This policy explains what AwesomeHeap collects, how we use it, and your choices. We try to collect as little as possible and never sell your data.
To create your looks we collect and store: (a) the face and body photos you provide (uploaded directly or pulled from an Instagram account you connect), and (b) a digital scan of your face geometry (a numeric “face template”) derived from those photos. We use them only to generate your personalized looks, verify the generated images actually look like you, and — if you connect Instagram — identify which photos show you. Face templates are computed in memory and are not written to permanent storage.
Consent. We ask for your explicit consent before collecting any of this, and you can withdraw it at any time by deleting your face data or your account in Settings.
Third parties. Your photos are processed by AI image providers (currently BytePlus Seedream and Google Gemini) solely to render and quality-check your looks, and are stored in private cloud storage (Cloudflare R2). We never sell your photos or face data, never use them for advertising, and never use them to train our own models.
Retention. Your photos and face data are kept while your account is active. We delete them: when you delete a photo or your account in Settings; after 12 months of inactivity (with an email warning first); and in any case no later than 3 years after your last interaction with the service.
Your photos are stored in private cloud storage and served to you over short-lived, signed links. Data is encrypted in transit. We restrict internal access to what’s needed to run the service.
These providers process data on our behalf or under their own privacy policies. Some are located outside your country (e.g. in the US, the EU and Singapore), so your data may be processed internationally with appropriate safeguards.
We use your browser’s local storage to keep you signed in and remember preferences (like your theme). We use Google Analytics and PostHog to understand how the product is used (pages viewed, features clicked); these tools use cookies or similar identifiers and receive your user id — PostHog also receives your email for support debugging. We do not use advertising trackers, and we don’t sell or share your data with advertisers.
You can delete individual photos anytime in your profile, and delete your entire account and all associated data (photos, face data, generated looks, comments) yourself with the “Delete account & all my data” button in Settings — no need to contact us. Face data follows the retention schedule in section 2. Payment records are kept as required by tax law. Otherwise we keep data only as long as needed to provide the service.
You can access, correct or delete your personal data — deletion is self-service in Settings; for anything else, email us. If you’re in the EEA/UK, you also have GDPR rights (access, portability, erasure, objection) and can complain to your data-protection authority; our legal basis for face data is your explicit consent. If you’re a California resident: we do not sell your personal information or share it for cross-context behavioral advertising.
AwesomeHeap is for users 18 and older. We don’t knowingly collect data from children.
We may update this policy; we’ll change the date above and, for material changes, notify you.
Privacy questions? Email hello@awesomeheap.com.