Stylo

Privacy Policy

Effective: September 17, 2026 Developer: SigmaSquare

At a glance

Stylo analyzes one selfie to recommend hairstyles, colors, and accessories that suit your face shape and skin tone. Your photo is used only for that analysis.

We never use facial recognition to identify you, never sell your data, never show ads, and include no advertising or analytics trackers. You can permanently delete your account and every photo from inside the app at any time.

1.Who we are

Stylo is developed by SigmaSquare ("we", "us"). This policy explains what data the Stylo mobile app collects, how it is used, and the choices you have. Questions or requests can be sent to support@trystylo.app.

2.Information we collect

Account information. When you sign in with Apple, Google, or email, we receive your email address and, if you share it, your name. We use this only to create and secure your account.
Selfie photos. The photo you take or choose for an analysis. Photos are uploaded over an encrypted connection and stored privately; they are never public and never visible to other users.
Face and appearance data. From your photo, our AI analysis derives style attributes: your face shape category (for example "oval"), skin tone and undertone, and the resulting recommendations. See section 3.
Purchase information. If you buy a report or subscribe, the purchase is processed by Apple or Google and managed through RevenueCat. We receive purchase status (what was bought and whether it is active) — never your card or payment details.
Optional profile details. A gender selection, used only to tailor which recommendation categories you see.

We do not collect your contacts, location, browsing history, or advertising identifiers, and the app contains no third-party analytics or advertising SDKs.

3.Face data

Because Stylo works from a photo of your face, we want to be precise about what happens to it:

What is collected: the selfie you submit, and the style attributes derived from it (face shape category, skin tone and undertone, and feature-based style notes).
Why: solely to generate your personal style report. Face data is never used to identify you or anyone else, and we do not create biometric templates or use facial recognition.
How long it is kept: your photo and its derived attributes are stored with your account so you can revisit past reports. They are deleted when you delete the individual analysis or your account (section 6).
Who sees it: only the service providers listed in section 5, acting on our instructions to run the analysis and store your data. Face data is never sold, shared for advertising, or used to train our own models.

4.AI processing

Your style report is generated by an AI vision model operated by OpenAI. When you request an analysis, your photo is made available to OpenAI's API through a private link that expires after five minutes, the model returns your style attributes and recommendations, and the result is saved to your account. Under OpenAI's API terms, data sent to the API is not used to train their models.

5.Service providers

We use a small number of processors to run Stylo. Each receives only what it needs:

Service	Role	Data involved
Supabase	Database, authentication, and photo storage	Account info, photos, analysis results, purchase status
OpenAI	AI analysis of your selfie	Your photo (temporary link), derived style attributes
RevenueCat	Purchase and subscription management	Anonymized user ID, purchase status
Apple / Google	Sign-in and payment processing	Handled under their own privacy policies

We do not sell or rent personal information to anyone, and we do not share it with data brokers or advertisers.

6.Retention and deletion

Your photos and reports are kept while your account exists so your history remains available. You are in control of both:

Delete one analysis: swipe or tap Delete on any report in your history.
Delete everything: choose Delete Account at the bottom of the home screen. This permanently removes your account, every photo, every analysis, and all derived face data from our systems. It cannot be undone.

You can also email us at support@trystylo.app to request deletion, and we will complete it within 30 days.

7.Security

Data is encrypted in transit (TLS) and at rest. Photos are stored in a private bucket accessible only through short-lived signed links tied to your account, and database access is enforced per-user with row-level security.

8.Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. The in-app deletion tools cover most of this directly; for anything else, contact us and we will respond within 30 days. We do not discriminate against you for exercising these rights.

9.Children

Stylo is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

10.Changes to this policy

If we make material changes, we will update this page and the effective date above, and notify you in the app before the changes take effect.

11.Contact

SigmaSquare · support@trystylo.app