Trust & Privacy
Your photos are yours. Full stop.
Privacy isn't a checkbox for us — it's the whole point. If you ever do order something, you're handing intimate photos of yourself to a company on the internet, and you deserve to know exactly what happens to them first.
What we promise about your photos
Four things that hold for every image you ever send us, whether you order retouching or Virtual You.
Encrypted, always
In transit and at rest, from the second a file leaves your phone. Anything that goes to rented compute is encrypted with keys we hold and decrypted only into memory, never written to disk there.
Never sold, never shared
Not with advertisers, not with data brokers, not with anyone. We don't do behavioural advertising and we don't build advertising profiles. There is no version of this business where that becomes a good idea.
Never fed into a shared model
Your photos never train a public, general-purpose, or cross-customer model. The look library on this site is generated from fictional characters we invented — never from customers.
A published list of who's involved
Only named companies touch your data, each under a contract to work on our instructions and nothing else. The full list lives in the Privacy Policy, and you can read it before you order anything.
The one carve-out, stated up front
Virtual You — the single place we train AI on you
New images that genuinely look like you can't be conjured from nothing — something has to learn your face and your body. So if you order Virtual You, we train a small, private model from your photos and nothing else. We could have written “we never train AI on customer data” and quietly done this anyway. We'd rather tell you the exact shape of it.
That model:
- is trained only on photos you submitted, and never combined with anyone else's;
- is used only to produce images for you, on your order;
- is stored encrypted and isolated, keyed to your account, and never uploaded to a model hub or handed to a vendor;
- is treated as sensitive data in its own right, because it's derived from your likeness;
- is deleted along with your photos — always.
You own your likeness. We don't claim it, we don't keep a model of you as a company asset, and the model itself stays a working tool on our side that is never handed over. And if you order retouching only, no model of you is ever trained — retouching is editing, not learning.
One option worth knowing: if you think you'll want more looks later, you can choose to keep your model on file instead of deleting it with your photos. That's free and optional, it stays encrypted and isolated, you can still delete your source photos, and a kept model is removed automatically after 90 days without a login or whenever you close your account.
How deletion actually works
Deletion removes your source photos, your finished images, any private model built from them, and any stored descriptions or metadata derived from you.
That's deletion of your own account's data. If an image of you is on this site and you never agreed to it — whether or not you have an account with us — tell us on the image-removal page and we take it down fast and confirm it in writing. The same page points to the free tools for intimate images posted elsewhere, and carries our copyright notice path.
Gone in 30 days by default
Thirty days after your finished images are delivered, your source photos, your finished images, and any private model built from them are deleted automatically — so your privacy never depends on you remembering. You can extend that while you decide, shorten it, or ask us to purge everything.
Deletion you can check
When you ask us to delete your data, most of it leaves the live service straight away. We finish the job and confirm it to you in writing within 48 hours. We'd rather send you a real confirmation than an optimistic one — and nobody will try to talk you out of it.
Backups, honestly
Encrypted backups roll over on a schedule, so a deleted file can sit inside an encrypted backup for up to 35 days after it leaves the live service. Those backups are encrypted, are never used to restore individual deleted content, and anything restored from one is re-purged.
The companies that help us run this
We don't run every piece of this ourselves — nobody does. So rather than leave “third parties” vague, we publish the actual list: every company that processes data on our behalf, what they do, and whether your photos are involved. Each one is bound by a written contract to act only on our instructions, to keep your data confidential, and never to use it for their own purposes — including never using it to train their own models.
Where your images are involved we add our own protection on top: encryption with keys we hold before anything leaves our storage, decryption into memory only, and an audit record of every job. We won't claim more than that — in particular, we won't pretend a vendor's standard terms were written with intimate photography specifically in mind. That would be a nice sentence and not a true one.
When we add or replace a company that handles your images, we update the list and email account holders at least 30 days before the change takes effect — not after — so that if you'd rather not have your images handled by the new one, you can delete your data first.
See the full subprocessor list in the Privacy Policy →Coming with free accounts
The free planner, and a photo you never have to send
The learning side of the site — the guides, the Look Library, the image-pick quiz — is free, and you can browse and take the quiz without an account. Saving what you love is what a free account is for. That account holds your shoot planning: what you favourite, and a profile of your space, your gear, and your comfort boundaries, so recommendations fit you instead of a default.
That profile is genuinely personal, and we treat it that way. It is never shown to other customers and never sold or shared — and inside our company, access is limited to the people who need it to help you and is logged. You can edit or clear it whenever you like.
A photo is never required to use any of it. If a feature ever lets you add one — to ask about a test shot, or to keep a private gallery of your own — it stays entirely optional, we ask for your consent for that specific purpose, and every photo you add carries the same encryption and the same automatic delete-by date as everything else here.
And because our analytics are self-hosted and cookie-free, there is no non-essential cookie on this site — which is why you'll never see a cookie-consent banner to click through. There's nothing following you around to consent to.
This is the friendly version
Everything here is written to be read and understood — but the authoritative, complete version — with every retention window, subprocessor, and one of your rights spelled out — lives in the Privacy Policy. Wherever the friendly wording here and the policy ever seem to differ, the policy governs.