Privacy Policy

1.About This Policy

Chromyne (“we,” “our,” or “us”) is a beauty and style recommendation app. This policy explains how we collect, use, and protect your information when you use Chromyne on iOS or Android.

2.Information We Collect

• Photos you provide (face data): You may upload or take a selfie to receive style recommendations. We use this photo only to generate your color analysis, makeup, and styling results — for example, estimating your undertone, contrast, and general face shape for styling purposes. We do not use selfies to identify you, verify your identity, run facial recognition, create a biometric template or faceprint, or make any biometric identity claims.
• App activity: We collect screen views, funnel actions, and paywall events to understand how the app is used and improve the experience.
• Purchase information: We collect your subscription status and purchase history to deliver premium features. Purchases are processed by Apple App Store, Google Play, and RevenueCat.
• Crash and diagnostic data: We collect crash logs and performance data to fix bugs and improve stability, processed by Sentry.
• Analytics: We use PostHog to collect anonymized usage analytics. No personal profiles are sold to advertisers.
• Account identifier: If you use premium features, we associate a RevenueCat app user ID with your purchases.

3.How We Use Your Information

We use your information to: generate your personalized style report; deliver and restore premium access; improve app quality and fix bugs; respond to support requests; and comply with legal obligations.

4.Data Sharing, Including Your Photo and Face Data

We share data only with the service providers that help us operate the app:

• OpenAI and Google (Gemini API) — your selfie photo is sent to these AI providers in real time so they can analyze it (undertone, contrast, face shape) and, for premium users, generate an AI makeup preview image. Before your first photo is analyzed, the app shows an in-app disclosure naming these providers and asks you to agree before any photo is sent. These providers process the photo only to fulfill that specific request; we do not permit them to use your photo to train their general-purpose AI models, and we do not send your name, email, or account identifier along with the image. OpenAI and Google are bound by their respective API terms of service to handle any face data we send them with confidentiality and security protections consistent with this Privacy Policy, and to use it only to provide the requested analysis — not for any other purpose.
• Supabase (for secure cloud storage of AI-generated report data and AI-generated preview images — see Data Retention below for what this does and does not include)
• RevenueCat (for subscription management)
• PostHog (for anonymized analytics)
• Sentry (for crash reporting)

We do not sell your personal data, and we never share your selfie, your face data, or your generated images with advertisers or third-party marketing platforms.

5.Data Retention and Deletion — Photos and Face Data

Your original selfie is used only to generate your single analysis request. It is transmitted to our AI providers (OpenAI, Google) for that request and is not permanently stored on Chromyne's own servers. AI-generated preview images created for your report (such as a makeup preview) are stored securely in our cloud storage (Supabase) so we can display your report and let you revisit it, until you delete them or request account deletion — there is currently no fixed automatic expiration on generated images beyond your deletion request. You can request deletion of your photos, generated images, reports, and account data at any time from the app's Settings screen or by contacting privacy@chromyne.app. We process deletion requests within 30 days.

6.Your Rights, Consent, and Data Deletion

Revoking consent for face data: Granting consent to analyze a selfie is never permanent. You can withdraw your consent for us to collect or use your face data at any time by opening the app and going to Settings → Face data consent → Withdraw. Once withdrawn, we will not analyze any new photo until you agree again — you'll see the same in-app disclosure and consent prompt the next time you start a report. Withdrawing consent does not automatically delete photos or reports we already processed; see below to delete those. You can also withdraw consent by uninstalling the app, which removes your on-device consent record.

Deleting your data: You may request deletion of your uploaded images, generated results, saved reports, and any account data at any time by using "Delete selfie data" in the app's Settings screen or by emailing privacy@chromyne.app. We will process your request within 30 days. You can also delete locally cached data by uninstalling the app.

7.Children’s Privacy

Chromyne is not directed to children under 13. We do not knowingly collect information from children under 13.

8.Security

All data is encrypted in transit. We follow industry-standard practices to protect your information.

9.Changes to This Policy

We may update this policy from time to time. We will update the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance.

10.Contact

For privacy questions or data deletion requests: