Privacy Policy

1. Who we are

GlassTryOn is an iOS app developed and operated by Cuneyt Emir, the data controller for the purposes of this policy. Contact: [email protected].

2. What we collect

Photos, including images of your face

To generate a try-on or a recolour you upload a photo of yourself, and optionally a photo of a pair of glasses. That photo contains your facial image.

• Why: solely to generate the image you asked for.
• What we do not do: no facial recognition, no biometric identification, no face template or faceprint, no face tracking, no identity matching. Your photos are never used to train AI models — neither ours nor a provider's.
• Where it goes: the photo is uploaded over HTTPS to our image host (Bunny.net) only because the AI provider fetches images by URL. It is deleted from that host as soon as the generation finishes — whether it produced a result or failed.
• The result: we never store it. The app downloads it to your iPhone and saves a copy to your photo library; the provider deletes its own temporary copy within fourteen days. Your Creations gallery reads from the files on your phone, which is why reinstalling the app empties it — and why we cannot restore it for you.

The free tools stay on your device

Two features read your face without a network call, and neither one is an exception to that.

• Face shape uses Apple's on-device Vision framework. The camera frames, the landmarks and the measurements are processed on your iPhone. Only the resulting shape name is used, in the App, to pick which frames to suggest.
• Colour match reads the colour of a few points of skin from a photo you choose, on your iPhone, to work out whether warm or cool frames suit you. The reading — and the photo it came from — never leaves the device. Only the resulting description, such as “warm, medium”, is used, in the App, to pick colours.

In both cases the photo, the measurements and the result are never uploaded, never sent to us, and never sent to any third party. Nothing about either is stored on our servers, so there is nothing for us to delete, share or be compelled to hand over.

Account information

The App works without an account. On first launch it creates an anonymous local identifier so your credits and history have somewhere to live. If you choose Sign in with Apple, we additionally receive a stable Apple user identifier, and your name and email address only if you choose to share them with Apple.

Purchases

Apple processes all payments. We never see your card, your billing address or your Apple Account credentials. We receive a record that a purchase happened — the product, a transaction identifier, and the subscription's expiry — so we can grant the credits you paid for.

Notification token

If you allow notifications, your device's Apple push token is stored so we can tell you when a generation is finished. It is deleted with your account.

What we do not collect

No advertising identifiers. No location. No contacts. No third-party analytics, attribution or crash-reporting SDKs — the App bundles exactly two: Supabase, for our own backend, and RevenueCat, for subscriptions. Aggregate crash information reaches us only if you have turned on Apple's own Share with App Developers setting in iOS, and it does not identify you.

How the App is used

We record what happens in the App so we can see what works and what does not: that the App was opened, that onboarding was finished, that a subscription screen was shown or dismissed, that a try-on was started and whether it succeeded, that a purchase or refund happened. Each record carries the action, the moment it happened, and your account identifier so the steps join up into one journey.

• Where it goes: to analytics software we run ourselves, on our own server. It is not a third-party service, nothing is shared onward, and no advertising network is involved.
• What it is not: we do not track you across other apps or websites, we do not use the advertising identifier, and we do not build a profile for advertising. This is why the App never asks for tracking permission — there is nothing to ask about.
• Your photos are not part of this. No image, and nothing derived from an image, is ever sent to the analytics. It records that a try-on happened, never what was in it.
• Your approximate country is derived from your IP address so we know which countries to translate and support for. We never keep the full address. We do keep a shortened form of it — the last part replaced with zeroes, which is enough to name a city and not enough to name a household — against your account, so that things which reach us after you have closed the App, such as a finished try-on or a subscription renewal, are counted in the country you are actually in rather than in whichever data centre told us about them. It is replaced each time you use the App and deleted with your account.
• How long: kept while it is useful for improving the App, and deleted with your account.

3. Why we are allowed to process it

Where the GDPR or a similar law applies: photos and account data are processed to perform the contract you enter into by using the App. A photograph of your face is uploaded only on your explicit instruction — you choose the photo and press the button — and you can withdraw from this at any time by not using the feature and by deleting what has been generated.

4. Who processes your data

We do not sell personal data and we do not share it for advertising. These are the only third parties involved, and each acts on our instructions for the purpose named:

• Bunny.net — hosts uploaded images so they can be fetched by the AI provider.
• An AI image-generation provider — generates the try-on and recolour images. Your photo reaches it over HTTPS, is used only to produce the image you asked for, and is never used to train a model.
• Supabase — our database and backend functions: account records, credit balances, purchase records, notification tokens, and the addresses of your results.
• RevenueCat — manages subscriptions and purchase entitlements. It receives your app user identifier and purchase events, not your photos.
• Apple — payments, Sign in with Apple, and push notification delivery.
• Nobody else. Usage analytics is software we host on our own server rather than a service we send your activity to, so there is no fifth company on this list.

These providers operate outside your country in some cases, including in the United States. Where the GDPR applies, such transfers rely on the providers' standard contractual clauses.

We may also disclose data where the law requires it, or to protect the rights and safety of our users.

5. How long it is kept

• The frame photo: deleted from our image host as soon as your result is generated. It has no further use.
• Your selfie: kept for exactly as long as the result made from it. Creations shows the two side by side, so the comparison needs both. Delete the result and the selfie goes with it, in the same request.
• Generated results: not kept by us. They live on your iPhone, and in your photo library if you let the App save them there.
• Account data (credits, history, notification token): deleted when you delete your account.
• Purchase records: retained as long as required for tax and accounting purposes.

Deleting your account erases anything still in your storage folder, in one pass — though in the ordinary case there is nothing there to erase, because uploads are deleted as each generation finishes. It also erases the photos the App holds on your iPhone. Copies you saved into your own photo library are yours: we have no access to them and cannot remove them.

One thing is kept after deletion, and only one: if you have used the free trial, we keep a record that this Apple account has had it — the identifier Apple gives us for you within this app, and the date. Nothing else, and it is linked to nothing else. Without it, deleting an account and signing back in would hand out a second free trial, and the free trial is real generations that cost us real money. It cannot be used to identify you outside this app, and it cannot be used to rebuild anything you deleted.

6. Your rights

Depending on where you live you have some or all of these rights, and we honour them for everyone:

• Deletion: delete your account and its data from Settings → Delete account. That erases your records and every image file you uploaded. To remove a single result and its selfie instead, delete that result in Creations.
• Access and portability: ask us for a copy of what we hold about you.
• Correction: ask us to correct anything inaccurate.
• Objection and restriction: ask us to stop or limit a particular use.
• Complaint: you may complain to your local data protection authority.

Write to [email protected]. We reply within 30 days, usually much sooner.

Deleting your account does not cancel a subscription. Cancel that in your Apple Account settings, or you will keep being billed.

7. Children

GlassTryOn is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has uploaded a photo, contact us and we will delete it.

8. Security

• All transfers use HTTPS.
• Database access is restricted by row-level security; the app cannot read another account's rows.
• Credit balances are changed only by server-side functions, never by the device.
• Our AI provider's key is held on the server and never shipped in the App.

No system is perfectly secure, but these are real measures rather than a list of adjectives.

9. Changes

When this policy changes we update the date at the top, and for significant changes we tell you in the App. Continuing to use the App after a change means you accept it.

10. Contact

Questions about your data, or a request under section 6: