English · Türkçe

Privacy Policy

Last updated 2026-10-10

Trycut shows AI previews of hairstyles on your photo. This policy explains what data the app uses, where it goes, how long it is kept and how to delete it.

Summary

• There is no sign-up. The app creates an anonymous account on your phone. We don’t ask for your name, email or phone number.
• Face Report (part of Trycut Pro) and photo checks run on your phone. Face measurements and the men’s hairline answer never leave your phone.
• If you agree, your photo is sent to our AI partners, fal.ai and Google: once right after you add it, to choose which style catalog (Women’s or Men’s) to show first, and each time you make a look. We don’t keep your photo on our servers.
• Your looks (the AI images) are kept in your account until you delete them.
• We don’t sell your data, we don’t show ads, we don’t track you across apps, and we don’t use your photos to train AI models.
• You can delete your photos and data in the app: Profile › Delete My Photos & Data.

Who we are

Trycut is provided by Selçuk Özdemir, an individual developer based in Türkiye (“we”, “us”). We are the data controller: we decide how the data described here is used. Contact for all privacy questions and requests: support@gettrycut.app.

What stays on your phone

These features work without sending your photo anywhere. They only need camera or photo library access:

• Face Report: face shape, face proportions and skin undertone are measured on your phone.
• Photo checks (light, framing, sharpness) and the hair analysis that ranks the styles for you.
• The hairline answer in the men’s flow.

One step is not done on your phone: choosing which style catalog (Women’s or Men’s) to show first. It is described under Your photo and AI generation and runs only with your consent.

Face measurements and the hairline answer are never sent to us or anyone else, never logged and never saved. The photos you take are stored in the app’s private storage on your phone (on iPhone with file protection that keeps them encrypted while the phone is locked). On Android, the app does not allow its data to be included in device backups.

On-device AI by Google (MediaPipe). These features use Google’s MediaPipe software on both iPhone and Android. MediaPipe sends Google usage statistics about the software itself: which task ran, counts, timing, and the app’s identifier and version. It never sends images or measurements. Google receives this data as the provider of the software.

Your photo and AI generation

Before your first photo is uploaded, the app asks for your consent. Without it, nothing is uploaded: you can still take a photo, and it stays on your phone.

Style catalog suggestion. If you have agreed and have not chosen a catalog yourself, the app sends your photo to our server once, right after you add it. The server re-encodes it, removes its metadata and sends a small copy (512 pixels on the long side) to fal.ai, which passes it through OpenRouter to a Google (Gemini) model with one fixed question: which catalog, Women’s or Men’s, fits the photo. We use the answer only to open the recommendations in that catalog; you can switch at any time. We don’t store the photo or the answer and we don’t log the answer; only your catalog choice is saved, like when you pick it yourself. This step does not need a subscription and is limited to 5 times a day per account.

When you make a look, change the shape of a look, or open its other angles:

1. The app crops and resizes your photo and sends it over an encrypted connection to our server (Google Cloud Functions, United States), together with the style you picked. It never sends free text you typed.
2. Our server checks that you have consented and have an active subscription. If not, nothing is sent to our AI partners to make a look.
3. The server re-encodes the photo and removes its metadata (such as location), then sends it to fal.ai, which runs an image model made by Google (Gemini) to create the look.
4. The finished look is saved in your account. Your photo is not saved on our servers: it exists only in our server’s memory while the request runs.

With each look we store a fingerprint of the uploaded photo (a SHA-256 hash). It cannot be turned back into your photo. We use it to check that the extra angles of a look are made from the same photo.

What our AI partners keep. Our AI partners process your photo only to create the look you asked for. Our partners may keep limited logs to prevent abuse:

• fal.ai: with every request we instruct fal.ai not to store the photo or the generated image (fal’s “store IO” setting is turned off), and any temporary link to the result expires within 1 hour. fal.ai may keep technical records of the request (for example its ID, timing and billing data) for security, abuse prevention and billing, under its own terms and privacy policy.
• Google: Google’s Gemini API terms allow it to keep requests and responses for up to 55 days to detect abuse.

We don’t use your photos or looks to train AI models.

What we store and why

Analytics, crash reports and logs

• Google Analytics for Firebase: app events such as “paywall shown” or “look made”, with fixed values only (for example the plan or the catalog). No account ID is set, no photos, no measurements, no free text. The advertising ID is not collected and ad personalization is off. Google may derive an approximate location from your IP address. Kept for 2 months.
• Firebase Crashlytics: crash reports with the error, device model, operating system and app version. No account ID is set.
• Server logs (Google Cloud Logging): technical events with a short one-way coded ID instead of your account ID. Never images, image links, prompts or measurements. Kept for 30 days.

Service providers

We share data only with these providers, only to run the app, and never sell it. They act on our behalf under their data processing terms, except where they are independent controllers of their own data (for example Apple and Google for store purchases, and Google for MediaPipe usage statistics).

Legal bases

Where data protection laws such as the GDPR or Türkiye’s KVKK apply, we rely on:

• Performance of our contract with you: running the app, keeping your looks and profile choices, providing Trycut Pro and applying the fair-use limit.
• Your consent: sending your photo to our AI partners to create looks, and push notifications. You can withdraw consent at any time by not making new looks and deleting your data (Profile › Delete My Photos & Data), or by turning notifications off in your phone’s settings. Withdrawal does not affect processing already done.
• Our legitimate interests: keeping the service secure, preventing fraud and abuse (device checks, rate limits, keeping the fair-use count and exit offer record after deletion), reviewing reported images, fixing crashes and understanding how the app is used in aggregate.
• Legal obligations: keeping the records we need for tax, billing and consumer law, and to prove that consent was given.

International transfers

Our servers are in the United States (Google Cloud us-central1), and our providers (Google, fal.ai, OpenRouter, RevenueCat) operate in the United States and other countries. So your data is transferred outside your country, including from the European Economic Area, the United Kingdom and Türkiye. For these transfers we rely on the safeguards in the providers’ data processing terms: the European Commission’s Standard Contractual Clauses (with the UK addendum for UK data) and, where a provider is certified, the EU–US Data Privacy Framework. For transfers from Türkiye, see Türkiye (KVKK). You can ask us for more information about these safeguards.

How long we keep data

Deleted files are gone right away: our file storage keeps no “soft deleted” copies (retention set to 0), and our database has no point-in-time recovery or backups turned on.

Deleting your data

• One look: delete it from the look in the app. Its images and record are removed from our servers.
• Everything: Profile › Delete My Photos & Data › Delete Everything. This removes your looks and their images, jobs, reports and profile choices from our servers, and the photos and cached looks on this phone. It doesn’t cancel your subscription.

What we keep, and why:

• Consent records: proof that you agreed before any photo was uploaded.
• Subscription status: so a subscription you paid for keeps working.
• Weekly look count: so deleting data can’t be used to reset the fair-use limit.
• Exit offer record: so the one-time offer stays one-time.
• The anonymous account ID the app created: the records above are linked to it; it contains no name, email or phone number.
• RevenueCat’s customer record (your anonymous account ID and purchase history): so the subscription keeps working and purchases can be restored. RevenueCat keeps it under its own policy, like the purchase records held by Apple and Google.

None of these contain your photos or looks. They are deleted at most 3 years after your last activity in the app. See Delete your data for all the ways to ask for deletion.

Subscriptions and payments

Payments are handled by Apple (App Store) or Google (Google Play Billing). We never see your card or bank details. We receive your subscription status through RevenueCat. Subscriptions renew automatically until you cancel them in the App Store or Google Play; refunds follow Apple’s and Google’s refund policies. See the Terms of Use.

AI labels

Every AI image shows an “AI” tag in the app. Saved and shared images are labelled “Made with AI”, and every stored or exported AI image carries an IPTC “Digital Source Type” marker in its metadata that says it was made by AI.

Security

• All connections are encrypted (TLS).
• Our server only accepts requests from the genuine app on a genuine device, checked with Firebase App Check (App Attest and DeviceCheck on iPhone, Play Integrity on Android).
• Only you can read your looks. The app cannot write to your subscription, look count, looks or consent records: only our server can.
• Images, image links, prompts, measurements and account IDs are filtered out of analytics, crash reports and logs.

Age limit

Trycut is for adults 18 and over. We don’t knowingly process data of anyone under 18. If you believe a minor has used the app, contact us and we will delete the data.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict its use, to withdraw consent, and to complain to a data protection authority. Because the app has no sign-up, we can only find your data through the app or the Support ID it shows. Write to support@gettrycut.app with your Support ID. We answer within 30 days, and we don’t charge for a request unless the law allows it. You can delete your data yourself at any time in the app.

EEA and UK

If you live in the European Economic Area or the United Kingdom, the GDPR or UK GDPR gives you the rights listed above: access, rectification, erasure, restriction, data portability, objection (including to processing based on our legitimate interests) and withdrawal of consent. The legal bases we rely on are listed under Legal bases, and transfers under International transfers. You can complain to the data protection authority where you live or work; in the UK, that is the Information Commissioner’s Office (ICO). We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

Türkiye (KVKK)

This section is our information notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). A Turkish version is on Gizlilik Politikası.

• Data controller: Selçuk Özdemir, Türkiye. support@gettrycut.app.
• Data and purposes: the data and purposes described in What we store and why, Your photo and AI generation and Analytics, crash reports and logs.
• How we collect it: electronically, through the app and our servers, when you use the app.
• Legal reasons (KVKK Article 5): it is necessary for setting up and performing the contract with you; it is necessary for us to meet our legal obligations; it is necessary for our legitimate interests, provided your fundamental rights are not harmed; and your explicit consent for sending your photo to our AI partners.
• Transfers abroad (KVKK Article 9): your data is transferred to our service providers abroad listed in Service providers (Google, fal.ai, OpenRouter, RevenueCat, Apple), mainly in the United States, to host and run the app, create looks and manage subscriptions. These transfers rely on the appropriate safeguards allowed by Article 9, such as standard contracts, and, where no such safeguard is available, on your explicit consent for the specific transfer.
• Your rights (KVKK Article 11): to learn whether your data is processed and to request information about it; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request its deletion or destruction under Article 7; to request that correction or deletion be notified to the third parties it was transferred to; to object to a result against you that arises solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
• How to apply: email support@gettrycut.app with your Support ID, or use the other methods set by the Personal Data Protection Authority (KVKK). We answer free of charge within 30 days at the latest. If you are not satisfied, you can complain to the Personal Data Protection Board.

United States

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use it (this policy), to access, correct and delete it, and not to be discriminated against for using these rights. We don’t sell or share your personal information as those laws define it, we don’t use it for targeted or cross-context behavioral advertising, and we don’t use sensitive personal information to infer characteristics about you. Face measurements stay on your phone and are never collected by us. To make a request, write to support@gettrycut.app with your Support ID; an authorized agent can also make a request for you.

Changes and contact

If we add a new AI partner or change how your photo is used, the app will ask for your consent again. We will update the date at the top of this page for every change. This policy is also available in Turkish; if the two versions differ, the Turkish version applies to users in Türkiye.

Questions: support@gettrycut.app.