Privacy Policy
Last updated: August 4, 2026
What We Collect
| Data | Purpose | Storage |
|---|---|---|
| Account email and display name | Authentication and account identification | Supabase (encrypted) |
| Haircut entries | Core app functionality (dates, prices, styles, notes, ratings, duration) | Supabase (encrypted) |
| Photos | Haircut journaling and AI Stylist previews | Supabase Storage (private buckets, signed URLs) |
| AI Stylist photos and prompts | Sent to our AI providers (with your explicit consent) and stored in your private history | fal.ai for hairstyle previews; Google Gemini for face-shape and style analysis (processing only — Google does not retain or train on API data); Supabase (encrypted storage) |
| Subscription status and metadata | Manage Pro tier access and AI generation limits | RevenueCat and Supabase |
| Usage analytics | Understand feature usage and improve the app | PostHog (linked to your account identifier, never your name or email) |
Device Permissions
TrimTrack may request the following device permissions:
- Camera — To take photos for haircut entries or AI Stylist
- Photo Library — To select existing photos for haircut entries or AI Stylist
- Notifications — To notify you when an AI generation completes (local notifications only; no remote push)
These permissions are requested only when needed and can be revoked at any time in your device settings.
Analytics & Usage Data
TrimTrack uses PostHog to collect usage analytics that help us understand how the app is used and identify areas for improvement. Analytics are linked to your account identifier — not your name or email address — and include:
- App lifecycle events (app opened, became active, went to background)
- Feature interactions (haircut saved, AI generation started/completed, CSV exported)
- Authentication method used (Google, Apple, or email — no credentials)
- Subscription events (paywall viewed, purchase completed, subscription restored)
- Screen navigation
We do not send your name, email address, photos, haircut content, or notes to PostHog. Analytics data is used solely to improve the app experience and is never sold or shared with advertisers.
Face & Photo Data
TrimTrack's AI Stylist feature allows you to upload a selfie to preview how different hairstyles might look on you. This section explains exactly how your face and photo data is handled.
What Face Data We Collect
When you use the AI Stylist feature, you provide a single selfie photo. The photo is compressed on your device (resized to a maximum of 1024 pixels wide and converted to JPEG format) before being transmitted. TrimTrack does not extract, store, or process facial landmarks, facial geometry, face embeddings, or any biometric identifiers. The photo is used solely as a visual reference image.
User Consent Before Data Sharing
Before the AI Stylist sends any data to a third-party service, TrimTrack displays a clear consent dialog explaining:
- What data is sent: Your photo and hairstyle description.
- Who it is sent to: fal.ai for hairstyle previews, or Google Gemini for Face Shape Analysis and Style Identifier.
- What is not sent: Your name, email, haircut history, or any other personal data.
You must explicitly agree by tapping "I Agree" before any data leaves your device. This consent is requested once; you can continue to use the AI Stylist after agreeing. If you decline, no data is sent and the feature is not used. A persistent disclosure is also displayed on the AI Stylist screen near the Generate button, naming the provider that will process your photo.
How Face Data Is Used
Your selfie is sent from your device to a secure server-side function (Supabase Edge Function), which forwards the compressed image to the AI provider for the feature you are using:
| Feature | Provider | What it does |
|---|---|---|
| AI hairstyle preview | fal.ai | Generates a preview image showing the requested hairstyle applied to your likeness |
| Face Shape Analysis | Google Gemini | Classifies your face into a general shape category to recommend suitable styles |
| Style Identifier | Google Gemini | Describes the hairstyle visible in a photo so you can share it with your barber |
The image is also validated to confirm a human face is present; if no face is detected, the request is rejected with a user-friendly error message.
No facial recognition or identification is performed. Face Shape Analysis assigns a broad shape category only — it does not create a face template, measure facial geometry, or attempt to determine who you are. The face data is used exclusively for the feature you invoked and for no other purpose.
Third-Party Processing of Face Data
Your selfie is processed by one of two providers, depending on the feature you use. In both cases the image is transmitted securely over HTTPS via a server-side function, and the provider's API key is never exposed to your device.
- fal.ai — processes hairstyle preview generation. Their handling of submitted content is governed by fal.ai's privacy policy and terms of service.
- Google Gemini — processes Face Shape Analysis and Style Identifier. Per Google's Gemini API Terms of Service, data submitted through the API is not used to train Google's models and is not retained by Google beyond the duration needed to process your request and generate a response.
No other third party receives your face data. Your photos are never sold, licensed, or shared with advertisers, data brokers, or any other external parties.
Where Face Data Is Stored
- On your device: A temporary copy of the selfie exists in app memory during upload. Temporary files are cleaned up automatically.
- On our servers: Your original selfie and the generated hairstyle image are stored in a private Supabase Storage bucket (
ai-generations). These files are accessible only to your authenticated account via time-limited signed URLs that expire after 1 hour. Row Level Security (RLS) policies ensure that no other user can access your photos.
How Long Face Data Is Retained
Your selfie and generated images are retained in your private storage until you choose to delete them. You can delete individual AI generations from the AI History screen at any time. If you delete your account via Settings → Delete Account, all AI generation data — including selfies and generated images — is permanently and irreversibly deleted from our servers. We do not retain backup copies of deleted face data.
Your Control Over Face Data
- The AI Stylist feature is entirely optional — you are never required to upload a selfie.
- Camera and Photo Library permissions are requested only when you initiate the AI Stylist and can be revoked at any time in your device settings.
- You can delete any AI generation (including the associated selfie) from the AI History screen.
- You can delete your entire account and all associated data at any time via Settings → Delete Account.
Third-Party Services
TrimTrack uses the following third-party services to operate:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account info, haircut data, photos |
| RevenueCat | Subscription and in-app purchase management | User ID, subscription tier, product ID, purchase and expiry dates |
| fal.ai (via server-side function) | AI hairstyle preview generation | Uploaded photo and style description only, shared with your explicit in-app consent (processed server-side; see Face & Photo Data for details) |
| Google Gemini (via server-side function) | Face Shape Analysis and Style Identifier | Uploaded photo only, shared with your explicit in-app consent (processed server-side; see Face & Photo Data for details) |
| Apple Sign-In / Google OAuth | Authentication | Email and name (per provider's terms) |
| PostHog | Usage analytics | Account identifier and feature interaction events (no email, name, photos, or content) |
What We Don't Do
- We do not sell your data — including face data — to third parties
- We do not perform facial recognition, identification, or biometric analysis
- We do not create or store facial landmarks, embeddings, or geometry maps
- We do not share your photos or personal information with advertisers or data brokers
- We do not serve advertisements
- We do not track your location
- We do not send your name, email address, or personal content to analytics services
Data Security
- All data is transmitted over HTTPS
- Photos are stored in private storage buckets accessible only to your account via time-limited signed URLs (1-hour expiration)
- AI processing is handled via secure server-side functions — no API keys are exposed to your device
- Database access is protected by Row Level Security (each user can only access their own data)
- Authentication sessions are stored securely on-device and automatically refreshed
Data Retention
Your data is retained for as long as your account exists. You can delete your account from Settings → Delete Account in the app, or — if you no longer have the app installed — by request at our account deletion page.
When you delete your account, the following are permanently deleted from our servers, along with every image file stored for your account: your sign-in credentials, profile and display name, haircut entries, notes, photos, AI generations and selfies, style identifications, saved barbers and barbershops, share links, and analytics events. This cannot be undone.
Two exceptions apply:
- Any feedback you submitted through the app is retained in anonymized form, permanently unlinked from your account and email address.
- Our server operation logs keep a short-lived, de-identified record for security and abuse prevention.
Separately, records held by our billing provider and by Apple or Google are retained as transaction records where we are required to keep them for tax and accounting purposes. Analytics events already delivered to PostHog are not removed automatically — include a request in your deletion email and we will purge those as well.
Your Rights
You have the right to:
- Access your data at any time through the app
- Delete individual AI generations (including selfies) from the AI History screen
- Delete your account and all associated data via Settings → Delete Account, or through our account deletion page if you no longer have the app installed
For additional data requests (e.g. data export), contact us at trimtrack.support@proton.me.
Children's Privacy
TrimTrack is not intended for children under 13. We do not knowingly collect data from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated date.
Contact
For questions, concerns, or data requests — including requests related to face data — contact us at: