Photo & Data Policy

To change only your hair, Coifly has to know where your face is in the photo. A vision model marks five points — the eyes, the nose and the corners of the mouth — and those coordinates are used to align your original face back onto the render. They exist only in memory while that request is processed and are then discarded; they are never stored. Coifly does not create face templates, does not perform facial recognition, identification or verification, and does not compare your photo against any other image or database.

The same reading also tells us how many people are in the photograph and whether it is an image we will not work with. A photograph with more than one person, or a sexual image, is refused: no credit is taken and the file is deleted immediately rather than waiting for the 24-hour sweep.

Your photographs are not used to train AI models. The gateway that carries them is instructed not to, on every call.

Stays in private storage that only your own account can read. Location data is stripped in your browser before the file is uploaded, so we never receive it.

The photo used for a preview is deleted within 24 hours of processing, whether or not you save the results. A selfie you choose to keep under “Your photos” is the exception: it stays until you remove it or close your account.

Read once, for hair attributes only: length, texture, volume, parting, cut structure, colour and fringe.

Deleted immediately afterwards. Our database will not accept the extracted description until the deletion has been recorded, so the two cannot come apart.

The face in it never reaches the image model. The two halves of our pipeline use different, incompatible types, so connecting them is a compile error rather than a mistake that could ship.

Every image we produce puts different hair on a real face from an actual photograph: your own. Nothing is borrowed from a hairstyle reference.

Results are deleted on the same 24-hour schedule unless you save them. Sharing a result saves it, because a link that expires in hours is a broken link.

Generated images carry an invisible SynthID watermark from the model provider, identifying them as AI-generated.