Privacy Policy

ToneLala processes photos of your face and body to generate a personalized style report. We treat these as sensitive personal data and handle them with care. This policy explains what we collect, why, and your rights — including under the EU/UK GDPR.

What we collect

• Your account email and name.
• Your style-quiz answers.
• The two photos you upload (a face photo and a full-body photo).
• Payment status (processed by Stripe; we never see your card).

Why we process it

We use your photos and quiz answers solely to produce your style report. Our legal basis is the performance of our contract with you and your explicit consent, which you give before uploading.

Photo retention & deletion

We minimize retention. Original uploads are deleted shortly after your report is generated, within a short, stated window. You can request deletion of your data and reports at any time by contacting us.

What we never do

• We never sell your photos or personal data.
• We never use your photos for advertising or model training.
• We make no medical, dermatological, or identity claims.

Sharing

We use trusted processors — Supabase (storage & database), OpenAI (analysis), Stripe (payments), and an email provider — strictly to deliver the service. Each acts under contract.

Your rights

You may access, correct, export, or delete your data, and withdraw consent or unsubscribe from marketing at any time. To exercise any right, contact our support team.