Privacy Policy

The short version

• We use your selfie to generate makeup looks and store it securely so we can show you your results; you can delete it at any time.
• To do that, your selfie is sent to Google’s Gemini image model (via Vercel AI Gateway), acting as our processor.
• We do store the makeup looks we generate for you and the feature analysis (e.g. face shape, undertone) so we can show you your results.
• We only use marketing/advertising tracking if you accept it in the cookie banner.
• You can ask us to delete everything at any time.

What we collect

• Your selfie — stored securely in your private folder to generate and re-display your looks; deletable on request.
• Generated look images and face analysis — the makeup previews and a derived profile (face shape, skin undertone and depth, eye colour, brow style, presence of facial hair). Stored to display your results.
• Account/contact — your email address and quiz answers.
• Payment data — handled by Stripe; we receive confirmation and subscription status, never your full card details.
• Technical data — IP address, browser/user-agent, and (if you consent) advertising identifiers and campaign/click IDs.

Why we use it, and our legal bases

• Analysing your face and generating looks — your explicit consent (given before upload). You can withdraw it at any time.
• Providing the service and your subscription — performance of our contract with you.
• Security and fraud prevention, and product analytics — our legitimate interests (or your consent where required).
• Advertising and measurement — only with your consent.

Who processes your data

We share data with service providers who act on our instructions:

• Vercel — application hosting.
• Supabase — database and image storage (EU region).
• Google — the Gemini image and analysis models, accessed via Vercel AI Gateway, to process your selfie and generate looks.
• Stripe — payment processing.
• Resend — transactional email.
• PostHog — product analytics (EU region).
• Meta — advertising measurement, only if you consent.

Some providers may process data outside your country under appropriate safeguards (e.g. Standard Contractual Clauses).

How long we keep it

We keep your selfie, generated looks, analysis and account data for as long as needed to provide the service and until you ask us to delete them. When you request erasure, we delete your stored selfie, looks and account records.

Your rights

If you are in the EU/EEA or UK you have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email [privacy@makeuponme.com]. You also have the right to lodge a complaint with your data protection authority ([lead supervisory authority]).

Children

MakeUpOnMe is intended for adults aged 18 and over. We do not knowingly process the data of minors.

Cookies

We use essential cookies to run the service and, only with your consent, analytics and advertising cookies. You choose via the banner shown on your first visit.

Changes

We may update this policy; we will change the “last updated” date above and, for material changes, notify you.