App. We use facial data only to generate the looks you request. We do not use it for identification, surveillance, advertising, or any unrelated purpose, and we do not sell or share it with third parties for their own use.

Face data at a glance

What we collect: the selfie photo you choose to upload (and, for "Get the Look", an optional inspiration photo). We do not create or store faceprints, facial-recognition templates, or any biometric identifier derived from your photo, and we do not use your photo to identify you or anyone else.
What we do with it: the photo is used to generate the hairstyles, hair colours, makeup looks and cosmetic previews you request, and the generated images are shown back to you in the App.
Where it is stored: your uploaded photo and the generated images are stored in encrypted storage on our own servers, hosted by Hetzner Online GmbH in Helsinki, Finland (European Union). No photos are stored on any consumer cloud or shared drive.
Who else processes it: only our AI image-processing provider, fal.ai (and the model infrastructure it relies on), which receives the photo solely to compute your requested looks and returns the result to us. It processes the photo transiently to fulfil the request and does not use it to train models. Apple and RevenueCat never receive your photos. We do not sell, license or otherwise share face data with anyone else.
How long we keep it: uploaded photos and generated images are deleted automatically 30 days after creation. You can delete them earlier at any time (Settings → "Delete my photos & data"), and deleting your account or all your data removes them immediately. Guest (no-account) data follows the same 30-day rule.
On-device features: Live Filters, Makeup Studio, Aesthetic Studio sliders and Colour Analysis run entirely on your iPhone; nothing from those features is uploaded unless you explicitly choose an AI option that sends the photo as described above.

3. How We Use Your Information

To generate and deliver your AI beauty results.
To operate your account, credits, and subscription.
To provide customer support and respond to your requests.
To maintain security, prevent abuse, and comply with law.
To improve App performance and reliability.

4. AI Processing & Service Providers

To deliver core functionality we share the minimum necessary data with trusted processors who act on our instructions:

AI image provider (fal.ai). Your uploaded image is sent to our AI processing provider (and the model infrastructure it relies on) to generate the requested results. Images are processed transiently to fulfill your request and are not used by the provider to train models.
Cloud storage & authentication (Supabase, self-hosted on our server). Stores your account record and your images/generated results.
Subscriptions (RevenueCat & Apple). Process and validate your purchases.

We do not sell your personal information.

5. Website Analytics & Cookies

Our websites (hairlaapi.fullapps.co and hairlaapi.fullapps.co) use Google Analytics 4 to understand how many people visit and which pages they read. Google Analytics sets cookies in your browser and processes a truncated IP address, approximate location (country/region), device and browser type, and the pages you view. It is used for aggregate audience measurement only.

This applies to our websites only. The Hairla iPhone app does not contain Google Analytics, and your selfies and generated results are never sent to it.

You can opt out at any time by installing Google’s browser opt-out add-on, by blocking cookies in your browser, or by enabling “Do Not Track”/tracking protection. Declining analytics does not affect your use of the app.

6. Data Retention & Deletion

We keep your images and generated results only as long as needed to provide the service. You can, at any time, from Settings in the App:

Delete your photos & data — removes your uploaded selfies and generated looks from our servers while keeping your account.
Delete your account (or, as a guest, Delete all my data) — permanently removes your account or guest record together with all stored images and generated results.

Guest records that have not been used for 60 days, hold no subscription and have no remaining images are deleted automatically.

We also run automated daily retention sweeps that permanently delete stored selfies and generated images 30 days after creation. You can delete them earlier at any time from Settings. Backups and logs are purged on a rolling basis.

7. Your Rights

Depending on where you live (including under the GDPR and U.S. state privacy laws), you may have the right to access, correct, delete, or port your data, and to withdraw consent. You can exercise deletion directly in the App, or contact us at the address below for any other request. We will not discriminate against you for exercising these rights.

8. Children

The App is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use industry-standard measures (encryption in transit, access controls, scoped storage) to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.

10. International Transfers

Our servers are located in the EU. If you access the App from elsewhere, your information may be transferred to and processed on those servers.

11. Changes to This Policy

We may update this Policy. Material changes will be reflected by an updated date above and, where required, by re-requesting your consent in the App.

12. Contact Us

PremiumsOnly LLC — Hairla
Email: [email protected]
Support: hairlaapi.fullapps.co/support