Privacy Policy
Effective [date of first release]
Tressa is an iPhone app that reads one selfie and shows hair, brows and makeup that suit you, drawn on your own face. This policy explains what we collect, why, who processes it for us, and how long we keep it. Tressa is provided by [legal name of the developer], [postal address] ("we").
The short version
- You do not create an account. We never ask for your name to give you a read.
- Your selfie is sent to Google's Gemini models to make your read and your looks. It is deleted from our servers within 24 hours.
- Your photo is never used to train models, never sold, and never used for advertising.
- There is no advertising and no tracking across other apps or websites.
What we collect
Your selfie and your looks
When you take or choose a photo, the app asks your permission first, then uploads it to our servers. We use it to write your read (a description of features such as hair, undertone and brows, and the changes we suggest) and to draw your looks. The photo, the looks drawn from it and the written read are deleted from our servers within 24 hours. After that we keep only the product categories that were suggested, with no photo and no description of you, to measure which suggestions are useful.
The app also keeps your last read on your iPhone for 24 hours so you can come back to it. You can delete it sooner in Settings, under "Delete my photos and reads".
Face features
To check that a drawn look still shows your face, the app locates facial landmarks on your iPhone, using Apple's on-device Vision framework. These landmarks never leave your iPhone and are not stored. We do not create or keep face templates or any other biometric identifier, and we do not use your photo to recognise you.
A device identifier
The app creates a random identifier when it is installed. It lets us give each install one free read and protect the service from abuse. It is not your Apple ID, your advertising identifier or your phone number.
Subscriptions
Subscriptions are sold by Apple through the App Store. Apple handles your payment details; we receive the signed purchase record Apple provides (product, purchase and expiry dates, a transaction number) to unlock what you bought. We keep it while your subscription is active and as long as tax and accounting law requires.
Orders
If you buy products in the app, we collect what we need to deliver them: your name, email, phone number, shipping address and what you ordered. Payments are processed by our payment provider; we never see or store your full card number. We share your name, address and the order with the supplier and carrier that deliver it. We keep order records as long as tax, accounting and consumer law requires.
Support
If you email us, we keep the conversation to help you and delete it when it is no longer needed.
Who processes data for us
- Google (Gemini API) analyses your selfie and draws your looks. We use Google's paid API, under which Google does not use your photo to improve its products; Google may keep requests for a limited time to detect abuse, as described in the Gemini API Additional Terms.
- Cloudflare runs our servers and stores photos and looks until they are deleted.
- Neon hosts our database.
- Apple sells and manages subscriptions.
- Our payment provider processes order payments and calculates sales tax.
- Suppliers and carriers receive what they need to fulfil and deliver an order.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Your choices and rights
- The app asks before any photo leaves your iPhone. If you choose "Not now", nothing is sent.
- You can delete your last read and its photos from your iPhone at any time in Settings.
- You can ask us to access, correct or delete information we hold about you by emailing hello@tressaly.com. Because there are no accounts, we may ask for your order number or purchase date to find your records. We will not discriminate against you for making a request.
Children
Tressa is not directed to children under 13, and we do not knowingly collect information from them. Only upload a photo of yourself. If you believe a child has used the app, contact us and we will delete what we hold.
Security
Data is encrypted in transit. Photos are stored in private storage that can only be read through short-lived signed links, and access to our systems is limited to the people who run them.
Changes
If we change this policy, we will update the date above, and tell you in the app before a change that affects how your photo is handled.
Contact
hello@tressaly.com
[legal name of the developer], [postal address]