Privacy Policy

1. Information we process

For sign-in, we process your email address, authentication status, and language choice. If you sign in with Google, we also receive account information within the authorization you grant. We do not ask you to enter a payment card number on this site.

When you use the service, we process uploaded photos, appearance corrections, analysis reports, generated images, and related private records. A beta application also processes the WeChat ID, phone number, or email address you submit, your use case, expected price, and desired features. It is currently held only in server process memory and is lost on restart.

Order features record the product, amount, currency, payment status, and transaction identifiers. The checkout page shows whether Waffo Pancake hosted payment is available; simulated settlement is limited to an explicitly enabled local development environment. Hosting and authentication providers may process request IP addresses, browser and device details, timestamps, and error logs. Product events currently produce development-only debugging logs without photos or contact details.

2. Purposes and legal bases

We use account and photo information to authenticate you, provide analysis and image generation, save and show private records, and handle deletion requests. Where applicable, this processing is based primarily on providing the service you request and performing our contract with you.

Order and necessary transaction information supports delivery of purchased access, accounting, and legal obligations. Necessary security logs help prevent abuse, diagnose faults, and protect accounts. We do not sell personal information or use your photos, reports, or generated content to train our own models.

3. Cookies and local storage

Sign-in uses essential session cookies. The language switch saves a preference cookie and localStorage value. Legacy sessions while signed out remain in this browser's IndexedDB; clearing this site's data removes them.

Your browser may keep temporary request state and downloaded copies. The current code has no third-party marketing pixels and does not send product events to an external analytics platform. Browser settings can clear local data, although removing session cookies may sign you out.

4. Providers and sharing

Authentication and private records use Supabase; the site and background jobs use Cloudflare. When a user starts analysis, necessary photos and appearance choices are sent to Doubao Seed 2.1 Turbo on Volcengine Ark (model ID: doubao-seed-2-1-turbo-260628). Confirmed image generation sends necessary photos and the confirmed report to Doubao Seedream 5.0 Pro (model ID: doubao-seedream-5-0-pro-260628). Model providers may charge the configured API account for analysis and generation. Their own terms govern retention and training; we cannot delete content they have already processed.

If live Waffo Pancake checkout is enabled, Waffo Pancake will process payment card data; MyStyleType will not store full card numbers on its servers. A real charge occurs only when you complete payment through Waffo Pancake hosted checkout. We may also disclose necessary information when required by law or with your consent.

5. Retention, security, and deletion

After sign-in, photos, appearance corrections, reports, and generated content remain in private cloud records until you delete a record. Deleting a record immediately revokes in-app access and queues private-object cleanup. Failed cleanup retains minimal job state for retry. Account closure still requires server-side reauthentication; the current endpoint rejects requests and cannot be described as complete.

Data is transmitted over HTTPS and cloud records are separated by account access controls. Downloads, browser-local copies, backups, and content already processed by external providers are outside our deletion process; remove them yourself or contact the relevant provider. Transaction or security records that must be retained by law may remain for the applicable legal period.

6. Your choices and rights

You can view and delete records in your account. Account closure cannot currently be completed. To exercise other privacy rights, email dm913559@gmail.com. Where applicable law provides, you may request access, correction, deletion, or a copy of personal information, object to or restrict certain processing, and complain to a supervisory authority. You may withdraw consent for consent-based processing without affecting earlier lawful processing.

We provide styling suggestions from visible photo features only. We do not infer race or gender identity, authenticate identity, recognize faces, or rate attractiveness. Appearance corrections are not identity determinations.

7. International processing, minors, and changes

Cloud and external model providers may process necessary data outside your country or region. Locations and safeguards depend on the providers configured at the time. Do not assume that photos are processed only on your device.

This service is for people aged 18 or older. We do not knowingly collect minors' photos or account information. We will announce material policy changes before they take effect through this page or an available account notice channel and update the date above.

8. Contact

Privacy requests and service questions: dm913559@gmail.com. Please do not email payment card numbers, passwords, or unrequested original photos.