Privacy Policy for FADR

Effective Date: September 2026

Last Updated: September 29, 2026

1. Introduction

FADR ("we," "our," or "the app") is developed by Cinderhound Studio. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our AI hairstyle preview application on iOS and Android.

FADR lets you photograph yourself and see how you would look with a different haircut or hair colour. Because the app works with photographs of your face, we have tried to be specific about exactly what happens to those photographs.

Where the two platforms differ, this policy says so.

2. Information We Collect

2.1 Photographs

Your selfie: The photo you take or choose in order to preview a hairstyle
Reference photos: Any photo you optionally upload to copy a hairstyle from
Generated images: The results the app produces from your selfie

Photographs are sent to Google's Gemini API to generate a result (see section 4.1). They are not stored on our servers, are not used to train any model, and are not shared with anyone other than the image processing service described in section 4.1.

Nothing is sent until you have given permission. Before the first photograph ever leaves your device, the app shows a consent screen naming Google as the recipient and setting out exactly what is sent. If you decline, no photograph is transmitted. You can withdraw that permission at any time in Settings, after which the app will ask again before sending anything.

Your selfie is stored on your device so that you can reuse it without retaking or reselecting the same photo. The app keeps the six most recent selfies and no more; using a seventh removes the oldest. These photographs never leave your device except when you generate a preview, as described in section 4.1.

You can delete them at any time from Settings, and uninstalling the app removes them along with everything else.

2.2 Face Measurements

Face shape analysis: The app measures the proportions of your face to rank haircuts against your face shape
This is performed entirely on your device, using Apple's Vision framework on iOS and Google ML Kit Face Detection on Android
On both platforms the analysis runs locally. Nothing is transmitted to Apple, to Google, or to us as part of this measurement, and no internet connection is used for it
The measurement produces three values: face length, jaw definition, and cheekbone width
No facial recognition is performed. The app determines the shape of a face, never the identity of a person. No faceprint, biometric template, or identifying data is created or stored
Only the three resulting descriptions are saved, on your device

2.3 Information You Provide

First name: Used only to address you inside the app
Hair type, goal, and hair length: Used to rank haircut recommendations
Typed descriptions: Any hairstyle you describe in your own words

All of this is stored locally on your device.

2.4 Device Information

A randomly generated device identifier, used to apply fair-use limits to image generation and to hold the balance of looks you have purchased
This identifier is created by the app itself. It is not your Apple ID, your Google account, your device serial number, an Android ID, or an advertising identifier, and it is not linked to any of them
It contains no personal information and cannot be used to identify you

2.5 Permissions Required

iOS

Camera: To take a selfie for hairstyle previews
Photo Library: To choose an existing photo, and to save results if you ask us to
Internet: Required to generate hairstyle previews

Android

Camera: To take a selfie for hairstyle previews
Internet: Required to generate hairstyle previews
No photo or storage permission is requested. Choosing an existing photo uses the Android Photo Picker, which gives the app access to the single image you select and nothing else in your gallery

FADR does not request location, contacts, microphone, health, or tracking permissions on either platform.

Separately from these system permissions, the app asks for your explicit permission before sending any photograph to Google for processing, as described in sections 2.1 and 4.1.

3. How We Use Your Information

Generate a preview of you with a different hairstyle or hair colour
Measure your face shape to rank haircuts that suit you
Keep your recent selfies so you can reuse a photo without retaking it
Save your previous looks so you can revisit them
Apply fair-use limits so the service is not abused
Improve app performance and user experience

We do not build advertising profiles, and we do not sell data.

4. Third-Party Services

4.1 Google Gemini (Image Generation)

Generating a hairstyle preview requires sending your photograph to Google's Gemini API for processing. This is the only third party that receives your photograph.

Your permission first: Before the first photograph is sent, the app shows a consent screen that names Google as the recipient, lists exactly what will be sent, and explains what happens to it. Nothing is transmitted unless you agree. Declining leaves you where you were, with nothing sent
What is sent: Your selfie, any reference photo you uploaded, and a text description of the requested hairstyle
How it is sent: Over HTTPS, through our own secure proxy server, so that our API credentials are never stored in the app
What is returned: A single generated image, which is sent back to your device
Retention by us: We do not store your photographs on our servers. They pass through, are processed, and are discarded
Retention by Google: Google may retain data submitted to the API in accordance with its own terms. For more information, see the Google Privacy Policy and the Gemini API Additional Terms of Service
Protection by Google: Google is contractually required, under those terms, to protect data submitted to the Gemini API to a standard equivalent to the protections described in this policy

Withdrawing permission: You can withdraw your agreement at any time in Settings, under "ai processing". The app will then ask again before sending any further photograph.

If you are not comfortable with your photograph being processed by a third-party service, decline the consent screen, or simply do not use the preview feature. The rest of the app continues to work on your device.

4.2 Cloudflare (Proxy)

Requests are routed through a Cloudflare Worker that holds our API credentials and applies rate limits. Cloudflare processes the request in transit and may log standard request metadata. See the Cloudflare Privacy Policy.

4.3 On-Device Face Measurement

Face shape measurement uses Apple's Vision framework on iOS and Google ML Kit Face Detection on Android. Both run entirely on your device.

ML Kit is a Google library, but the face detection model it uses for this runs locally on your phone. Your photograph is not uploaded to Google, to us, or to anyone else in order to measure it. This is a separate process from image generation described in section 4.1, which does send your photograph to Google's Gemini API.

4.4 In-App Purchases

FADR sells consumable "look packs" that let you generate additional previews. Purchases are processed by the app store you installed from:

iOS (Apple App Store)

Payment Processing: All payments are handled securely by Apple
Management: Purchases can be reviewed in iOS Settings → Apple ID → Media & Purchases
Refunds: Refund requests are handled by Apple according to its refund policy

Android (Google Play)

Payment Processing: All payments are handled securely by Google Play
Management: Purchases can be reviewed in the Play Store app under Payments & subscriptions → Budget & order history
Refunds: Refund requests are handled by Google according to the Google Play refund policy

On both platforms:

Data Collected: We do not collect or store your payment information. We never see your card details, billing address, or name
Purchase Status: We receive confirmation of a completed purchase from Apple or Google in order to credit your looks. This confirmation is verified with the store and is linked only to the anonymous device identifier described in section 2.4

4.5 Cloud Backup

Your recent selfies and saved looks are stored on your device.

iOS: If iCloud Backup is enabled, they are included in your device backup, in your own iCloud account.

Android: If Android Auto Backup is enabled, they are included in your backup, in your own Google Drive account.

On both platforms the backup is yours, and we have no access to it.

The anonymous device identifier described in section 2.4 is deliberately excluded from backup on Android. This means restoring a backup onto a new or additional device does not carry your identifier across, so two devices can never share the same balance of looks.

4.6 No Advertising and No Analytics

FADR contains no advertisements, no advertising identifiers, and no third-party analytics or tracking SDKs.

We do count anonymous usage events, for example how many previews were generated on a given day across all users. These are aggregate counters only. They are not linked to you, they contain no personal information and no photographs, and they cannot be used to reconstruct what any individual did.

5. Data Storage and Security

Local Storage: Your recent selfies (up to six), saved looks, name, preferences, face measurements, and remaining looks are stored on your device
File Protection (iOS): Saved photographs, including your recent selfies, are written with complete file protection, meaning they cannot be read while your device is locked
File Protection (Android): Saved photographs, including your recent selfies, are written to internal app-private storage, which is not readable by other apps on the device
In Transit: All network requests use HTTPS
On Our Servers: We store no photographs. Our proxy holds your balance of purchased looks and short-lived, anonymous counters used for rate limiting, both keyed to the anonymous identifier in section 2.4
Content Reports (Android): If you report a generated image from inside the app, we store your report, the reason you chose, the style it came from, any note you write, and a shortened form of your anonymous identifier, so that we can review it and improve our safeguards. The image itself is never sent or stored. Please do not include personal details in the note

6. Data Retention

Local data, including your saved looks, remains on your device until you delete it in the app or uninstall the app
Your recent selfies are kept on your device until you delete them in Settings, until a seventh photo pushes the oldest out, or until you uninstall the app
Rate-limiting counters on our proxy expire automatically within 24 hours
Content reports (Android) are kept for 90 days and then deleted automatically
Your balance of purchased looks is retained so that looks you have paid for do not expire
Photographs sent for generation are not retained by us
Retention by Google is governed by Google's own policies
Backups remain in your iCloud or Google Drive account until you delete them

7. Your Rights

You have the right to:

Access your data: All of it is visible within the app
Withdraw permission for AI processing: Settings, then "ai processing", then "withdraw permission"
Delete your saved selfies: Settings, then "delete saved photos"
Delete individual looks: Delete any saved look from the history screen
Delete all data: Uninstall the app, or use "clear saved looks" in settings
Delete backups: Remove FADR data from your iCloud backup in iOS Settings, or from your Google Drive backup in Android Settings → Google → Backup
Withdraw permissions: Revoke camera access at any time in iOS Settings → FADR, or Android Settings → Apps → FADR → Permissions
Contact us: Email contact@cinderhound.com with any request regarding your data

For step-by-step instructions on requesting deletion of the data held on our servers, see Delete your FADR data.

Because we do not hold accounts or store your photographs, there is no server-side profile for us to delete. The only data we hold is your balance of purchased looks, anonymous rate-limiting counters and, on Android, any content reports you choose to send. None of it is linked to your name, email or account.

8. Children's Privacy

FADR is not intended for children. You must be at least 16 years old to use FADR, or at least 13 where local law permits and you have the consent of a parent or guardian.

We do not knowingly collect personal information from children. Please do not upload photographs of children.

9. Photographs of Other People

Only upload photographs you have the right to use. Do not upload photographs of other people without their permission, and do not upload photographs of children. Reference photographs are used only to read a hairstyle; the face in a reference photograph is ignored.

10. AI-Generated Content

Images produced by FADR are generated by an AI model. They are a preview and an approximation, not a photograph and not a guarantee of how a haircut will look on you. Results vary with lighting, photo quality, and hair type. Please treat them as a starting point for a conversation with your barber or stylist rather than a promise.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: contact@cinderhound.com
Website: https://cinderhound.com
Developer: Cinderhound Studio

By using FADR, you agree to this Privacy Policy.