Privacy Policy

Color Season Analysis AI (iOS) · Effective September 5, 2026

Who we are

Color Season Analysis AI ("the app") is a personal color analysis app for iPhone, made by Lean Orbit LLC ("we"). This policy explains what data the app handles, where it goes, and the choices you have. Contact us at [email protected].

Information the app handles

• Photos and analysis. The selfie you take or choose is submitted for color analysis. The result includes a season, palette, and related recommendations.
• Onboarding answers. Your answers are saved locally. Natural hair color, style goal, and selected style struggles may accompany your photo to personalize the analysis. Selected preferences are also included in analytics, as described below.
• Purchases. Apple provides subscription and lifetime-purchase status. Analytics includes trial, subscription, and purchase events and product information. We do not receive your payment-card details.
• Identifiers and technical data. Analytics and security services process installation/device identifiers, app and device information, and limited SDK diagnostic information.
• Approximate location. Google Analytics derives general geographic information from IP addresses. The app does not request GPS or precise-location access.
• Support correspondence. If you email us, we receive your email address, message, and any attachments you choose to send, to respond to your request.

The app does not require your name, email address, phone number, or postal address to use its features. It does not access your contacts, record audio, or collect your browsing or search history.

Photos, face data, and AI analysis

Before your first analysis, the app explains the AI sharing and asks for your consent. A photo is sent when you actively start an analysis:

1. The photo is reduced in size on your device.
2. The photo and selected answers are sent over HTTPS through our Cloudflare relay to OpenAI, L.L.C. (United States), which performs the analysis.
3. Your result is returned to your device. Separately, an analytics event records completion and the season label; the photo and full result are not included in that event.

The face data is the image of your face in the submitted photo. The app does not create faceprints, facial-geometry records, or biometric identifiers, and does not use the photo to identify you. The photo is used to estimate a color palette from visible facial skin, eyes, and hair, not for advertising. Selected style preferences help personalize the recommendations.

Our Cloudflare relay forwards the photo without saving it to a database or logging its contents. The app does not send selfies to Firebase Analytics. OpenAI may retain submitted content in abuse-monitoring logs for up to 30 days, unless a longer period is legally required, and does not use API content for model training by default. See OpenAI's API data controls and privacy policy for its retention rules and exceptions.

The saved selfie used for Draping Reveal is stored in the app's private storage and excluded from iCloud backup. The reveal images are created on your device and leave it only if you choose to share or otherwise export them. Copies you save to Photos or share with another service are managed separately from the app.

Google Analytics for Firebase

We use Google Analytics for Firebase, provided by Google, to understand feature use, onboarding completion, and purchases and to improve the app. The information includes:

• App launches, sessions, screen interactions, and other automatically measured app activity.
• Onboarding progress and completion, selected style goal, whether makeup shades are a concern, and an event parameter recording AI consent as granted when onboarding completes.
• Analysis requests and completions, reveal creation and sharing events, and the resulting color-season label.
• Trial starts and conversions, purchases, and product information. Automatically measured purchase events can include product identifiers and prices.
• App-instance and device identifiers, app/device information, and general location derived from IP addresses. Firebase components also process limited SDK diagnostic information.

Analytics events can be associated with a persistent installation or device identifier even though you do not have an account. This data should not be understood as completely anonymous. Our custom analytics events do not include your selfie, the full analysis response, payment-card information, or the contents of a shared reveal image.

Read Google's Analytics data collection information and Google's Privacy Policy for more information.

Advertising and tracking

We use Firebase for product analytics, not targeted advertising or advertising measurement across other companies' apps and websites. Google Ads links, Google signals, and advertising personalization are disabled for this use. The app does not display ads, and we do not sell personal information or share it for cross-context behavioral advertising.

AI-sharing consent and analytics choices

You can withdraw AI-sharing consent in Settings → Privacy & AI → Withdraw Consent. This stops future photo analyses until you agree again. It does not erase earlier submissions, your saved palette, or previously collected analytics.

Firebase analytics starts when the app launches and is separate from AI-sharing consent. This version does not include an in-app analytics opt-out. Withdrawing AI-sharing consent or redoing onboarding does not disable Firebase collection. Contact [email protected] with privacy requests. Uninstalling the app stops collection from that installation, but does not itself delete data already sent.

App integrity and security

We use Apple's App Attest service on supported devices to help verify app integrity and protect the analysis service from abuse. Apple processes attestation requests. Our service, hosted on Cloudflare, receives verification data and stores a key identifier, public key, verification counter, enrollment information, and a registration-verification hash. It also temporarily stores verification challenges. These records do not contain your selfie, but their identifier can associate analysis requests with an app installation.

Cloudflare also processes network information such as IP addresses to deliver requests and limit abuse. Verification outcome logs record status categories rather than photos, answer text, or complete analysis requests.

Local storage and deletion

Your saved profile, latest full analysis, and saved selfie are stored on your device. Selected answers and the season label are also transmitted as described above, so local storage does not mean that no related data leaves the device.

Use Settings → Color Profile → Redo Onboarding to clear the saved profile, last analysis, and in-app selfie. Deleting the app removes its local storage. Neither action deletes analytics or security records held remotely, cancels an Apple subscription, or deletes images you exported to Photos or another service.

Purchases and notifications

Apple processes subscriptions and lifetime purchases through your Apple Account. We use the resulting purchase status to provide access and record related events for analytics. See Apple's Privacy Policy. Manage or cancel a subscription in your iPhone's subscription settings.

If you allow notifications, the app may schedule an on-device reminder before a free trial ends. These reminders do not use a remote push-notification service.

Service providers and international processing

• OpenAI processes the photo and selected answers to provide analysis, under the data controls described above.
• Google/Firebase processes analytics and associated technical information, under Google's Privacy Policy and the applicable Analytics terms.
• Cloudflare hosts the analysis relay and integrity records and processes network/security information. See Cloudflare's Privacy Policy.
• Apple provides distribution, purchase processing, and App Attest. See Apple's Privacy Policy.

Providers may process information in the United States and other countries where they operate, which may have different data-protection laws from your country. Their applicable terms and privacy policies describe protections for that processing.

Retention and privacy requests

• Photos and analysis submissions: our relay does not retain them. OpenAI's retention rules are described in the photo section above. Your in-app saved photo remains until replaced, cleared, or removed with the app.
• Analytics: Our Google Analytics retention settings are 2 months for event data and 14 months for user data. Google applies these settings according to its retention and deletion rules. User-identifier retention can reset with new activity if that setting is enabled. Standard aggregated reports are not covered by the same retention window. See Google's retention explanation.
• App integrity records: verification challenges expire after two minutes and are cleaned up during later challenge requests. Enrollment and verification records persist across analyses and are not automatically erased by uninstalling or redoing onboarding.
• Support: correspondence is retained as needed to address the request, resolve related issues, and meet applicable legal obligations.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, or withdraw consent. Email [email protected] to make a request. Because the app has no account system, an email address alone may not identify analytics or integrity records. We may need additional information to locate relevant records and verify a request; we will explain any limitations and available options. Please do not send a selfie or payment-card details for this purpose.

Security

App communications with these services use HTTPS/TLS. Our relay validates request structure, limits requests, and keeps AI-provider credentials off your device. No method of transmission or storage is completely secure.

Children

The app is not directed at children under 13 (or the applicable minimum age in your region). If you believe a child has provided information through the app, contact us so we can investigate and address the request.

Changes to this policy

We update this page and its effective date when our data practices change. This update adds Firebase analytics and App Attest disclosures and clarifies retention, local deletion, and the scope of AI-sharing consent.

Contact

For support and privacy questions, email [email protected].