Privacy, in plain language.
Your selfie is sensitive. My Makeup Plan uses it only to create the preview you request. It is not sold, used for advertising, added to a training set, or sent to analytics.
What stays on your iPhone
Baseline selfies, saved AI previews, makeup recipes, finishing-touch choices, event choices, project names, and revision history are stored in protected app storage on your device. They remain until you replace or delete them, delete all app data from Settings, or remove the app.
What is sent for an AI preview
Only after you consent, the selected selfie and structured makeup and finishing-touch choices are sent over an encrypted connection to the My Makeup Plan service and its image-processing provider. These inputs are used to return the preview you requested. The service does not retain the uploaded selfie or generated result after the request finishes.
The app uses Apple App Attest to confirm that paid image requests come from a genuine app installation. The service stores an app-attestation public key, a one-way customer identifier hash, and replay-prevention counters. It does not receive your Apple ID.
Purchases
Apple processes subscription payments. RevenueCat receives purchase and entitlement information so the app can unlock Pro and restore purchases. We do not receive your full payment-card details. RevenueCat's handling is governed by its own privacy policy.
Anonymous analytics and crash reports
Analytics and crash reporting are on by default. My Makeup Plan sends a short allowlist of product events and automatic crash reports to PostHog so we can understand whether the core flow works and diagnose failures.
PostHog receives an anonymous installation identifier, the event name, app version, iPhone model, iOS version, and crash or diagnostic details. It does not receive selfies, generated previews, face-derived data, makeup, finishing-touch, or shade choices, outfit details, event text, project names, or payment-card details. Screen capture, session replay, automatic screen and element tracking, person profiles, identity calls, and IP enrichment are disabled. The PostHog project is configured not to retain client IP addresses.
We retain anonymous telemetry while it remains useful for product analysis and debugging, then delete or aggregate it. You can stop future analytics and crash reporting at any time under Privacy & Support in the app. Because historical telemetry is anonymous and not tied to an account, we generally cannot associate it with you. PostHog processes this data in its United States cloud under its privacy policy.
Website analytics
If you select Allow analytics, this product website loads Tepesoft's self-hosted Umami analytics and Microsoft Clarity with strict text masking. They measure public-page visits, referral and campaign tags, device and browser details, approximate network location, clicks, and scrolling. They do not receive selfies, previews, makeup choices, face-derived data, or anything from the iPhone app. Select Analytics choices at any time to allow or withdraw access.
What we do not do
- No facial recognition, identity matching, attractiveness score, or age estimate.
- No health, skin-condition, ethnicity, or emotion diagnosis.
- No sale of selfies, makeup or finishing-touch choices, or event details.
- No advertising profile and no photo content in analytics.
- No model training with your selfie or generated preview.
Your controls
You can turn off future analytics and crash reporting, replace the baseline selfie, revoke future AI-preview consent, and permanently delete all saved looks and selfies from the in-app Privacy & Support screen. Deleting the app also removes its local data. Purchase records remain with Apple as required for billing and restoration.
Photo access
The system photo picker lets you select an image without granting broad photo-library access. Camera access is requested only if you choose to take a new baseline selfie.
Children, regions, and changes
My Makeup Plan is not directed to children under 13. The initial commercial release is limited to the United States App Store. Material privacy changes will be dated here and reflected in the app where consent needs to be renewed.
Contact
Privacy question or deletion issue? Email info@tepesoft.com. Include the app name and a short description. Do not attach a selfie unless it is necessary for support.