Photo & Data Policy

Stays in private storage that only your own account can read. Location data is stripped in your browser before the file is uploaded, so we never receive it.

Deleted within 24 hours of processing, whether or not you save the results.

Read once, for hair attributes only: length, texture, volume, parting, cut structure, colour and fringe.

Deleted immediately afterwards. Our database will not accept the extracted description until the deletion has been recorded, so the two cannot come apart.

The face in it never reaches the image model. The two halves of our pipeline use different, incompatible types, so connecting them is a compile error rather than a mistake that could ship.

Every image we produce puts different hair on a real face from an actual photograph — usually your own, or, through the annual plan's multi-profile feature, someone you have added. Either way, nothing is borrowed from an inspiration photograph.

Results are deleted on the same 24-hour schedule unless you save them. Sharing a result saves it, because a link that expires in hours is a broken link.

Generated images carry an invisible SynthID watermark from the model provider, identifying them as AI-generated.