ToneLala.

Privacy Policy

Last updated: July 5, 2026

ToneLala processes the photo(s) you upload of yourself to generate a personalized style report. We treat these as sensitive personal data and handle them with care. This policy explains what we collect, why, and your rights — including under the EU/UK GDPR.

What we collect

  • Your account email and name.
  • Your style-quiz answers.
  • The photo(s) you upload of yourself (one or more selfies).
  • Payment status (processed by Stripe; we never see your card).

Why we process it

We use your photos and quiz answers solely to produce your style report. Our legal basis is the performance of our contract with you and your explicit consent, which you give before uploading.

Data retention & deletion

Because your report is a product you purchased, we keep it so you can access it anytime from your account or your private report link. Your uploaded photos are stored securely and used only to create and support your report — we never sell or share them. You can request deletion of your photos, data, and reports at any time by contacting us, and we’ll remove them promptly.

What we never do

  • We never sell your data, and we never share your photos, report, or quiz answers with advertisers.
  • We never use your photos for advertising or model training.
  • We make no medical, dermatological, or identity claims.

Sharing

We use trusted processors — Supabase (storage & database), OpenAI (analysis), Stripe (payments), and an email provider — strictly to deliver the service. Each acts under contract.

Advertising & measurement

With your consent, we share a limited set of data — a hashed (irreversible) version of your email address and ad click/identifier data — with advertising partners, including Meta and Pinterest, so we can measure and improve our ad campaigns. We never share your photos, your report, or your quiz answers for advertising. You can decline or withdraw this at any time via our cookie banner, and it never affects your ability to use ToneLala.

Your rights

You may access, correct, export, or delete your data, and withdraw consent or unsubscribe from marketing at any time. To exercise any right, contact our support team.