Privacy Policy — Enzo

Last Updated: February 2, 2026

What We Collect & Store

Photos (Required for App Functionality)

What we do with your photos:
- You upload photos to generate AI hairstyles
- Photos are stored securely on encrypted cloud servers (Supabase)
- Photos are kept in your personal storage folder
- Used only for generating hairstyles and displaying results
- Never shared with third parties
- Never used to train AI models
- Never sold or used for advertising

How long we keep them:
- Original photos: Stored until you delete your account
- Generated results: Stored until you delete them or your account
- Account deletion: All photos permanently deleted within 30 days

Your control:
- Delete individual results anytime from the app
- Delete all data by deleting your account (Settings → Delete Account)
- Request manual deletion via info@uniqxel.com

Email Address (Optional)

When collected:
- Only if you create an account with email
- Not required for anonymous usage

What we use it for:
- Account sign-in and authentication
- Password reset (if needed)
- Important service updates (rarely)

What we DON'T do:
- Never sold to third parties
- Never used for marketing emails
- Never shared with advertisers

Purchase History

What's collected:
- Credits purchased
- Subscription status
- Purchase timestamps

Managed by:
- Apple App Store (secure and encrypted)
- We never see your credit card or payment details

Used for:
- Tracking your credit balance
- Managing your subscription
- Restoring purchases on new devices

User ID (If Signed In)

What it is:
- Anonymous unique identifier (UUID)
- Not your real name or personal info

Used for:
- Linking your credits and photos to your account
- Syncing data across your devices
- Account management

What We DON'T Collect

- ❌ Your location (we don't track where you are)
- ❌ Your contacts
- ❌ Your browsing history
- ❌ Health or fitness data
- ❌ Financial information (Apple handles payments)
- ❌ Your name (unless you provide it)
- ❌ Your phone number
- ❌ Your address

Data Security

Encryption:
- All data transmitted with bank-level encryption (HTTPS/TLS)
- Photos stored on encrypted servers (Supabase)
- Access restricted to authorized personnel only

Server Security:
- Industry-standard security practices
- Regular security audits
- Isolated user folders (your photos only accessible by you)

Third-Party Services:
- Supabase (cloud storage - GDPR compliant)
- RevenueCat (purchase management)
- Apple App Store (payments)
- All partners comply with strict privacy standards

How We Use Your Photos

For App Functionality Only:
1. You upload a photo
2. We send it to AI servers for hairstyle generation
3. AI creates styled versions
4. Results stored in your account
5. You can view, save, share, or delete anytime

What We NEVER Do:
- ❌ Use your photos to train AI models
- ❌ Analyze your photos for ads or marketing
- ❌ Share your photos with third parties
- ❌ Sell your photos to anyone
- ❌ Use facial recognition for tracking
- ❌ Store photos without your knowledge

Your Privacy Rights (GDPR & CCPA)

Access:
- View all your data in the app (Settings)
- Request a copy via info@uniqxel.com

Delete:
- Delete individual results anytime
- Delete your entire account instantly
- All data permanently removed within 30 days

Portability:
- Download your saved styles (coming soon)
- Export your data via email request

Opt-Out:
- Use app anonymously without account
- Decline optional data collection

Data Retention

Active Accounts:
- Photos: Until you delete them or your account
- Generated results: Until you delete them
- Account data: As long as your account exists
- Purchase history: As required by law (7 years)

Deleted Accounts:
- All data permanently deleted within 30 days
- Backups purged within 90 days
- Purchase records retained for legal compliance only

Inactive Accounts:
- We don't delete inactive accounts automatically
- Your data stays safe even if you don't use the app

Children's Privacy

Age Restriction:
- Enzo is intended for users 13 years and older
- We don't knowingly collect data from children under 13
- If we learn a child under 13 has provided data, we delete it immediately

Parental Rights:
- Parents can request deletion of child's data
- Contact: info@uniqxel.com

International Data Transfers

Data Location:
- Photos stored on Supabase servers (may be US or EU)
- Subject to GDPR and international data protection laws
- Appropriate safeguards in place for data transfers

Changes to Privacy Policy

Updates:
- We may update this policy occasionally
- Changes posted here with updated date
- Significant changes: We'll notify you in the app
- Continued use = acceptance of changes

Third-Party Services

We use these trusted services:

Supabase (Cloud Storage)
- Stores your photos and account data
- GDPR compliant
- Privacy policy: https://supabase.com/privacy

RevenueCat (Purchase Management)
- Manages subscriptions and credits
- Privacy policy: https://www.revenuecat.com/privacy

Apple App Store (Payments)
- Processes all payments securely
- Privacy policy: https://www.apple.com/legal/privacy

Fal.ai (AI Processing)
- Processes photos for hairstyle generation
- Photos not stored by fal.ai
- Privacy policy: https://fal.ai/privacy

California Privacy Rights (CCPA)

California residents have additional rights:

- Right to know what data we collect
- Right to delete your data
- Right to opt-out of data sales (we don't sell data)
- Right to non-discrimination

Contact: info@uniqxel.com

European Privacy Rights (GDPR)

EU residents have additional rights:

- Right to access your data
- Right to rectification (fix wrong data)
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing

Contact: info@uniqxel.com

Contact Us

Questions or Concerns?

Email: info@uniqxel.com
Response time: Within 48 hours

Data Deletion Requests:
Settings → Delete Account (instant)
Or email us for manual assistance

General Inquiries:
Settings → Contact Support

---

© 2026 Enzo. All rights reserved.