Privacy Policy
Last updated: 15 October 2026
The short version
- You don't need an account. Puilo uses an anonymous ID, with no name, email or password.
- Your photos are checked on your iPhone first, stripped of location and camera details, sent securely for analysis and deleted from our servers as soon as the analysis is done.
- Your photos are never used to train AI models, and we never sell your data or show you ads.
- You can delete everything at any time from Profile → Delete all my data.
- Puilo gives cosmetic suggestions only. It isn't medical advice and doesn't diagnose anything.
Who we are
Puilo ("Puilo", "we", "us") is an iPhone app that turns makeup looks into step-by-step tutorials. This policy explains what data the Puilo app and puilo.com handle, why, and the choices you have. If you have any questions, email support@puilo.com.
What we collect and why
Your anonymous ID
When you first use a feature that needs our servers, the app creates an anonymous account with a random ID. It isn't linked to your name, email, phone number or Apple Account. We use it to keep your results separate from everyone else's and to apply fair-use limits.
Photos you choose to analyse
Puilo only sees photos you choose: a look you upload or share to Puilo, a selfie you add for personalisation, or a photo of your finished makeup for feedback. Before anything is uploaded:
- your iPhone checks the photo is usable (for example, that a face is visible and it isn't too dark). Photos that fail never leave your device;
- the photo is resized and its location and camera details (metadata) are removed.
The photo is then uploaded over an encrypted connection to private storage that only your anonymous account can access, analysed, and deleted from our servers as soon as the analysis finishes. If an analysis doesn't complete, the leftover upload is removed the next time you run an analysis or when you delete your data. We keep a fingerprint (a one-way hash) of the photo so that analysing the same photo again returns your earlier result instead of running a new analysis. The fingerprint can't be turned back into the photo.
We don't use your photos to identify you or to create facial recognition data, and we never use them to train AI models.
Analysis results
We store the results of your analyses so you can see them again and so tutorials can be personalised. Depending on the feature, results can include cosmetic estimates such as skin tone, undertone, colour season and face, eye, lip and brow shape; colour suggestions; feedback on a makeup look; tutorials; and product suggestions. These are cosmetic estimates, not medical or dermatological assessments.
Your preferences
If you answer the onboarding questions, we store your answers: goals, experience level, favourite styles, skin concerns you chose to share and preferred finish. They're used to tailor tutorials and product suggestions. Every question is optional except experience level.
Usage records
For each AI request we record the type of request, when it happened, whether it succeeded, the AI model used and its cost. We use these records to prevent abuse, apply hourly limits and manage costs. They never contain your photos or results.
Subscription status
If you subscribe to Puilo Pro, payment is handled entirely by Apple. We never see your card or billing details. We and our subscription provider receive your purchase details (which plan, when it started and whether it's active), linked to your anonymous ID, so we can unlock Pro features.
Support emails
If you email us, we'll use your email address and message only to reply and help you.
What we don't collect
We don't collect your name, email (unless you write to us), contacts, precise or approximate location, advertising identifiers or browsing history. Puilo has no ads, doesn't track you across other apps or websites, and doesn't currently use third-party analytics or crash-reporting tools. If that changes, we'll update this policy first.
Data stored on your iPhone
The app keeps your results, saved looks and preferences on your iPhone so they're available quickly. When you share a photo or video to Puilo from another app, the selected image waits in the app's private storage until you open Puilo, then it's removed. Deleting the app removes this data from your iPhone.
Who we share data with
We never sell or rent your data. We share it only with service providers that help run Puilo, and only what each needs:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosts our servers, database and private photo storage | Your anonymous ID, photos while they're being analysed, results, preferences and usage records |
| OpenAI | Runs the AI that analyses photos and writes tutorials | The photo being analysed and the relevant preferences. Under OpenAI's API terms, this data isn't used to train its models; OpenAI may keep it for up to 30 days to detect abuse, then deletes it |
| RevenueCat | Manages subscriptions | Your anonymous ID and purchase details from Apple |
| Apple | Processes payments and distributes the app | Handled under Apple's own privacy policy |
| Brave Search | Finds product photos and shop links | Product names only, never your photos or personal information |
Product photos in the app load directly from shop and brand websites, and links open those websites. Like any website, they can see your device's IP address, and their own privacy policies apply.
We may also disclose information if the law requires it, or to protect the safety and rights of our users or others.
Some providers process data in the United States and other countries. Where required, they protect it with safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
| Data | Kept for |
|---|---|
| Photos on our servers | Until the analysis finishes (an unfinished upload: until your next analysis or until you delete your data) |
| Results, preferences, photo fingerprints, saved looks | Until you delete them or all your data |
| Usage records | Kept for cost and abuse records. When you delete your data, they are no longer linked to you |
| Subscription records | As long as needed for your subscription and for legal and accounting purposes |
| Support emails | Until your question is resolved, and up to 2 years after |
Your choices and rights
- Delete a result: swipe it away in Profile → Saved results.
- Delete everything: Profile → Delete all my data permanently deletes your photos, results, saved looks, preferences and anonymous account from our servers and your iPhone. Your Puilo Pro subscription is linked to your Apple Account and isn't cancelled; manage it in your iPhone's Settings.
- Selfies are optional: you can use Puilo without adding a selfie.
- Photo access: Puilo asks for camera or photo access only when you choose to take or pick a photo. You can change this anytime in your iPhone's Settings.
Depending on where you live (for example in the UK, the European Economic Area or California), you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict how we use it, and to complain to your local data protection authority. Because we don't know who you are, the fastest way to exercise these rights is in the app. You can also email support@puilo.com.
We process your data to provide the features you ask for (performance of our contract with you), and for our legitimate interests in keeping Puilo secure, preventing abuse and improving the service. Where the law requires consent, for example for photos of your face, we rely on your choice to take or share the photo and you can withdraw it at any time by deleting your data.
Security
Data is encrypted in transit. Photos are stored privately and access is restricted so each anonymous account can only reach its own data. Our AI keys and other secrets stay on our servers, never in the app. No system is perfectly secure, but we work to protect your data and keep as little of it as possible.
Children
Puilo isn't directed to children under 13, and we don't knowingly collect data from them. If you believe a child has used Puilo, contact us and we'll delete the data.
puilo.com
This website doesn't use cookies, analytics or trackers. Our hosting provider, Vercel, processes basic technical information such as IP addresses to deliver the site and keep it secure.
Changes to this policy
We'll update this page if our practices change and revise the date at the top. For significant changes, we'll also take reasonable steps to let you know, for example in the app.
Contact
Questions or requests: support@puilo.com