← Back to FADR

Privacy Policy for FADR

Effective Date: September 2026
Last Updated: October 18, 2026

1. Introduction

FADR ("we," "our," or "the app") is developed by Cinderhound Studio. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use FADR on iOS and Android.

FADR lets you see yourself, in your own photo, with a new haircut, hair colour, beard, hair length or texture, make-up, outfit, or photoshoot setting, alone or combined in Studio. It can also suggest the colours that suit you (Color Analysis). Because the app works with photographs of your face, we have tried to be specific about exactly what happens to those photographs.

Where the two platforms differ, this policy says so.

2. Information We Collect

2.1 Photographs

• Your selfie: The photo you take or choose to try a look on
• Reference photos: Any photo you optionally upload to copy a hairstyle from
• Generated images: The results the app produces from your selfie

Photographs are sent to Google's Gemini API to create a result, and, if you use Color Analysis, to describe your colouring (see section 4.1). They are not stored on our servers, are not used to train any model, and are not shared with anyone other than the processing service described in section 4.1.

The outfit and photoshoot pictures you choose from in the app are FADR's own images, not yours.

Nothing is sent until you have given permission. Before the first photograph ever leaves your device, the app shows a consent screen naming Google as the recipient and setting out exactly what is sent. If you decline, no photograph is transmitted. You can withdraw that permission at any time in Settings, after which the app will ask again before sending anything.

Your selfie is stored on your device so that you can reuse it without retaking or reselecting the same photo. The app keeps the six most recent selfies and no more; using a seventh removes the oldest. These photographs never leave your device except when you create a look or run Color Analysis, as described in section 4.1.

You can delete them at any time from Settings, and uninstalling the app removes them along with everything else stored in the app.

2.2 Face Measurements

• Face shape analysis: The app measures the proportions of your face to rank haircuts against your face shape
• This is performed entirely on your device, using Apple's Vision framework on iOS and Google ML Kit Face Detection on Android
• On both platforms the analysis runs locally. Nothing is transmitted to Apple, to Google, or to us as part of this measurement, and no internet connection is used for it
• The measurement produces three values: face length, jaw definition, and cheekbone width
• No facial recognition is performed. The app determines the shape of a face, never the identity of a person. No faceprint, biometric template, or identifying data is created or stored
• Only the three resulting descriptions are saved, on your device

2.3 Information You Provide

• First name (optional): Used only to address you inside the app
• Whose looks to show (women's or men's) and what you want to try first: Used to set up the app for you
• Typed descriptions: Any hairstyle you describe in your own words
• Studio combinations: The changes you stack in Studio
• Your Color Analysis result: Your season and the description that comes with it

All of this is stored locally on your device.

2.4 Device Identifier

FADR uses an anonymous identifier for your device. It is what holds your balance of looks, links your FADR Pro subscription, makes sure the free looks for new users are given only once per device, applies fair-use limits, and records promo codes you redeem.

iOS: The identifier is created the first time you open the app, from Apple's identifier for apps from the same developer (or at random), and is kept in your device's Keychain, marked for this device only. It is never copied to another device by a backup or by iCloud Keychain. It remains if you delete and reinstall FADR, so purchased looks are not lost. It is removed if the device is erased.

Android: The identifier is created the first time you open the app, from a one-way, salted cryptographic hash of the Android ID that Android provides to FADR. The Android ID itself never leaves your device, and it cannot be recovered from the identifier. The identifier stays the same if you reinstall FADR on the same device, is different on every other device, and changes if the device is factory reset.

On both platforms:

• It is not your Apple ID, your Google account, your name, your email, your phone number, or an advertising identifier, and it is not linked to any of them
• It is not used for advertising or to track you across other apps or websites
• It contains no personal information and does not on its own identify you

2.5 Permissions Required

iOS

• Camera: To take a selfie
• Photo Library: To choose an existing photo, and to save results if you ask us to
• Internet: Required to create looks

Android

• Camera: To take a selfie
• Internet: Required to create looks
• No photo or storage permission is requested. Choosing an existing photo uses the Android Photo Picker, which gives the app access to the single image you select and nothing else in your gallery

FADR does not request location, contacts, microphone, health, or tracking permissions on either platform.

Separately from these system permissions, the app asks for your explicit permission before sending any photograph to Google for processing, as described in sections 2.1 and 4.1.

3. How We Use Your Information

• Create a preview of you with a new hairstyle, colour, beard, make-up, outfit, photoshoot or Studio combination
• Describe your colouring and suggest colours that suit you (Color Analysis)
• Measure your face shape to rank haircuts that suit you
• Keep your recent selfies so you can reuse a photo without retaking it
• Save your previous looks so you can revisit them
• Provide FADR Pro and look packs you have bought
• Give the free looks for new users once per device
• Apply fair-use limits and prevent abuse
• Improve app performance and user experience

We do not build advertising profiles, and we do not sell data.

4. Third-Party Services

4.1 Google Gemini (Image Generation and Color Analysis)

Creating a look requires sending your photograph to Google's Gemini API for processing. Google is the only third party that receives your photograph.

• Your permission first: Before the first photograph is sent, the app shows a consent screen that names Google as the recipient, lists exactly what will be sent, and explains what happens to it. Nothing is transmitted unless you agree. Declining leaves you where you were, with nothing sent
• What is sent to create a look: Your selfie; any reference photo you uploaded; a text description of the change you chose (a haircut, colour, beard, make-up, outfit, photoshoot or Studio combination); and, for outfits and photoshoots, FADR's own picture of the outfit or setting
• What is sent for Color Analysis: Your selfie and a request to describe your colouring. What comes back is text only: your season, your undertone, depth and clarity, and short descriptions of your skin, eyes and hair. It is shown to you and kept on your device
• How it is sent: Over HTTPS, through our own secure proxy server, so that our API credentials are never stored in the app
• What is returned: A single generated image, or for Color Analysis a short text description, sent back to your device
• Retention by us: We do not store your photographs on our servers. They pass through, are processed, and are discarded
• Retention by Google: Google may retain data submitted to the API in accordance with its own terms. For more information, see the Google Privacy Policy and the Gemini API Additional Terms of Service
• Protection by Google: Google is contractually required, under those terms, to protect data submitted to the Gemini API to a standard equivalent to the protections described in this policy

Withdrawing permission: You can withdraw your agreement at any time in Settings, under "ai processing". The app will then ask again before sending any further photograph.

If you are not comfortable with your photograph being processed by a third-party service, decline the consent screen, or simply do not use these features. The rest of the app continues to work on your device.

4.2 Cloudflare (Proxy and Storage)

Requests are routed through a Cloudflare Worker that holds our API credentials, applies rate limits, and stores the small amount of data described in section 5. Cloudflare processes requests in transit and may log standard request metadata, such as your IP address. See the Cloudflare Privacy Policy.

To stop the free looks for new users being collected over and over, the number given out on each network is limited per day. For this we keep a one-way, salted hash of your IP address, shortened so that it cannot be reversed, together with a daily count. We never store the IP address itself, and the count is deleted automatically after about 25 hours.

4.3 On-Device Face Measurement

Face shape measurement uses Apple's Vision framework on iOS and Google ML Kit Face Detection on Android. Both run entirely on your device.

ML Kit is a Google library, but the face detection model it uses for this runs locally on your phone. Your photograph is not uploaded to Google, to us, or to anyone else in order to measure it. This is a separate process from the processing described in section 4.1, which does send your photograph to Google's Gemini API.

4.4 Subscriptions and In-App Purchases

FADR offers FADR Pro, an auto-renewing subscription (weekly or yearly, sometimes with a free trial) that includes a fair-use allowance of looks, and look packs, one-time purchases of extra looks. The allowance is set out in our Terms of Use. Purchases are processed by the app store you installed from:

iOS (Apple App Store)

• Payment Processing: All payments are handled securely by Apple
• Managing or cancelling FADR Pro: iOS Settings → your name → Subscriptions
• Purchase history: iOS Settings → your name → Media & Purchases
• Refunds: Refund requests are handled by Apple according to its refund policy

Android (Google Play)

• Payment Processing: All payments are handled securely by Google Play
• Managing or cancelling FADR Pro: Play Store app → your profile → Payments & subscriptions → Subscriptions
• Purchase history: Play Store app → Payments & subscriptions → Budget & order history
• Refunds: Refund requests are handled by Google according to the Google Play refund policy

On both platforms:

• Data Collected: We do not collect or store your payment information. We never see your card details, billing address, name, or email
• Verification: When you buy, we receive confirmation from Apple or Google and check it with them, so that we can credit your looks or start FADR Pro. For a subscription, we keep the store's transaction reference for it (Apple) or its purchase token (Google), the plan, its renewal or expiry date, whether it is a free trial, whether it is active, and how much of the allowance has been used. This is linked only to the anonymous device identifier described in section 2.4

4.5 Cloud Backup

Your recent selfies and saved looks are stored on your device.

iOS: If iCloud Backup is enabled, they are included in your device backup, in your own iCloud account.

Android: If Android Auto Backup is enabled, they are included in your backup, in your own Google Drive account.

On both platforms the backup is yours, and we have no access to it.

The anonymous device identifier described in section 2.4 is not carried to another device by a backup: on iOS it is kept in the Keychain for this device only, and on Android it is excluded from backup and differs on every device. Two devices therefore never share the same balance of looks.

4.6 No Advertising and No Analytics

FADR contains no advertisements, no advertising identifiers, and no third-party analytics or tracking SDKs.

We do count anonymous usage events, for example how many looks were created on a given day across all users. These are totals only. They are not linked to you or to your device identifier, they contain no personal information and no photographs, and they cannot be used to reconstruct what any individual did. They are deleted automatically after 60 days.

5. Data Storage and Security

• Local Storage: Your recent selfies (up to six), saved looks, name, preferences, face measurements, Color Analysis result and Studio combination are stored on your device
• File Protection (iOS): Saved photographs, including your recent selfies, are written with complete file protection, meaning they cannot be read while your device is locked
• File Protection (Android): Saved photographs, including your recent selfies, are written to internal app-private storage, which is not readable by other apps on the device
• In Transit: All network requests use HTTPS
• On Our Servers: We store no photographs. Keyed to the anonymous identifier in section 2.4, we keep: your balance of purchased looks; your FADR Pro subscription record, as described in section 4.4; a record that the free looks have been given to your device; how many promo codes your device has redeemed; and short-lived counters used for fair use and rate limits. Separately, we keep the hashed daily network counts described in section 4.2
• Content Reports (Android): If you report a generated image from inside the app, we store your report, the reason you chose, the style it came from, any note you write, and a shortened form of your anonymous identifier, so that we can review it and improve our safeguards. The image itself is never sent or stored. Please do not include personal details in the note

6. Data Retention

• Local data, including your saved looks, remains on your device until you delete it in the app or uninstall the app
• Your recent selfies are kept on your device until you delete them in Settings, until a seventh photo pushes the oldest out, or until you uninstall the app
• Your balance of purchased looks is retained so that looks you have paid for do not expire
• Your FADR Pro subscription record is kept while the subscription is active, and afterwards for as long as we need it for accounting, to answer questions about past purchases, and to handle refunds and disputes. You can ask us to delete it at any time (see section 7)
• The record that the free looks have been given to your device is kept for 10 years, so that they are not given again
• The count of promo codes your device has redeemed is kept for 2 years
• Fair-use and rate-limiting counters on our servers expire automatically within 48 hours; the hashed network counts described in section 4.2, within about 25 hours
• Anonymous usage totals are deleted after 60 days
• Content reports (Android) are kept for 90 days and then deleted automatically
• Photographs sent for processing are not retained by us
• Retention by Google is governed by Google's own policies
• Backups remain in your iCloud or Google Drive account until you delete them

7. Your Rights

You have the right to:

• Access your data: All of it is visible within the app
• Withdraw permission for AI processing: Settings, then "ai processing", then "withdraw permission"
• Delete your saved selfies: Settings, then "delete saved photos"
• Delete individual looks: Delete any saved look from the history screen
• Delete the data in the app: Uninstall the app, or use "clear saved looks" in settings. This removes everything stored in the app. It does not remove the anonymous device identifier (section 2.4) or the data we hold for it, which is what keeps your purchased looks and FADR Pro after a reinstall; to delete that, see below
• Cancel FADR Pro: In your device's subscription settings, as described in section 4.4. Deleting the app does not cancel a subscription
• Delete backups: Remove FADR data from your iCloud backup in iOS Settings, or from your Google Drive backup in Android Settings → Google → Backup
• Withdraw permissions: Revoke camera access at any time in iOS Settings → FADR, or Android Settings → Apps → FADR → Permissions
• Contact us: Email contact@cinderhound.com with any request regarding your data

For step-by-step instructions on requesting deletion of the data held on our servers, see Delete your FADR data. Deleting it removes your balance of looks and the link to your FADR Pro subscription on that device.

Because we do not hold accounts or store your photographs, there is no profile for us to delete. The data we hold is the small, anonymous set listed in section 5. None of it is linked to your name, email or account.

8. Children's Privacy

FADR is not intended for children. You must be at least 16 years old to use FADR, or at least 13 where local law permits and you have the consent of a parent or guardian.

We do not knowingly collect personal information from children. Please do not upload photographs of children.

9. Photographs of Other People

Only upload photographs you have the right to use. Do not upload photographs of other people without their permission, and do not upload photographs of children. Reference photographs are used only to read a hairstyle; the face in a reference photograph is ignored.

10. AI-Generated Content

Images produced by FADR are generated by an AI model. They are a preview and an approximation, not a photograph and not a guarantee of how a haircut, colour, beard, make-up or outfit will look on you. Results vary with lighting, photo quality, and hair type. Color Analysis is a suggestion based on one photo, not a professional assessment. Please treat results as a starting point for a conversation with your barber, stylist or colourist rather than a promise.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: contact@cinderhound.com
• Website: https://cinderhound.com
• Developer: Cinderhound Studio