Privacy notice

Last updated: 20 September 2026. KarmaPower s.r.o. is the controller for TuneMyLook AI app and service data.

Face data collected and why

You choose one photo through Apple's system picker; TuneMyLook AI does not request general photo-library access for import and never replaces the original. A selected portrait can contain the visible face and body of one adult. Natural Glow and the initial compatibility checks stay on the device. For an optional cloud edit, TuneMyLook AI collects the normalized selected JPEG and processes visible facial pixels only to preserve the person's appearance and reject an output that materially changes the face. The server temporarily derives a face count, a rectangular face region/crop and a pixel-comparison score for that quality check. TuneMyLook AI does not collect Face ID data, identify the person, infer demographics, or create a faceprint, embedding or persistent biometric template.

Use, disclosure, sharing and storage

Natural Glow does not upload the photo. Only after separate in-app consent, the normalized JPEG is sent over HTTPS to TuneMyLook AI's private Google Cloud infrastructure in europe-west3 and to OpenAI / OpenAI Ireland Ltd. for the requested edit and safety processing. OpenAI processing is Global / United States. The provider receives the selected image and a locked edit instruction. Photos and face-derived data are not sold, used for advertising, sent to Meta, or disclosed to other users. API inputs and outputs are not used for model training because KarmaPower has not opted in.

Face-data retention and deletion

On KarmaPower systems, face regions, crops and comparison scores exist only in working memory for the current request and are never stored or logged. The private input image is physically deleted after validation/provider processing, or on failure, cancellation, expiry or account deletion. A private result is kept only until download acknowledgement or for at most 24 hours. OpenAI's separate ordinary abuse-monitoring logs may retain API content for up to 30 days; TuneMyLook AI cannot shorten that provider-controlled period. No persistent face template exists to retain or delete. In-app account deletion removes TuneMyLook AI image objects and personal mappings immediately, subject only to restricted financial/security records that contain no photo or face data.

Analytics and advertising measurement

First-party product events contain controlled enums and opaque identifiers, never photo bytes, prompts, face coordinates, signed URLs, contacts, email or health data. Raw events expire within 90 days and de-identified daily aggregates within 24 months. Collection can be switched off and raw history deleted in Settings. Apple purchase history (product, transaction identifier, subscription status and interval) is linked to an opaque app installation/account token to verify Pro access, allocate credits, prevent duplicate grants and provide first-party purchase analytics. Optional analytics can be disabled; essential purchase verification remains necessary to provide Pro. Production version 1.0.2 has no Meta SDK, direct Meta App Events, IDFA access or tracking prompt. Apple provides privacy-preserving aggregate install attribution. Photos and their contents are never sent to advertisers.

Security, storage and rights

Temporary objects are private and accessed using short-lived scoped grants. Account deletion is available inside the app and removes image objects and personal mappings, while legally required financial/security records may remain in restricted form. Deleting TuneMyLook AI does not cancel an Apple subscription. For access, correction, objection or deletion questions, use Support.