隱私權政策
最後更新日期：2026 年 10 月 13 日
「AI 髮型試戴」（以下稱「本 App」）讓你上傳正面照片，用文字描述或從型錄選擇髮型，由 AI 生成新造型，並產出給美髮師看的沙龍溝通卡。你的臉部照片是很私人的資料，本政策說明我們收集哪些資料、如何使用、交給誰處理、保存多久，以及你可以如何刪除。
我們收集的資料
- 照片：你拍攝或從相簿選擇、上傳用來生成造型的正面照片。
- 造型描述：你在「AI 造型師」輸入的髮型描述與回答，以及 AI 整理出的造型規格與對話紀錄。請只描述髮型，不要輸入姓名、電話等個人資料。
- 生成結果：AI 生成的造型圖，以及溝通卡內容（剪裁、燙髮、髮色與整理建議）。
- 匿名帳號識別碼：App 第一次啟動時產生的隨機 ID，用來保存你的點數與試戴紀錄。我們不要求也不收集姓名、電子郵件或電話。
- 點數與購買紀錄：點數增減，以及 App Store 交易編號、購買的點數包與時間。付款由 Apple 處理，我們不會取得你的付款資訊。
- 偏好設定：App 語言、預設髮型類別，以及是否已同意本說明（只存在你的裝置上）。
- 技術紀錄：請求時間、錯誤訊息等伺服器紀錄，用於維運與防止濫用。紀錄不包含照片內容或照片網址。
我們不會收集位置、通訊錄或裝置上的其他照片，不會追蹤你在其他 App 或網站的活動，也不會將資料用於廣告或出售。
臉部資料
本 App 處理的臉部資料，只有你自己拍攝或選擇上傳的正面照片，以及依照片生成的造型圖。
- 收集什麼：你上傳的正面照片。上傳前，App 會在你的裝置上用 Apple 的 Vision 框架確認照片中剛好有一張臉；這個檢查只計算臉的數量，結果不會保存，也不會傳出裝置。我們不做臉部辨識或身分比對，不擷取、不建立也不保存臉部特徵點、臉部幾何或任何生物特徵資料。
- 用途：只用來生成你選擇或描述的髮型，以及撰寫沙龍溝通卡。不會用於辨識身分、廣告或行銷，不會用來訓練我們的模型，也不會出售。
- 上傳前取得同意：第一次上傳照片前，App 會列出會送出的資料、接收的第三方 AI 服務與保存期限，你按下「同意並上傳」後才會上傳；按「不同意」則照片不會離開你的裝置。
- 分享對象：只交給下方「第三方處理」列出的 fal.ai 與 Anthropic，用於生成造型與撰寫溝通卡；不會提供給其他任何第三方。
- 存放位置：照片與造型圖存放在 Vercel 位於美國的私人儲存空間，不公開，只能透過 10 分鐘內有效的網址存取。
- 保存與刪除：原始照片上傳 7 天後自動刪除，造型圖 30 天後自動刪除。你可以隨時在「試戴紀錄」刪除單筆紀錄，或在「設定 > 刪除帳號與所有資料」刪除全部資料，刪除會立即生效。第三方服務的保存期間請見「第三方處理」。
我們如何使用資料
- 理解你的造型描述，並生成你選擇或描述的造型與溝通卡。
- 管理免費次數與購買的點數（包含退款時扣回點數）。
- 防止濫用（例如速率限制），以及排除錯誤。
第三方處理
為了提供服務，以下廠商會依我們的指示處理部分資料：
- fal.ai（Features & Labels, Inc.，美國）：AI 造型生成。我們以 10 分鐘內有效的網址傳送你的照片（照片不會上傳到 fal.ai 的儲存空間），並要求 fal.ai 不保存請求與回應內容；fal.ai 產生的造型圖 1 小時後從其儲存空間刪除，我們會立即複製到自己的私人儲存空間。依 fal.ai 的服務條款與資料處理附約，fal.ai 以服務提供者身分處理資料，只能將去識別化或彙總後的使用資料用於改善服務。
- Anthropic（Anthropic, PBC，美國）：理解「AI 造型師」的造型描述，並撰寫溝通卡文字。理解描述時，我們傳送你的描述、最近幾則對話與縮小後的照片；撰寫溝通卡時，傳送造型規格（所選髮型與髮色，或 AI 整理出的規格），以及成果圖與原始照片（原始照片只在保存期限內）的 10 分鐘有效網址。你的描述只用來理解造型，不會直接送進影像生成。依 Anthropic 的商業服務條款，Anthropic 不會用這些資料訓練模型，並在 30 天內自動刪除；只有內容被標記為違反其使用政策時可能保留較久（最長 2 年），或依法律要求保留。
- Vercel：伺服器主機（新加坡）與私人檔案儲存（美國，存放照片與造型圖）；資料庫由 Neon 提供；速率限制由 Upstash 提供（會處理你的 IP 位址）。
- Apple：App Store 付款與交易通知。
這些廠商依各自的服務條款與資料處理附約處理資料，並以合約承諾對資料保密，提供與本政策同等的保護。我們只提供完成服務所需的最少資料。
保存期限
- 原始照片：上傳後 7 天自動刪除。
- 第三方服務：fal.ai 不保存請求內容，造型圖 1 小時後刪除；Anthropic 在 30 天內刪除（例外見「第三方處理」）。
- 生成結果、溝通卡、試戴紀錄與 AI 造型師的對話：30 天後自動刪除。
- 你可以隨時在「試戴紀錄」刪除單筆紀錄，或在「設定 > 刪除帳號與所有資料」刪除全部資料，刪除會立即生效。
- 為符合會計與稅務需求，購買紀錄（交易編號、點數包、時間）會保留，但刪除帳號後只與已匿名化的帳號關聯，不再連結到你的照片或紀錄。
資料安全
所有連線都使用 HTTPS。照片與成果圖存放在不公開的儲存空間，只透過短時間內有效的網址存取。
你的權利
你可以隨時在 App 中刪除單筆紀錄或整個帳號與所有資料。若有任何關於個人資料的問題或請求，請透過下方信箱聯絡我們。
兒童隱私
本 App 不以 13 歲以下兒童為對象，我們不會刻意收集兒童的個人資料。
政策變更
本政策如有重大變更，我們會更新本頁的日期，並在 App 中再次請你確認。
聯絡我們
Privacy Policy
Last updated: October 13, 2026
AI Hairstyle ("the App") lets you upload a front-facing photo, describe a hairstyle in your own words or pick one from the catalog, generates the new look with AI, and creates a salon consultation card to show your stylist. A photo of your face is personal, so this policy explains what we collect, how we use it, who processes it, how long we keep it, and how you can delete it.
Information we collect
- Photos: the front-facing photos you take or choose and upload to generate a look.
- Hairstyle descriptions: what you type to the AI Stylist and your answers to its questions, plus the hairstyle spec and conversation it produces. Please describe only the hairstyle and do not include names, phone numbers or other personal details.
- Results: AI-generated look images and consultation card content (cut, perm, color and styling advice).
- Anonymous account ID: a random ID created the first time you open the App, used to keep your credits and history. We do not ask for or collect your name, email address or phone number.
- Credits and purchases: credit changes, plus the App Store transaction ID, the credit pack and the time of purchase. Payment is handled by Apple; we never receive your payment details.
- Preferences: app language, default style category and whether you agreed to this notice (stored only on your device).
- Technical logs: server logs such as request times and errors, used to operate the service and prevent abuse. Logs do not contain photo contents or photo URLs.
We do not collect your location, contacts or other photos on your device, we do not track you across other apps or websites, and we do not use your data for advertising or sell it.
Face data
The only face data the App handles is the front-facing photo you take or choose to upload, and the look images generated from it.
- What we collect: the front-facing photo you upload. Before uploading, the App uses Apple's Vision framework on your device to check that the photo contains exactly one face. This check only counts faces; the result is not stored and never leaves your device. We do not perform face recognition or identity matching, and we do not extract, create or store facial landmarks, face geometry or any other biometric data.
- How we use it: only to generate the hairstyles you choose or describe and to write the salon consultation card. It is not used to identify you, for advertising or marketing, or to train our models, and it is never sold.
- Consent before upload: before the first photo is uploaded, the App lists what will be sent, which third-party AI services receive it and how long it is kept. Nothing is uploaded until you tap "Agree and Upload"; if you tap "Don't Agree", the photo never leaves your device.
- Who receives it: only fal.ai and Anthropic, listed under "Third-party processing", to generate looks and write consultation cards. It is not shared with any other third party.
- Where it is stored: photos and look images are kept in Vercel's private storage in the United States. They are not public and are only accessible through links that expire within 10 minutes.
- Retention and deletion: original photos are deleted automatically 7 days after upload, and look images after 30 days. You can delete a single item in History, or everything in Settings > Delete Account and All Data, at any time, and deletion takes effect immediately. For how long third-party services keep data, see "Third-party processing".
How we use information
- To understand your hairstyle descriptions and generate the looks and consultation cards you choose or describe.
- To manage free generations and purchased credits (including taking credits back after a refund).
- To prevent abuse (for example, rate limiting) and to fix problems.
Third-party processing
To provide the service, these providers process some data on our instructions:
- fal.ai (Features & Labels, Inc., USA): AI look generation. We send your photo through a link that expires within 10 minutes (the photo is not uploaded to fal.ai's storage) and ask fal.ai not to store request and response data. The look image fal.ai produces is deleted from its storage after 1 hour; we copy it to our own private storage right away. Under fal.ai's terms of service and data processing addendum, fal.ai processes data as our service provider and may only use de-identified or aggregated usage data to improve its services.
- Anthropic (Anthropic, PBC, USA): understands your AI Stylist descriptions and writes the consultation card text. To understand a description we send it with the last few messages of the conversation and a reduced-size copy of your photo; for the card we send the hairstyle spec (the chosen style and color, or the spec from the AI Stylist) plus 10-minute links to the result and to your original photo (only while it is retained). Your description is used only to understand the hairstyle and is never sent to image generation as is. Under Anthropic's commercial terms, Anthropic does not train models on this data and deletes it automatically within 30 days, except that content flagged for violating its usage policy may be kept longer (up to 2 years) or where the law requires it.
- Vercel: server hosting (Singapore) and private file storage (United States, for photos and look images); the database is provided by Neon and rate limiting by Upstash (which processes your IP address).
- Apple: App Store payments and transaction notifications.
These providers handle data under their terms of service and data processing addenda, are contractually bound to keep it confidential and provide the same protection as this policy. We share only the minimum needed to provide the service.
Retention
- Original photos are deleted automatically 7 days after upload.
- Third-party services: fal.ai does not store request data and deletes look images after 1 hour; Anthropic deletes data within 30 days (exceptions under "Third-party processing").
- Results, consultation cards, history and AI Stylist conversations are deleted automatically after 30 days.
- You can delete a single item in History, or everything in Settings > Delete Account and All Data, at any time. Deletion takes effect immediately.
- To meet accounting and tax requirements, purchase records (transaction ID, credit pack, time) are kept. After you delete your account they are linked only to the anonymized account, not to your photos or history.
Security
All connections use HTTPS. Photos and results are kept in private storage and are only accessible through short-lived links.
Your rights
You can delete single items, or your whole account and all data, in the App at any time. For any question or request about your personal data, contact us at the address below.
Children's privacy
The App is not directed to children under 13, and we do not knowingly collect personal data from children.
Changes to this policy
If this policy changes significantly, we will update the date on this page and ask you to confirm again in the App.
Contact us
Email: doomlicorne@gmail.com