Privacy Policy

Overview

This Privacy Policy describes how Cutmaxx ("we", "us"), operated by Stanislav Pavlenko, handles information when you use our mobile app and website.

Contact: verbatim8872@gmail.com.

Your face scan stays on your phone

To find your face shape, the app detects your face in a selfie and measures its outline (for example the ratio of face length to width). This analysis runs entirely on your device using Google's on-device ML Kit library. The measurements and outline points are never sent to us or anyone else.

The app keeps your last scan photo and its result on your device so you can come back to your recommendations. They are deleted when you delete your account in the app (Profile, then "Delete my account") or uninstall the app.

We do not use your face for identification, recognition, verification or to compare you with anyone. We do not create face templates or rate your appearance.

If you are signed in, we record the resulting face-shape category (for example "oval") as a usage event, so we can understand which results are common. The category is not a measurement of your face and cannot identify you.

Information we collect

Account information: when you sign in with Apple or Google, we receive an identifier and an email address (or a private relay address) to create and secure your account. You can use the face-shape feature without an account.

Photos for try-ons: when you ask to see a haircut or beard on yourself, the selfie you scanned is uploaded to our servers and stored with your account, together with each generated result image and the styles you chose.

App usage: first-party events such as screens opened, scans completed, try-ons generated and purchases, stored with your account. We do not use third-party advertising or tracking SDKs.

Purchase information: subscription status and transaction identifiers from Apple, Google and our subscription provider RevenueCat. We never receive your payment card details.

Technical data: device type, app version and diagnostic logs needed to operate, secure and debug the service.

How we use information

To generate your try-on images, keep your try-on history, and let you save and share results.

To process subscriptions and restore purchases.

To keep the service safe and affordable, for example daily usage limits, and to comply with legal obligations.

To improve reliability and fix errors, using aggregated or de-identified data where feasible.

AI image processing

Try-on images are created by Google's Gemini image model, run for us by fal.ai, which processes the photo on our behalf. For each try-on we send fal.ai your photo (or an earlier result, when you add a beard) and a description of the chosen style written by us. We do not send your name, email or account details.

Results are AI previews. They show roughly how a style could look; your real result depends on your hair and your barber.

Service providers and sharing

Supabase (database, authentication, file storage and server functions), fal.ai (AI image generation), RevenueCat (subscription management), and Apple and Google (sign-in and payments). Each receives only what it needs to provide its part of the service.

We share information when required by law or legal process, or to protect the rights, safety and security of users and the service.

We do not sell or rent your personal information, and we do not share it for advertising.

Retention and deletion

Uploaded photos, try-on results and usage records are kept while your account exists. When you delete your account, we delete them: there is no additional retention period.

You can delete your account in the app (Profile, then Delete my account), or request deletion at https://llm-chats-4q11wohlw-pavlenkosts-projects.vercel.app/delete-account if you no longer have the app. Apple, Google and RevenueCat may keep their own purchase records.

Your rights

You can delete your account and all of its data at any time in the app (Profile, then Delete my account). To get a copy of your data, contact us.

Depending on where you live (for example in the EU/EEA or the UK under the GDPR, or in some US states), you may have rights to access, correct, delete, restrict or object to processing of your personal information, and to complain to your data protection authority. Contact us to exercise these rights.

Legal bases (EU/EEA and UK): we process your photos and account data to provide the service you ask for (performance of a contract), and usage and technical data for our legitimate interest in running a secure, reliable service.

Security

Photos are stored in private storage that no other user and no other app can list or open; your app receives short-lived links to your own images only. Data is encrypted in transit. No method of transmission or storage is completely secure.

Children

Cutmaxx is not directed at children. We do not knowingly collect personal information from anyone under 13, or under the age at which you can consent to the processing of your personal data in your country if that is higher (for example 16 in Germany and Poland, 15 in France, 14 in Spain and Italy). Contact us if you believe a child has used the service, and we will delete the account.

International transfers

Our servers and providers may be located outside your country, including in the United States. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Changes to this policy

We may update this Privacy Policy. The "Last updated" date changes when we do. For material changes we will also notify you by email or in the app before they take effect.