Privacy Policy

Last updated: 18 August 2026

PaletteProof is built to work without collecting your personal data. This policy describes exactly what the app does and does not do.

Face data

To determine your seasonal colour palette, PaletteProof processes a photograph of your face — a selfie you take in the app or choose from your photo library. This is the only face data the app handles. PaletteProof does not create, derive or store a faceprint, face template, face geometry or any other biometric identifier, and it does not use face data to recognise or identify you. Apple's Vision framework locates the face on your device only, to measure skin, hair and eye colour; those measurements are numeric colour values, not a biometric template.

What the photo is used for: one reading, to determine your season, sub-season, undertone and a confidence score, and to write the short explanation you see. It is used for nothing else. It is never used for advertising, profiling, or training any model.

How long it is kept: on our server and at every processor named below, for the seconds the reading takes and no longer. Nothing is written to disk, to a database or to a log file. The app declares Data Not Collected because, under Apple's definition, data is "collected" only when it is held for longer than it takes to service a request in real time.

Where it is stored: the only lasting copy of your selfie is on your iPhone, inside the app's own storage. Deleting the photo in the app, using "Reset all data" in Settings, or deleting the app removes it. There is no server-side copy to export or erase.

Who your photo is shared with

Reading a photo requires a vision model that PaletteProof does not run itself. Your selfie, and any item photo you check, passes through exactly these parties, in this order:

• PaletteProof's analysis server — receives the photo and forwards it. Holds it in memory only; writes nothing to disk, database or log.
• OpenRouter (openrouter.ai/privacy) — routes the request to a model provider.
• Google (policies.google.com/privacy) — runs the Gemini vision model that reads the photo.

Requests are restricted to zero-data-retention endpoints, so no provider in this chain may store your photo or train on it. This restriction is set on every request the server makes; it is not an option a user has to find. We have confirmed that these processors provide protection for this data equal to what this policy describes.

The request carries no name, no email address and no account — only an anonymous identifier generated on your device, and that identifier is not sent onward to OpenRouter or Google.

The app asks for your permission, and shows you this same information, before the first photo is sent. If you decline, nothing leaves your device and no analysis is run.

Photos

The copies kept on your iPhone are the only lasting copies. Deleting them in the app, or deleting the app, removes them.

Your analysis results

Your season, undertone, confidence score and saved item checks are stored locally on your device. The result of an analysis is returned to your phone and not kept on our side.

No account

PaletteProof does not ask you to create an account, and does not ask for your name, email address, phone number or date of birth.

Purchases

Subscriptions and one-time purchases are processed by Apple. We use RevenueCat to tell the app whether a purchase is active. For this, RevenueCat receives an anonymous identifier generated on your device and the receipt information Apple provides. It does not receive your name, your email address, your photos or your analysis results. RevenueCat's privacy policy is at revenuecat.com/privacy.

Analytics and tracking

PaletteProof contains no third-party analytics, no advertising SDKs, and no cross-app or cross-site tracking. We do not build a profile of you and we do not sell or share data with data brokers.

Children

PaletteProof is not directed at children under 13, and we do not knowingly collect information from them. Because the app collects no personal data at all, no such information is held.

Your rights

Because nothing is retained on our side, you are already in full control of your data: deleting a result in the app, or deleting the app, removes it. There is no server-side copy for us to export or erase. If you have a question about this, write to us at the address below.

Changes to this policy

If a future version of PaletteProof ever begins retaining photos or results, we will update this page and state clearly what is kept and for how long, before that version ships.

Contact

Questions about this policy: alcmdnc@gmail.com