← Back to Cinderhound Studio

Delete your FADR data

FADR · Cinderhound Studio

This page explains how to request deletion of data held about you, what gets deleted, and what is kept. It covers FADR on both iOS and Android; where they differ, it says so.

The short version

Most of your data never leaves your phone. Uninstalling FADR deletes everything stored in the app: your recent selfies, saved looks, name, preferences, face measurements and Color Analysis result.

A small amount of anonymous data is held on our servers, against an anonymous identifier for your device: your balance of looks, your FADR Pro subscription status, a record that your device has had its free looks, promo codes you redeemed, short-lived counters used to prevent abuse, and on Android any content reports you chose to send. This stays when you uninstall the app, so that looks you have paid for are not lost if you reinstall. To have it removed, email us. See below.

How to request deletion

Email contact@cinderhound.com with the subject line "Delete my data".

That is the whole process. You do not need an account, because FADR does not have accounts.

Please include your device ID, so we can find the right record:

If you cannot open the app, email us anyway, tell us whether you use iOS or Android and roughly when you last used FADR, and we will do our best to locate the record. Because the identifier is anonymous and not linked to your email address, your name, or any account, we may not be able to find a specific record from your message alone.

We respond within 30 days.

If you have FADR Pro, cancel it first. Deleting your data does not cancel your subscription, and neither does deleting the app. Cancel in your device's subscription settings: on iOS, Settings → your name → Subscriptions; on Android, the Play Store app → Payments & subscriptions → Subscriptions.

What is deleted

On request, we delete everything associated with your device identifier from our servers:

WhatDeleted on requestOtherwise kept
Your balance of purchased looksYesSo that paid looks don't expire
Your FADR Pro subscription record (plan, renewal date, trial status, allowance used)Yes, the link to your deviceWhile active, then as needed for accounting and disputes
Record that your device has had its free looksYes10 years
Record of promo codes your device redeemedYes2 years
Content reports you sent (Android)Yes90 days
Fair-use and rate-limiting counters, including Color AnalysisYesThey expire within 48 hours on their own
Deleting your balance forfeits any looks you have paid for and not yet used. We cannot restore them afterwards, because once the record is gone there is nothing linking you to it. If you want a refund rather than deletion, contact the store you bought from, since purchases are handled by the store, not by us: on iOS through reportaproblem.apple.com, on Android through Google Play.

What is kept, and for how long

Aggregate usage counts. We count events such as "a preview was generated" across all users, per day. These are totals only. They contain no photographs, no personal information, and nothing tied to any device, so there is nothing in them to delete. They expire after 60 days.

Network counts for the free looks. To stop the free looks for new users being collected over and over, we count how many are given out on each network per day, using a one-way, salted, shortened hash of the IP address. We never store the IP address itself, these counts are not tied to your device, and they expire within about 25 hours.

Records of verified purchases. We keep the purchase reference issued by Apple or Google so that the same purchase cannot be credited twice. This reference comes from the store and does not identify you.

That is the complete list.

What we never had in the first place

Your photographs. Creating a look or running Color Analysis sends your photo to Google's Gemini API for processing, through our server, and only after you have given permission in the app. We do not store it. It passes through, is processed, and is discarded. There is no copy of your face on our servers to delete. Retention by Google is governed by the Google Privacy Policy and the Gemini API Additional Terms of Service.

Your face measurements. These are calculated entirely on your phone, using Apple's Vision framework on iOS and Google ML Kit on Android. They are never transmitted to us or to anyone else.

Your recent selfies, saved looks, name, preferences and Color Analysis result. All stored on your device only. Delete your recent selfies in Settings, delete individual looks in the app, or uninstall FADR to remove everything stored in the app at once.

Your payment details. Purchases are processed by Apple on iOS and by Google Play on Android. We never receive your card details, billing address, name or email.

Your identity. FADR has no accounts, no email addresses, no phone numbers, and no sign-in. The device identifier is anonymous: on iOS it is created by the app and kept in your device's Keychain, for this device only; on Android it is a one-way, salted hash of the Android ID that Android provides to FADR, and the Android ID itself never leaves your phone. It is not your Apple ID, your Google account, or an advertising identifier, and it is not linked to any of them.

Backups

iOS: If iCloud Backup is enabled, your recent selfies and saved looks are included in your own iCloud backup. Remove it under iOS Settings → your name → iCloud → Manage Account Storage. The device identifier is kept in the Keychain for this device only, so restoring onto a different iPhone does not carry it across.

Android: If Android Auto Backup is enabled, your saved looks are included in your own Google Drive backup. Remove it under Android Settings → Google → Backup. The device identifier is excluded from backup and is different on every phone, so restoring onto a different phone does not carry it across.

On both platforms the backup belongs to you, not to us, and we have no access to it.

Questions