Sensitive data notice

Face & Appearance Data Notice

Notice version 2026-08-02.1 · Last updated: August 2, 2026

The short version. The appearance scan is optional. Before STYL scans a portrait, you choose either on-device analysis or a cloud-assisted analysis. STYL does not save the portrait itself. It does save some derived results. In particular, the on-device face profile—including numeric face-geometry ratios—is stored in protected app storage and synced to your private STYL account in Supabase. A separate switch controls whether approved derived results may be included in later outfit requests. The current Google-backed cloud path also requires a separate confirmation that you are 18 or older; the on-device path does not.

1. Scope and consent

This notice supplements STYL’s Privacy Policy and applies to the optional portrait-based color and appearance features. Because a scan of face geometry may be regulated as a biometric identifier in some places even when it is not used to identify a person, STYL treats the portrait and all face-derived data as sensitive.

STYL asks for affirmative consent after you select a portrait and before any face geometry is calculated or any portrait is sent to an API. You can decline and continue using the rest of STYL. Cloud portrait processing requires a separate, clearly labeled choice and, while Google Gemini is the disclosed provider, a separate 18-or-older attestation. By choosing an analysis mode, you confirm that the portrait is of you, that you have read this notice, and that you consent to the collection, processing, storage, and disclosure described for that mode.

2. What each analysis path does

Data	On-device path	Cloud-assisted path (18+)
Selected portrait	Held temporarily in app memory; never uploaded.	Downscaled on the iPhone, sent through STYL’s authenticated API to the disclosed AI provider for one analysis request, then released from STYL’s working memory. STYL does not write it to its database or file storage.
Color profile	Temperature, depth, contrast, and a wearable palette are calculated on the iPhone and stored on that device.
Face profile	Apple Vision-based processing on the iPhone derives labels and measurements such as face shape, facial structure, width-to-height, jaw-to-cheek and forehead-to-cheek ratios, chin taper, jaw angle, cheekbone prominence, and symmetry. The profile is stored in protected app storage and synced to a private Supabase record for your account so it is available across sessions and devices.
Cloud appearance observations	Not created.	The provider returns editable, non-diagnostic observations about visible hair, eyebrows, lighting, and visible skin appearance. STYL stores that returned review in an account-separated protected file on the iPhone, excluded from device backups. STYL does not currently store that returned review in its cloud database.

3. Why STYL uses this data

STYL uses derived results only to show your color and appearance profile, let you review or correct it, suggest optional hairstyles, accessories, necklines, colors, and related styling ideas, preserve the profile for your account, and—only if you separately enable the relevant “Use in outfit suggestions” control—personalize outfit recommendations.

STYL does not use the scan for face recognition, identity verification, surveillance, authentication, advertising, eligibility, employment, credit, insurance, housing, or other high-impact decisions. STYL does not compare your face against a database or try to identify you. It does not infer race, ethnicity, attractiveness, emotion, health conditions, body shape, or other protected or highly sensitive traits from the portrait. Visible-skin descriptions are cosmetic observations, may be wrong, and are not medical or dermatological advice.

4. Who receives the data

Supabase hosts the private account record containing the derived face and hair profile. Row-level security limits a signed-in user to their own record.
Google Gemini API is the current provider for the optional cloud-assisted portrait analysis. It receives the downscaled portrait and the bounded analysis instructions. Google may retain API content for limited abuse monitoring under its applicable service terms. STYL does not authorize Google to use paid-service API content to train its general models. STYL requires the separate adult-age confirmation because the current Gemini API terms restrict access to users who are 18 or older.
A different provider will not receive a portrait under this notice without an updated disclosure and renewed consent where required.

STYL does not sell, lease, trade, share for cross-context behavioral advertising, or otherwise profit from a portrait, face geometry, face profile, or appearance result. STYL does not disclose this data except to provide the feature, at your direction, in a lawful business transfer with required protections, or when disclosure is legally required.

5. Retention and destruction schedule

Portrait held by STYL: released from app and server working memory after the selected analysis finishes, fails, or is cancelled. It is not placed in STYL database storage, object storage, logs, or backups.
Provider copy: governed by the provider’s applicable API terms and abuse-monitoring window. Deleting from STYL cannot erase a copy already present in that independent window.
Local derived color, face, hair, and appearance results: kept until you delete the appearance profile, delete your account, or the data is no longer needed for the stated purpose.
Supabase-derived face and hair profile: kept until you delete the appearance profile or account, the purpose has been satisfied, or no later than three years after your last interaction with STYL, whichever occurs first, unless a shorter period is required by law. Backups age out on the provider’s recovery schedule.
Consent record: STYL may keep the notice version, analysis mode, provider, adult-age attestation for the cloud path, account ID, and acceptance time as evidence of your choice, without keeping the portrait. It is deleted with the account unless law requires a limited record for longer.

6. Your controls and rights

You can review and correct derived observations, keep styling-use switches off, delete the saved appearance data without deleting your closet, or delete your entire account. Withdrawing consent stops new processing but does not make earlier lawful processing retroactively unlawful. An in-app deletion removes the protected local profile and requests deletion of the cloud-synced face profile. See Data Deletion for provider and backup limits.

You may also request access, correction, export, restriction, withdrawal, or deletion at support@styl.fit. Depending on where you live, you may have additional biometric, privacy, or data-protection rights. We may verify control of the account before acting on a request.

7. Minors

The appearance scan is not intended for anyone under 13. The on-device analysis remains subject to STYL’s general age rules and should be used by a minor only with a parent or legal guardian’s involvement and consent where required. The Google-backed cloud-assisted analysis is available only after the user separately confirms they are 18 or older. Availability may be further limited by jurisdiction or provider rules. Parents and guardians may contact us to request review or deletion.

8. Changes and contact

If STYL changes the categories collected, purpose, storage location, retention schedule, or portrait-processing provider, we will update this notice and seek renewed consent where the change requires it. Questions or requests: support@styl.fit.