Privacy Policy
- No account, no sign-up — we don't know who you are.
- Your selfie is sent securely to an AI service only to run your color analysis, then the result comes straight back to your phone.
- We don't store your photo on our servers, and it is never used to train AI models.
- Your results, answers, and saved selfie live on your device. Delete the app and they're gone.
- No ads, no third-party analytics, no selling or sharing of personal data. Ever.
Who we are
Color Season Analysis AI ("the app") is a personal color analysis app for iPhone, made by Lean Orbit LLC ("we"). This policy explains what data the app handles, where it goes, and the choices you have. Questions? Email [email protected].
Information the app handles
The app works without an account, so we never collect your name, email address, contacts, or location. The only information involved is:
- Your photo. The selfie you take or choose is used for one purpose: analyzing your color season.
- Your onboarding answers. Optional style questions (experience with color analysis, your goal, style struggles, natural hair color). These stay on your device; your hair color, goal, and selected style struggles may be included as text alongside your photo to improve and personalize the analysis.
- Purchase status. Whether you have an active subscription or lifetime purchase, provided to the app by Apple. We never see your payment details.
How your photo is processed
When you run an analysis:
- The photo is reduced in size on your device.
- It is sent over an encrypted connection (HTTPS) through our secure relay (hosted on Cloudflare) to OpenAI, the AI provider that performs the analysis. The relay exists only to keep our API credentials off your device — it does not save your photo.
- The analysis result (your season and palette) is returned to your device. That's the end of the trip.
Per OpenAI's API data usage policy, content sent through the API is not used to train their models and may be retained for up to 30 days solely for abuse monitoring before deletion.
The "Draping Reveal" feature (your selfie shown against different colors) is processed entirely on your device — those images never leave your phone unless you choose to share them.
Face data
The selfie you submit contains an image of your face, so we want to be exact about how it is handled:
- What is collected: the photo itself — nothing more. The app does not extract, generate, or store facial geometry, faceprints, facial measurements, or any biometric identifier, and the photo is never used to identify you or anyone else.
- How it is used: for one purpose only — estimating your seasonal color palette from visible characteristics (skin undertone, hair color, eye color, and overall contrast). It is not used for advertising, profiling, identification, or any other purpose.
- Consent: the app explains what will be sent and asks for your explicit consent before your first analysis. A photo is only ever transmitted when you actively start an analysis.
- Sharing: to run the analysis, the photo is transmitted over an encrypted connection (HTTPS) through our Cloudflare relay to OpenAI, which performs the analysis. It is shared with no other party, and never sold.
- Storage: we operate no server that stores photos. Our relay forwards the request without saving it, writing it to a database, or logging its contents. The only stored copy is the one kept on your own device for the Draping Reveal feature, in the app's private storage.
- Retention and deletion: we retain no copy of your photo. OpenAI may retain API content for up to 30 days solely for abuse monitoring, after which it is deleted, and API content is not used to train OpenAI's models (see OpenAI's API data usage policy). The on-device copy remains until you replace it with a new analysis, clear it, or delete the app.
What stays on your device
- Your latest analysis result (season, palette, tips).
- A copy of your analyzed selfie, stored in the app's private storage (excluded from iCloud backup) so the Draping Reveal can use it.
- Your onboarding answers.
None of this is uploaded to us. You can clear your answers and results anytime via Settings → Redo Onboarding in the app, and deleting the app removes everything.
What we don't do
- No advertising, and no ad networks or trackers in the app.
- No third-party analytics SDKs.
- No selling of personal data, and no sharing of personal data for cross-context behavioral advertising.
- No "tracking" as defined by Apple's App Tracking Transparency framework.
Purchases
Subscriptions and the lifetime purchase are processed entirely by Apple through your App Store account. Apple's handling of your payment information is covered by Apple's Privacy Policy. You can manage or cancel your subscription anytime in your device's Settings, or from inside the app.
Notifications
If you allow notifications, the app may schedule a local reminder (for example, before a free trial ends). These are created and delivered entirely on your device — no push servers involved.
Service providers
The app relies on three service providers, each receiving only what's needed to do its job:
- OpenAI — performs the color analysis on your photo (see above).
- Cloudflare — hosts the secure relay between the app and OpenAI, and may process standard technical data (such as IP address) transiently to deliver the service, as any internet host does.
- Apple — App Store distribution and purchase processing.
We confirm that each of these providers protects your data with safeguards equal to or greater than those described in this policy: OpenAI does not use API content to train its models and deletes it within 30 days (OpenAI API data usage policy); Cloudflare processes requests transiently as a network relay under the Cloudflare Privacy Policy; and Apple's handling is described in Apple's Privacy Policy. We share only the minimum data needed to perform the service you request, and none of these providers may use your data for their own advertising or sell it.
Data retention and deletion
We run no user database, so there is nothing for us to retain or delete on our side. Photos pass through the analysis service transiently (subject to OpenAI's up-to-30-day abuse-monitoring window described above). Everything else lives on your device and is removed when you delete the app.
Security
All network communication uses HTTPS/TLS encryption. Our relay accepts only the exact type of request the app makes, and our AI provider credentials are stored server-side so they never ship inside the app.
Children
The app is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly process personal information from children. If you believe a child has used the app in a way that concerns you, contact us and we will help.
Your rights
Depending on where you live (for example, the EU/EEA under GDPR or California under the CCPA/CPRA), you may have rights to access, correct, or delete personal information. Because we don't hold personal information about you, most of these rights are satisfied by design.
Changes to this policy
If we change how the app handles data, we will update this page and revise the effective date above. Material changes will be highlighted in the app's release notes.
Contact
Email: [email protected]