Privacy Policy

Introduction

This Privacy Policy explains how MuseFace handles information when users use AI-assisted makeup-transfer features. It applies to account access, selected or captured images, generation jobs, generated results, credits, purchases, history, notifications, language settings, and related support requests.

Information we collect

We may process account identifiers, optional email address, authentication state, selected or captured source and reference images, optional local bare-face image cache state, generated result images, generation status, history metadata, credit records, StoreKit verification data, device permission state, notification settings, language preference, and operational request logs.

Information we do not collect

We do not collect or use advertising tracking identifiers, IDFA, TikTok attribution data, full photo-library contents, Face ID data, face embeddings, faceprints, face geometry templates, health information, precise location, or AI provider secrets stored in the iOS app.

No advertising tracking

MuseFace does not request App Tracking Transparency permission, does not use IDFA, does not include TikTok or other advertising attribution SDKs, and does not configure SKAdNetwork for advertising attribution. If a future version adds advertising or analytics tracking, this Privacy Policy, App Store privacy answers, and the iOS privacy manifest will be updated before that release.

Photos and generated images

Users choose or take a bare-face source image and a reference makeup image. Original input images are used for processing the generation request and are not intended for long-term storage. Generated result images are retained so users can view their history and use app features.

Optional local bare-face image cache

Users may enable a local setting that saves the most recent bare-face source image for reuse. This cache is off by default, stores only the latest source image in local app data on the user's device, is excluded from backup, does not save reference makeup images, and can be cleared or disabled in Settings. The local cache is not synced to our servers or used to create face embeddings, faceprints, or face geometry templates.

Camera, photo, and save permissions

Photo selection is initiated by the user through the system photo picker. Camera access is used only when the user chooses to capture a source or reference image. Saving to the photo library is used only when the user chooses to save a generated result.

AI generation provider

The iOS app does not call the AI provider directly. The backend uses uploaded images and necessary generation context to create results through the backend-only generation pipeline. Generated output may not exactly match the reference image or preserve every detail.

How we use information

We use information to authenticate users, protect account-only features, upload selected images, create generation jobs, return results, show history, manage credits, verify StoreKit purchases, refund failed charged generations, prevent abuse, diagnose errors, maintain security, and respond to account, privacy, support, or billing requests.

Generation completion notifications

Generation may take a few minutes. The app may ask for notification permission to alert the user when a generation completes or fails. Notification payloads should not include photos, image URLs, object keys, prompts, or sensitive account details.

Third-party processors

Apple supports Sign in with Apple, StoreKit purchases, and App Store distribution. AWS Cognito supports authentication. AWS storage and hosting support the backend and private image storage. The backend AI generation provider supports result creation. MuseFace does not include TikTok, ad attribution SDKs, or advertising tracking SDKs.

Your rights and choices

Users can choose whether to upload images, use the local bare-face image cache, use the camera, save generated results, receive notifications, sign out, or request account deletion when the in-app deletion flow is available. Users can clear or disable the local bare-face image cache in Settings and can manage camera, photo, and notification permissions in iOS Settings. StoreKit purchases, refunds, and cancellations are managed through Apple where applicable.

Children and minors

MuseFace is intended for clear single-person face images. Minors should use the app only with guardian guidance, and users are responsible for uploading photos they have the right and consent to use.

Retention and deletion

Original input images are used for generation processing and are not intended for long-term storage. Generated results and history are retained for app functionality. Credit, trial, purchase, and transaction records are retained for integrity, support, accounting, and fraud prevention. Account deletion requests will be handled according to the account deletion flow available in the app.

Changes to this policy

We may update this Privacy Policy when MuseFace changes its features, processors, permissions, data practices, or legal requirements. The updated policy will be published at this page with a revised effective date or last-updated date.

Contact

For privacy questions or requests, contact us at support@museface.app.