1. Introduction
Stylr ("Stylr", "we", "us" or "our") is a mobile application operated by SoulState Solutions, a company registered in the United Arab Emirates with its registered address at Dubai Silicon Oasis, Dubai, United Arab Emirates. Stylr lets you take or upload a photo of yourself and preview hairstyles and haircuts on your own face using artificial intelligence ("AI"), save the designs you like, and show or send them to a stylist.
This Privacy Policy explains what personal data we collect when you use the Stylr mobile application, website and related services (together, the "Service"), how we use and protect that data, who we share it with, and the rights and choices you have. For the purposes of the EU General Data Protection Regulation ("GDPR"), SoulState Solutions is the data controller of your personal data.
If you do not agree with this Privacy Policy, please do not use the Service.
2. At a Glance
The full detail is below, but these are the promises that matter most:
- Your face photos are used for two purposes only: analysing your visible face and hair characteristics to recommend hairstyles, and generating the hairstyle previews you ask for.
- We never use your photos for facial recognition, to identify you or anyone else, or to build any biometric database.
- We do not use your photos or your generated designs to train AI models, and we use provider settings and agreements designed to prevent our AI providers from doing so either.
- We never sell your photos or any of your personal data. Ever.
- Previews you choose not to save are deleted automatically within 7 days. Photos you upload stay in your My Photos library until you delete them - or, if a photo is never used in a design, it is deleted automatically within about 48 hours.
- You can delete saved designs at any time in the app. You can also close your account at any time - in the app or by emailing frank@soulstatesolutions.com - which blocks access immediately and permanently deletes your data within 30 days (you can sign back in during that window to cancel it).
- You can browse styles and generate previews without an account. We only ask you to sign up when you want to save a design or send it to a stylist.
- You can withdraw your consent to AI photo processing at any time in Settings - we then stop processing your photos until you accept again.
This summary does not replace the full policy below.
3. Information We Collect
| Data | When it is collected | Why we collect it |
|---|---|---|
| Face photo (selfie or uploaded photo) | When you start a design | To generate the hairstyle previews you request. See Section 4 for exactly how photos are handled. |
| Generated design images | Created when you request a preview | Shown to you in the app; stored in your account only if you tap Save. |
| Phone number | At sign-up | To create and secure your account using one-time SMS codes (OTP). We do not use email/password login. |
| First and last name | At sign-up | Basic profile and display purposes. |
| Role (styler or stylist) | At sign-up | Determines which experience your account receives. |
| Approximate location or a place you search for | When you use the "find a stylist" feature | To show salons near you via Google Maps. We do not track your location in the background. |
| Design-send records | When you tap "Send My Design" to a verified stylist | So that the stylist you chose can view the design you sent them. |
| Payment information | When you make a purchase | Processed by the Apple App Store or Google Play Billing. We never see or store your full card details. |
| Device and usage data | Automatically while you use the app | App functionality, crash diagnostics, security, fraud prevention and improving the Service. |
What we do NOT collect: your contacts, your continuous or background location, or advertising identifiers used to track you across other apps.
4. Your Face Photos and AI Processing
We know that a photo of your face is the most sensitive thing you give us, and we treat it that way. This section describes exactly what happens to it.
What happens to your photo. When you take or upload a photo, it is transmitted over an encrypted connection to a third-party AI image-generation provider solely to generate the hairstyle previews you request. The photo is used for that generation and for nothing else.
No facial recognition. We do not use your photos to identify you or anyone else. We do not create biometric templates, run face-matching, or maintain any facial-recognition database. Your photo is used to render an image, not to recognise a person.
No AI training. We do not use your photos or generated designs to train AI models. We use commercial API terms and settings designed to prevent our AI provider from using your photos to train its models.
No marketing use without your explicit opt-in. We will never use your photo or a design showing your face in advertising, promotional material or public galleries unless you separately and explicitly agree to that specific use.
Never sold. We do not sell your photos, your designs, or any of your personal data to anyone.
How generated previews are served. Your uploaded photos are stored privately. The AI-generated previews are served from unguessable, non-listed web addresses so that images already loaded in the app keep working - anyone who has the exact link to a preview can open it, so treat any preview link you share as public. Preview links are never shown to other users in the app.
Automatic deletion. Previews generated from a design you do not save are deleted from our systems within 7 days. Photos you upload remain in your My Photos library so you can reuse them, until you delete them or delete your account; a photo that is never used in a design or an in-progress draft is deleted automatically within about 48 hours. Saved designs are kept in your account until you delete them or delete your account.
Your consent. We process your face photo on the basis of your consent, which you give by choosing to submit a photo. You can withdraw it at any time in the app under Settings > AI Photo Processing > Withdraw Consent — you do not need to delete anything or close your account. Withdrawing stops any further AI processing of your photos: any design you have not finished is discarded, and we will ask you to accept this notice again before you create a new design. Your saved designs and uploaded photos are kept until you delete them (from My Photos, or by closing your account), so withdrawing consent is not itself a deletion request. Withdrawal does not affect processing that happened before it.
5. How We Use Your Information
- To provide the Service: generating previews, colour variants and 360-degree views, saving designs, and delivering designs to a stylist you choose.
- To create and secure your account (SMS one-time codes).
- To process purchases and subscriptions.
- To show you nearby salons when you ask.
- To respond to support requests.
- To keep the Service secure and prevent fraud and abuse.
- To comply with legal obligations.
- To improve the Service using aggregated, non-identifying usage statistics - never your photos.
6. Legal Bases for Processing (GDPR)
| Legal basis | What it covers |
|---|---|
| Consent (Art. 6(1)(a)) | Processing your face photos to generate previews; any optional marketing communications. |
| Contract (Art. 6(1)(b)) | Creating your account, saving designs, sending designs to stylists you choose, and processing your purchases. |
| Legitimate interests (Art. 6(1)(f)) | Securing the Service, preventing fraud and abuse, and improving the Service with aggregated usage data. |
| Legal obligation (Art. 6(1)(c)) | Tax, accounting and other legal record-keeping. |
8. How Long We Keep Your Data
| Data | Retention |
|---|---|
| Photos you upload (selfies) | Kept in your My Photos library until you delete them or delete your account. A photo that is never linked to a design or an in-progress draft is removed automatically about 48 hours after upload. |
| AI previews you don't save | Removed automatically once they are no longer linked to a saved design or an in-progress draft - within about 7 days. |
| Saved designs (including 360° angle images) | Until you delete the design or your account. |
| In-progress design draft | We keep one draft per account so you can resume it. Starting a new design replaces it; it is removed when you save the design or delete your account. |
| Account data (phone number, name, role) | For the life of your account. Deactivating blocks access immediately and schedules permanent deletion - you can sign back in within 30 days to cancel it. After that window we delete the account and its data. |
| Design-send records | Until you delete the related design or your account, at which point the stylist's access is also removed. |
| Payment records | We store a purchase record (amount, currency, product, store transaction id) linked to your account, and it is deleted with your account. We never receive or store card details - payments are processed by Apple (iOS), Google Play (Android), each of which keeps its own transaction records under its own terms and applicable tax and accounting law. |
| Usage and diagnostic logs | Kept only briefly for security, abuse prevention and troubleshooting, under our hosting provider's log-retention period (days, not months). We do not run separate product-analytics tracking. |
9. Your Rights
If you are in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate data.
- Delete your data ("right to be forgotten"), including your photos and designs.
- Restrict or object to certain processing.
- Data portability - receive your data in a machine-readable format.
- Withdraw consent at any time, without affecting prior processing.
You can exercise these rights in the app (delete designs / delete account) or by emailing frank@soulstatesolutions.com. We will respond within one month. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence (for example, the Irish Data Protection Commission, www.dataprotection.ie).
If you are outside the EEA/UK, we honour equivalent requests wherever reasonably possible, and you can delete your designs and account at any time regardless of where you live.
10. Security
We protect your data with encryption in transit (TLS) and at rest (AES-256), access controls, and the security features of our infrastructure providers. Phone numbers used for login are stored in hashed or otherwise protected form. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the relevant authorities of any breach as required by law.
11. International Transfers
Our service providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
12. Children
The Service is not intended for anyone under 16, and we do not knowingly collect personal data from anyone under 16. Do not upload a photo of any person under 16. If you believe a child has provided us personal data, contact frank@soulstatesolutions.com and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version in the app and update the "Last updated" date above. If we make material changes to how we handle your photos, we will ask for your consent again before those changes apply to you.
14. Contact Us
Data controller: SoulState Solutions, Dubai Silicon Oasis, Dubai, United Arab Emirates.
Privacy questions and requests: frank@soulstatesolutions.com