We collect only the information necessary to provide and improve our services, such as your account details, usage analytics, and communication preferences. We do not sell your information to third parties. Data may be shared only with trusted partners for the purpose of supporting app functionality or required by law. You can request access, correction, or deletion of your personal data anytime. If you have any questions, please contact our support team.

Slaylab (“Slaylab,” “we,” “us,” or “our”) is operated by Faltein Studio (“Faltein Studio”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Slaylab mobile application, related services, and website at slaylab.app (collectively, the “Service”).

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who this policy applies to

This policy applies to individuals who use Slaylab. The Service is intended for people who are at least 13 years old (or the minimum age required in your country to consent to data processing). Slaylab is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at support@slaylab.app and we will take appropriate steps to delete it.

2. Information we collect

We collect information in the following categories:

Account and identity information

- Email address, display name, and profile photo (when provided by you or your sign-in provider)

- Firebase user identifier and authentication credentials managed by our authentication providers

- Onboarding preferences you choose, such as how you heard about Slaylab, product types you are interested in, and optional savings-related survey answers

Photos and try-on content

- Selfies and face photos you upload or capture for virtual try-on

- Generated try-on images produced by our AI pipeline

- Product URLs you paste or share from retailer websites

- Extracted cosmetic product attributes (for example brand, shade, color, and finish)

- Your ratings, saved looks, and try-on history within the app

Selfies are used to create cosmetic previews. They are biometric-adjacent data (images of your face) but we do not use them to identify you across other services or build a face recognition database.

Device and local data

- Selfies you save to your on-device selfie library (stored locally on your phone, up to 20 images)

- App preferences, session state, and review-prompt timing stored in device storage

- Product links temporarily shared from our Safari share extension through your device’s app group storage

Subscription and billing information

- Subscription plan status, trial status, and credit balances

- Purchase and renewal events processed through Apple In-App Purchase and RevenueCat

We do not receive or store your full payment card number. Apple processes payments.

Technical and usage information

- IP address and request metadata used for security, rate limiting, and service operation

- Device and app event data for install attribution when you grant App Tracking Transparency permission (see Section 7)

- Server logs that may include request identifiers, account identifiers, job identifiers, and error details

3. How we use information

We use the information above to:

- Provide the Service, including AI-powered virtual makeup try-on and product attribute extraction

- Create and manage your account and authenticate you

- Store your try-on history, favorites, and ratings

- Process subscriptions, trials, and credit usage

- Operate onboarding, support, and account deletion requests

- Improve reliability, security, and product quality

- Comply with law and enforce our Terms & Conditions

- Measure marketing effectiveness when permitted (for example after you allow tracking on iOS)

We do not sell your personal information, including your selfies or try-on results.

4. Legal bases for processing (EEA, UK, and similar regions)

Where applicable, we rely on:

- Contract: to provide the Service you request

- Consent: for optional tracking/attribution where required, and where you agree to our terms during onboarding

- Legitimate interests: to secure, maintain, and improve the Service, prevent abuse, and understand aggregate usage

- Legal obligation: where we must retain or disclose information under law

5. Third-party services and sharing

We share information with service providers that help us operate Slaylab, including:

| Provider | Purpose | Data involved |

|---|---|---|

| Google Firebase (Auth, Firestore, Storage) | Authentication, database, and image storage | Account data, selfies, try-on images, metadata |

| Google Cloud (Cloud Run, Cloud Tasks, Vertex AI / Gemini) | API hosting, job processing, AI try-on and extraction | Selfies, prompts, product page content, job metadata |

| Apple | Sign in with Apple, App Store billing, device platform | Account identifiers and purchase data per Apple’s policies |

| Google Sign-In | Authentication | Basic profile information for account creation |

| RevenueCat | Subscription management | User identifier, purchase and entitlement events |

| Meta (Facebook SDK) | App install and event attribution | Device/advertising identifiers when you allow tracking |

| Scrape.do | Retrieving public product pages you link to | Product URLs and page content needed for extraction |

These providers process data on our behalf under contractual safeguards. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with appropriate notice where required.

When you submit a retailer product URL, we fetch that publicly available page so we can extract cosmetic attributes. We are not affiliated with those retailers unless we say so explicitly.

6. AI processing

Slaylab uses artificial intelligence, including Google Gemini models, to analyze product pages and generate try-on previews from your selfies. Your images and related prompts are sent to our cloud infrastructure for this purpose. Generated results are stored in your account history unless you delete them or delete your account.

AI outputs are cosmetic previews only. They may not perfectly match real-world shade, finish, or lighting.

7. Tracking and advertising

On iOS, we may ask for permission through Apple’s App Tracking Transparency framework before collecting data used for cross-app advertising attribution. If you decline, we limit use of certain advertising identifiers for that purpose.

Firebase Analytics is disabled in our app configuration. We use local notifications on your device to tell you when a background try-on is ready; we do not use remote push notifications to market unrelated products.

8. Data retention

- Account and try-on data: kept while your account is active and for a reasonable period afterward for backup, security, and legal compliance

- On-device selfies: kept on your device until you delete them or uninstall the app

- Onboarding session data: temporary server-side onboarding state may be retained for up to 7 days while onboarding is in progress

- Billing records: retained as needed for accounting, fraud prevention, and dispute resolution

When you delete your account in the app, we delete your Firebase Authentication user, try-on history, ratings, billing account document, and files stored under your user folder in cloud storage. Certain limited records may be retained where required by law or for legitimate business purposes (for example webhook audit logs and anonymized analytics). Onboarding research session data may be preserved after account deletion in de-identified or pseudonymous form for product research; it is no longer linked to an active account.

9. International transfers

Slaylab is operated from the United States. Your information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Security

We use technical and organizational measures designed to protect your information, including encrypted transport (HTTPS), access controls, and cloud provider security features. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your choices and rights

Depending on where you live, you may have rights to:

- Access, correct, or delete your personal information

- Object to or restrict certain processing

- Withdraw consent where processing is consent-based

- Port your data in a usable format

- Opt out of certain targeted advertising or “sale”/“sharing” as defined by applicable law

You can delete your account in Slaylab Settings. You can manage or cancel subscriptions in your Apple ID subscription settings. To exercise other rights, email support@slaylab.app. We may need to verify your request.

California residents: We do not sell personal information. You may request access to or deletion of personal information as described above. We will not discriminate against you for exercising privacy rights.

EEA/UK residents: You may lodge a complaint with your local data protection authority. Our contact for privacy requests is support@slaylab.app.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice in the app, on our website, or by other appropriate means. The “Last updated” date at the top reflects the latest revision. Continued use after changes become effective means you accept the updated policy.

13. Contact us

Faltein Studio

Slaylab Privacy

Email: support@slaylab.app

Website: https://slaylab.app