Kayla Privacy Policy

Kayla is made and operated by Anaye Milligan, in Houston, Texas, United States.

You can reach us at Anaye@LittleBrownFaces.com about anything in this policy, including a request to delete what we hold.

Photos you choose. A photo you take in the app or pick from your library. It stays in Kayla’s own storage on your phone. Kayla asks the system for camera or photo access only at the moment you use those features, and you can refuse or revoke it in iOS Settings.

The Looks you make. The generated images are saved to My Looks on your phone, alongside a copy of the photo they were made from so a Look stays whole if you later delete the original.

An anonymous account. The first time you open Kayla, the app quietly creates an account that is nothing but a random identifier. It has no email address, no password and no name attached, and it is what lets our server keep track of how many Looks you have. We cannot use it to work out who you are.

What you bought. If you buy a pass, a pack or a subscription, our server records what you bought, how many Looks it carried, when it expires and how many are left. We never see or store your card, your Apple ID or any payment details. Apple handles the payment, and RevenueCat, the service we use to manage purchases, tells our server only that it succeeded.

How you use the app. Kayla sends a record of what happens in the app to PostHog, the analytics service we use. For example: that Kayla was opened, a style was viewed or favorited, a Look was started, finished or failed and how long it took, a Look was shared or downloaded, a paywall was shown, which offer was picked and whether the purchase went through. Each record carries your anonymous account id, the catalog code of any style involved (such as CCA-03), how many Looks you have left and what kind of purchase you hold, and basic facts about the app and the phone: the app version, the iPhone model, the iOS version, the screen size and whether Reduce Motion is on. It never includes your photos, your Looks, anything about your face, or anything sent to or returned by the image provider. We use it to understand which parts of Kayla work, to fix the parts that do not, and to try changes before giving them to everyone. If you describe a problem in your own words, that sentence is sent with your report.

If you share a referral code. Kayla gives you a code you can send to friends. We record which account the code belongs to and which accounts entered it, so we can add the credits. We never see who you sent it to, and Kayla never reads your contacts. Your friend is never told who sent the code, and we could not tell her if we wanted to, because we do not have your name. When a friend enters your code, the Account screen counts her among your friends this month, and when she makes her first Look we tell you so by notification, if you allow Kayla’s notifications. Once you have allowed them and share an invite, we send our server a notification token, so we know where to send it, and your time zone. The same token also carries the reminder before credits you bought expire. We never tell you which friend it was, and her Looks and photos are never shared with you.

Keeping referral codes fair. When you enter a friend’s code, and when Kayla checks your balance, the app sends our server an identifier Apple gives Kayla for your iPhone (it stays the same until you delete Kayla). Our server keeps only a scrambled (hashed) form of it, and uses it to stop one phone redeeming codes over and over. A code entry also carries a proof from Apple’s App Attest service that it comes from a genuine copy of Kayla on a real iPhone. To check those proofs, our server keeps the public half of a key your iPhone made for Kayla, against your anonymous account. That key and its proofs say nothing about you.

How much you use it. Our server counts how many images you generate each day. This exists to stop a fault or a misuse running up a bill, and it is a count, not a record of what you made.

A diagnostics log, on your phone. Kayla keeps a local log of generation attempts, including timings, whether an attempt succeeded and automated image-quality measurements. It stays on the device and is only ever shared if you deliberately export it.

What you browse and heart, if you use style alerts. Kayla notices which styles you view, favorite and try, so it can work out which categories you like. That working out happens on your phone. If you turn on alerts, we send our server three things: the categories you are interested in, a notification token so we know where to send an alert, and your time zone, so a reminder can name the right date. The record of which individual styles you looked at never leaves your phone. If you never turn alerts on, the categories are never sent, and the token and time zone are sent only if you have allowed notifications and share an invite (above).

• Your name, address, date of birth or phone number
• Your email address, unless you choose to write to us
• Your location. Kayla does not ask for it, and we have told our analytics provider not to work out where you are and not to keep your IP address.
• Your contacts, calendar, microphone or health data
• Payment card details of any kind
• Any advertising identifier. There is no advertising SDK in this app, and nothing tracks you across other apps or websites. The one analytics service Kayla uses is described above, and it is not used for advertising.

We do not sell your information. There is nothing here to sell and no arrangement to sell it under.

This is the part worth reading closely.

1. Kayla may crop your photo on your phone before sending it, so that less of you leaves the device than you gave it.
2. The photo is sent over an encrypted connection to our own server, which runs on Supabase in the United States.
3. Our server passes the photo, and the reference image for the hairstyle you picked, to OpenAI, which generates the new image and returns it.
4. Our server hands the image back to your phone and does not store your photo or the result. We keep neither. OpenAI may hold the image briefly for abuse monitoring, up to thirty days under their API policy, after which it is deleted. It is never used to train their models.

Under OpenAI’s API data policy, content sent through their API is not used to train their models and is held only briefly for abuse monitoring before deletion. That policy is theirs, not ours, and you can read the current version at https://openai.com/policies/.

If you would rather no photograph of yours was processed this way, do not make a Look. Browsing the style catalog sends nothing at all.

Some app stores call this “face data”, so to be exact about ours: the only face data Kayla produces is a rectangle around the face in your photo, measured on your own phone, plus how big that rectangle is and how many faces were found. That is all. It never leaves your device.

Kayla looks for a face in your photo on your own device, to decide whether the photo is framed closely enough and whether to offer you a tighter crop. It also measures colour in the image so it can tell when a generated result has changed your skin tone, which is a fault we want to catch.

Both of those run on your phone. Kayla does not build a faceprint or face template, does not use your face to identify you, does not match you against any database, and does not compare your face with any other person’s. Nothing about the shape of your face is stored or transmitted as a biometric identifier.

Five companies, and only these five:

• Apple, which sells the passes and subscriptions and handles all payment. Apple’s own privacy policy governs that.
• Supabase, which hosts our server and database in the United States.
• OpenAI, which generates the images.
• RevenueCat, which manages purchases and subscriptions for us. It receives your anonymous account id and what you bought, and never your card or your Apple ID.
• PostHog, our analytics provider, which stores the record of how the app is used, described above, in the United States.

No one else receives anything. We do not share your information with advertisers, data brokers or partners, because we have none.

We may disclose information if the law genuinely requires it, and if that ever happens we will tell you unless we are legally forbidden from doing so.

Delete everything. Account has a “Delete everything” control. It removes your photos, your Looks, your diagnostics log and your browsing activity from the phone right away, asks PostHog to delete its record of how you used the app, and it cannot be undone. Your anonymous account and any Looks you have left are kept, so if you carry on using Kayla afterwards, a new usage record starts from that moment.

Delete what is on our server. Email Anaye@LittleBrownFaces.com from the device you use, and include the account id shown in the app, and we will delete the account record and everything attached to it. If you have unused Looks, deleting the account deletes those too.

Turn off alerts. In Account, or in iOS Settings under Notifications.

Withdraw photo or camera access. In iOS Settings, under Kayla. Kayla will keep working; it just will not be able to make new Looks.

Depending on where you live, you may also have the right to ask what we hold about you, to correct it, to receive a copy of it, or to object to how we use it. Write to us and we will do it. We will not charge you and we will not treat you differently for asking.

Kayla is not intended for children under 13, and we do not knowingly collect anything from a child under 13. If you believe a child has used Kayla and given us something, write to us and we will delete it.

Everything Kayla sends travels over an encrypted connection. The database tables that hold accounts and purchases deny access outright to the app itself; only our server can read them, using a key that never leaves the server. The key belonging to our image provider is held on the server and has never been distributed inside the app.

No system is perfect, and we will not claim otherwise. If something goes wrong that affects you, we will tell you.

Kayla’s server, its image provider and its analytics provider are in the United States, so using Kayla means your photo and the record of how you use the app are processed there. Privacy law in the United States may differ from the law where you live.

If we change what Kayla does with your information, we will update this policy and change the date at the top. If the change is significant, we will tell you in the app before it takes effect rather than quietly editing this page.

Anaye@LittleBrownFaces.com