Your photo stays yours

What we collect

• Your email and first name, to run your account and to send a few tips and reminders while you get started (you can turn those off in Account settings or from any of them).
• The selfie you upload, an optional full-body photo, and the measurements you enter (height, weight, build and the clothing you usually shop for).
• The avatar, color analysis, hair read, haircuts and looks we generate for you, plus the collections you create.
• Outfit and haircut photos you upload to try on, and the product photos of each piece when you shop a look.
• The IP address and browser of each session, to keep your account secure. They are deleted when the session expires, at most 60 days later.
• Where you signed up from: your country and, in the US, your state. Our hosting provider reads it from your IP address and we keep only the country and state, never your city or the IP for this. We use it to understand where our members are, to follow state privacy laws and, in hashed form, to measure our ads (see Analytics and advertising).

How we use your photo

• Only to create your avatar, read your color palette, face shape and hair, and render your outfits and haircuts. We send it to our AI provider (OpenAI) for that processing; under their API terms it is not used to train their models.
• We do not use your photo to identify you, we do not store face templates or face geometry, and we never sell or share your photo.
• To keep quality high, a few people on the Avarobe team may review the avatars and looks we generate, with the occasion you described and any feedback you gave, without your name or email attached. They never see the selfie, full-body photo or try-on photos you uploaded.
• Photos are stored encrypted in private storage and are only reachable through links that expire within an hour.

Try-ons and shopping

• When you try on an outfit, we send that photo to OpenAI together with your avatar to render it on you. We only use the clothes in it.
• When you try a haircut from a photo, we send that photo to OpenAI together with your avatar and selfie to show the haircut on you. We only use the haircut in it, never the person.
• When you shop a look, we create a product photo of each piece on its own, with no person in it, and search it on Google Lens through our search provider, SerpApi. Your selfie, avatar and looks never leave for store search.
• Store links go straight to each retailer. What you do on their sites is covered by their own privacy policies.

Face Age: your face photos

• If you use Face Age, we collect the face photos you add (new ones, and older ones from your albums with the date you give them), your birth date and the name you type to sign your consent.
• We use them only to estimate how old your face looks in each photo, show your timeline and give you tips. Each photo is sent to our AI provider (OpenAI) for that; it is not kept for their records and not used to train their models.
• We never use your photos to identify you or anyone else, never compare the face in one photo with another, and never create or store face templates, face geometry or other biometric identifiers. The age we show is an estimate, not a fact about you.
• Your photos are private to your account and never shared, sold or used in ads. You can lock them so they only show after Face ID or Touch ID on your device (a passkey); your face or fingerprint scan never leaves your device and we never receive it.
• Add only photos of yourself, from when you were 18 or older. When a photo has other people in it, you crop it to your face on your device before it is sent. A photo with more than one face, or that looks like someone under 18, is deleted without being read.
• Delete any photo, or everything in Face Age, at any time. Everything in Face Age is deleted when you delete your account, and after 3 years without adding a photo. A photo that couldn't be read is deleted at once.
• Face Age isn't offered in Illinois or Washington.

Payments

• Payments are processed by Stripe. We never see or store your card number; we keep a record of what you bought, when and for how much and, unless you opted out (see Analytics and advertising), the IP address and browser you paid from. If you request a refund, we keep your request with that record: the reason, your explanation, any screenshot you add, and your card’s country and an anonymous card identifier from Stripe, to review it and prevent abuse.

How long we keep it

• For as long as you keep your account. Deleting your account from Account settings deletes right away your name and every photo of you and image we made of you: your selfie, full-body photo, avatar and its versions, looks and try-on photos, haircuts, magazines and color checks. You can’t sign in to it anymore. We keep the rest to keep our records (for example your colors and reports, the looks and collections you made, what you bought, your answers and usage statistics), without your email in readable form: we keep only a one-way hash of it, which can recognize the same email but can’t be turned back into it. A new selfie replaces your hair read and the haircuts drawn from the old one. Deleting a look also deletes its try-on photo and piece photos. You can also remove the full-body photo on its own.
• That includes the record of your payments: what you bought, when, for how much, any refund and Stripe’s reference for the payment, which we also need for accounting and taxes. Stripe keeps its own record of the payment.
• If you try Avarobe without saving it with your email and don’t buy anything, your photos and every image we made of you are deleted automatically 14 days after you started, as when an account is deleted; the rest is kept for our records.
• Our AI provider may keep request data for up to 30 days for abuse monitoring before deleting it.

Analytics and advertising

• We use Google Analytics to count visits and see which features people use, Google Ads to measure whether our search ads lead to sign-ups and purchases, and the Meta pixel to do the same for our ads on Facebook and Instagram. They set cookies and receive the pages you visit, your browser and device details, and events such as "signed up", "created looks" or "bought a report".
• When you sign up or buy, Google Ads also receives your email in hashed form (scrambled in your browser before it is sent), so it can match the sign-up or purchase to the ad you clicked. None of them receive your photos, avatar, measurements or the occasions you type.
• When you sign up or buy, our server can also report it to Meta, with the IP address and browser you used and the IDs in Meta's cookies, so it can measure whether our ads on Facebook and Instagram led to the sign-up or purchase. Unless you're in the European Economic Area, the UK or Switzerland, it also sends Meta your email, our ID for your account and your country (from your card or where you signed up) in hashed form (scrambled one way before they are sent). Meta compares them with the ones it holds to match the sign-up or purchase to a Meta account, if you have one; it doesn't receive them in readable form. None of this is sent if you opt out below on the browser you use, or if that browser sends Global Privacy Control.
• We also keep our own usage statistics: a random visitor ID in a cookie, the pages you open and the steps you take in Avarobe (for example "saw an offer" or "opened checkout"), the ad, search or site that brought you, and the country and US state you visit from. They stay in our database, are never sold or shared, and are deleted after 400 days.
• Sharing browsing data with Meta or Google for advertising can count as "sharing" under California law. You can opt out below (which also stops our own statistics), and we honor the Global Privacy Control signal automatically for Google and Meta.

Your choices

• You can replace your selfie or delete your account at any time.
• You can opt out of analytics and advertising below, on each browser you use.
• Questions or requests: privacy@avarobe.com.

Your privacy choices