Privacy Policy
Effective November 5, 2026
Tressaly is an iPhone app that reads one selfie and shows hair, brows and makeup that suit you, drawn on your own face. This policy explains what we collect, why, who processes it for us, and how long we keep it. Tressaly is provided by the developer of Tressaly named as the seller on its App Store listing ("we").
The short version
- You do not create an account. We never ask for your name to give you a read.
- Your selfie and relevant appearance descriptions are sent to Google (Gemini API) only after you agree, to create advice and preview images.
- Tressaly schedules deletion from active service storage within 24 hours. Google separately retains request content and outputs for 55 days for safety monitoring. Your data is not sold or used for ads.
- There is no advertising and no tracking across other apps or websites.
Website tools
The blush placement selector runs in your browser. It does not upload photos or send your selected effect or occasion to a server. During a visit, this website may keep a broad source category (such as Google or an AI assistant) and the first page path in session storage so navigation retains that context. We do not save referring URLs, query strings or a visitor identifier. This context lasts for the tab session and may survive browser session restoration. Existing Cloudflare visit counts remain separate. If you allow Google Analytics, the broad source category and page paths are included with website usage events.
What we collect
Your selfie, face descriptions and previews
We collect the photo you take or select, including your face and hair. Google Gemini derives visible appearance descriptions, such as face shape, skin tone and undertone, eyes, brows and hair, to suggest hair and makeup choices. It generates edited preview images of you. We use this face data to provide your requested advice and previews, not to identify you, perform facial recognition, advertise to you or sell your data.
Before a photo leaves your iPhone, a separate in-app disclosure identifies Google and explains the data, purpose and retention periods. You can choose "Agree and continue" or "Not now". Camera or photo-library permission is separate from agreement to AI processing.
On-device facial landmarks
Apple's Vision framework locates facial landmarks on your iPhone to align previews, check that facial geometry has not drifted and place local makeup overlays. These landmark coordinates are temporary, are not stored and are not sent to our servers or Google. We do not create a reusable face-recognition template or biometric identity profile.
Google Gemini processing and protection
Our backend sends your resized selfie, relevant appearance descriptions and editing instructions to Google through the Gemini API. Generated preview images may also be sent back to Gemini to describe or check the requested look. We use the paid API, for which Google's terms say submitted content and responses are not used to improve Google's products. This is not a zero-retention service.
Google retains prompts, contextual information and outputs for 55 days for safety monitoring and required legal or regulatory disclosures. Authorized Google staff may review flagged content. Google describes a limited exception for models used specifically for policy enforcement. Processing and temporary storage may occur in countries where Google or its agents maintain facilities; we do not promise US-only processing.
We require processors to provide safeguards at least equivalent to the confidentiality, security and limited-use protections described in this policy, under their applicable data-processing terms. The paid Gemini API is subject to Google's Data Processing Addendum. Its separately disclosed safety-retention period still applies. See the Gemini API terms and safety-monitoring policy.
Retention and deletion of face data
Tressaly stores photos and generated previews in private Cloudflare R2 storage, and written appearance analysis in a Neon-hosted Postgres database. We schedule removal of these active copies within 24 hours of upload/read creation. This includes uploads that did not become a completed read. After redaction, operational records may retain identifiers, timestamps and suggestion categories, but not your photo or personal appearance descriptions. Hosting recovery backups, where present, expire according to the provider's configured recovery windows rather than an immediate per-record purge; contact us for the current recovery-window details.
Your last read and images are also saved in the app's private directory on your iPhone, excluded from device backups. The app removes this saved copy when it is next loaded after 24 hours. iOS may suspend or terminate the app, so this is not a promise of background erasure at an exact time. Remote face images and analysis requests use sessions without persistent HTTP caching.
In Settings, "Delete my photos and reads" removes the local saved copy and requests removal of all reads and tracked uploads linked to this install from Tressaly's active storage. If the request fails, the app shows deletion as pending, retains a retry marker across relaunches and pauses new reads until the server confirms deletion. Retry in Settings or reopen the app while connected. Uninstalling removes the app's local data but is not itself a server deletion request.
In Settings, "Withdraw AI consent" turns off consent immediately and requests the same deletion. No new AI read can start until you explicitly agree again. A request already sent to Google cannot be recalled. These controls do not erase Google's separately retained safety records or change its 55-day retention period. Contact us at hello@tressaly.com for help with a deletion request.
A device identifier
The app creates a random identifier when it is installed. It lets us give each install one free read and protect the service from abuse. It is not your Apple ID, your advertising identifier or your phone number.
Subscriptions
Subscriptions are sold by Apple through the App Store. Apple handles your payment details; we receive the signed purchase record Apple provides (product, purchase and expiry dates, a transaction number) to unlock what you bought. We keep it while your subscription is active and as long as tax and accounting law requires.
Products
Products open on AliExpress, which sells them. We do not take orders, addresses or payment details. What you share with AliExpress is under AliExpress's own privacy policy. The list of pieces you keep in the app stays on your iPhone.
Support
If you email us, we keep the conversation to help you and delete it when it is no longer needed.
This website
tressaly.com counts page views with Cloudflare Web Analytics, which sets no cookies, does not fingerprint your browser and does not follow you across other websites. We see totals such as visits per page, referring site and country, not who you are. The app does not use it.
If you choose “Allow analytics”, we load Google Analytics 4 to measure page visits, tool starts, results shown and links to the product or App Store. Google receives technical information such as your IP address and browser details and may set first-party analytics cookies. Our configured cookies expire after one day without renewal. We send broad source categories and page paths, without query strings or full referring URLs, and do not send your tool selections, photos or app read content. Advertising signals and ad personalisation are disabled. We do not load the Google tag before your choice, and declining leaves the tool usable.
Your analytics choice is kept in session storage for this tab. You can change it using “Analytics preferences” in the footer; declining stops future GA4 collection on the page and removes accessible GA cookies. Session storage may survive browser session restoration. Previously collected data is not deleted by withdrawing consent. Google describes its processing in How Google uses information from sites or apps that use its services. Website analytics do not prove an App Store download or purchase.
Who processes data for us
- Google (Gemini API) processes selfies, appearance descriptions and generated previews as explained in Google Gemini processing and protection, including its 55-day safety retention.
- Google Analytics measures website usage only after you allow analytics.
- Cloudflare runs our servers, stores photos and looks until they are deleted, and counts visits to this website.
- Neon hosts our database.
- Apple sells and manages subscriptions.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Your choices and rights
- The app asks before any photo leaves your iPhone. If you choose "Not now", nothing is sent.
- You can request deletion of your photos and reads, retry a pending request, or withdraw AI consent in Settings. See Retention and deletion of face data.
- You can ask us to access, correct or delete information we hold about you by emailing hello@tressaly.com. Because there are no accounts, we may ask when you subscribed or used the app to find your records. We will not discriminate against you for making a request.
Children
Tressaly's AI photo features are for adults 18 and older. Do not upload a photo of a child or another person. If you believe a child has submitted a photo, contact us for deletion assistance.
Security
Data is encrypted in transit. Photos are stored in private storage that can only be read through short-lived signed links, and access to our systems is limited to the people who run them.
Changes
If we change this policy, we will update the date above, and tell you in the app before a change that affects how your photo is handled.