Privacy

The photos you upload are stored in private Cloudflare R2 storage. There is no public address for them: they are served only through our own signed-in media route.

We keep them until you delete them. Deleting an uploaded photo queues the stored file for deletion.

Your generated headshots stay in your library. Removing a run from your library hides it from you; it does not delete the images from storage.

Your browser re-encodes each photo it can decode as a plain JPEG before uploading it. That removes the location (GPS) data and other metadata cameras embed in a file.

A face check runs in your browser to confirm there is a face in the photo. It only detects that a face is present. We turn the face-recognition model off, so no face fingerprint is computed.

To generate a headshot, we send the model a link to your photo. The link is signed and expires after 15 minutes.

The request goes to fal.ai, which runs the model. Depending on the model behind the look you chose, your photo may be processed by that model's vendor, such as Google, OpenAI or ByteDance.

We ask fal.ai not to retain the request payload, and to expire the generated image after 60 minutes. We copy each result into our own storage before then.

Card payments are processed by Stripe.

We do not send email to users, marketing or otherwise. The address you sign up with is used to sign you in, and your headshots are delivered in the app.