Privacy Policy

1. Introduction

Shay – Hairstyle Studio ("Shay", "we", "us", or "our"), produced and operated by Vision Labs Yazılım Hizmetleri Anonim Şirketi ("Vision Labs"), respects your privacy and is committed to protecting it. This policy explains what information we may collect when you use the Shay mobile application (the "Service"), and how we collect, use, maintain, protect, and disclose that information.

2. Information We Collect and Its Use

When you use the Service, you may upload photos (which may include images of your face and hair). These photos are required to provide Shay's AI-powered hairstyle features (e.g., hairstyle try-on, hair color changes, style recommendations, and face-related adjustments). Your photos are stored temporarily in our systems and are deleted when it is technically feasible. Your photos are used solely to provide the hairstyle and editing features you request and for no other purpose. We do not sell, rent, or otherwise share your photos with third parties.

Account Information

If you create an account, we may collect information such as your username, email address, and profile details you choose to provide. This information is used to operate and personalize the Service, including displaying your profile, posts, and social interactions within the app.

User-Generated Content

Shay allows you to create and share posts featuring hairstyle transformations. When you share content publicly, it may be visible to other users of the Service. You control what you choose to share.

No Storage of Derived Face Data on Our Servers

We do not create or store facial recognition templates, embeddings, "faceprints," facial landmarks, depth maps, or any other derived face-related or biometric identifiers on our servers. The only face-related data we store on our servers are the photos themselves, and only temporarily as described in this policy.

Usage Information

We may automatically collect certain information about your device and usage of the Service, including device type, operating system, app version, and general usage analytics. This information helps us improve the Service and is not used to personally identify you.

Use of Service Providers (Processors)

To provide the Service, we use carefully selected service providers that process data strictly on our instructions:

• Cloudflare: Used to store photos temporarily for processing and to securely deliver edited outputs back to your device.
• Google: Used to perform generative AI processing on the photos you submit (for example, to apply AI-powered hairstyle transformations you request).

These providers act as our processors. We do not permit them to use your photos or any face-related data for their own purposes (such as advertising or creating profiles). We also do not allow our providers to train their models on your content unless we have an explicit agreement and your consent; we do not opt in to such use.

Links to Provider Privacy Policies

For details about how these providers handle data within their own services, please review their privacy policies directly:

• Cloudflare Privacy Policy
• Google Privacy Policy

We provide these links for your convenience only. We do not control, endorse, or make representations about third-party privacy practices or the content of third-party privacy policies.

3. Data Retention

We retain your photos only for as long as is strictly necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Once the applicable retention period expires, we delete your photos when technically possible. In any case, we delete all face-related data within a maximum of one (1) year.

As noted in Section 2, we do not store derived face-related data on our servers; therefore, this retention section applies to photos (which may include faces). This retention rule applies across our systems and our service providers' systems (including Google for processing and Cloudflare for temporary storage and delivery), subject to their technical deletion schedules.

Account information (such as your username and profile data) is retained for as long as your account remains active. You may request deletion of your account and associated data at any time.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Children's Privacy

The Service is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data, and the right to withdraw consent or object to certain processing. To exercise any of these rights, please contact us using the details below.

7. Limitations of Liability

We strive to provide a high-quality experience. However, we do not accept responsibility for any damages arising from the use of the Service. Additionally, we are not responsible for any misuse of the images or photos you upload to the Service.

8. Legal Responsibilities

We provide the Service to the best of our abilities and expect users to act responsibly. We do not accept legal responsibility for how the Service is used.

9. Changes to This Privacy Policy

We may update this privacy policy at any time and for any reason. We will notify you of changes by updating the "Last updated" date above. We encourage you to review this policy periodically.

10. Data Deletion Requests

To request deletion of your data, please email us at info@shay.style.

11. In-App Purchases

Shay offers in-app purchases for subscription services. By purchasing a subscription within the app, you agree to pay the associated fees. All subscription transactions and payments are processed solely by the Apple App Store or Google Play Store and are subject to their respective terms and conditions. Payments will be charged to your account with the respective platform.

If a free trial is offered, your account will be charged for the subscription upon the trial's expiration. Subscriptions renew automatically unless you turn off auto-renew at least 24 hours before the current period ends. Renewal charges may occur up to 24 hours before the end of the current period.

Subscription management, including cancellations, must be handled through your app store account settings. Deleting your Shay account or uninstalling the app does not cancel a subscription and does not entitle you to refunds. Shay does not process payments directly and disclaims responsibility for refunds, payment disputes, or transaction-related inquiries. Such issues must be resolved directly through the respective app store.

Personal data collected during purchase and subscription processes will be handled in accordance with this Privacy Policy and the applicable app store's privacy policy.

12. Consent to Share Consumption Data

By using the app and making in-app purchases, you consent to our sharing of data about your usage and consumption of purchased content with Apple or Google for the purpose of assisting with refund requests. This may include information about how you accessed and interacted with the purchased content. We share such data only as necessary and in compliance with the respective platform's policies.

13. Contact Us

For more information about our privacy practices, questions, or complaints, please contact us via email at info@shay.style.