Your photos.
Your choices.

This policy explains how Sway handles information when you use its iPhone app and website.

Who is responsible

Sway is operated by Alex. For privacy questions or requests, contact [email protected].

Information we use

We create an account identifier when you start as a guest. If you link Sign in with Apple, we store the Apple account identifier and authentication information needed to maintain and revoke that connection. We do not receive your Apple password or payment card details.

We store your selected age range, gender preference, hair texture, and style goals to personalize inspiration. You can update these in You. We do not need your exact birth date.

When you create a look, we process your source photo, any reference photo, your instructions, the generated result, and the job’s status. The optional reusable photo is saved on your iPhone. Your saved looks and their associated images are stored on Sway’s servers or private object storage.

We store subscription transaction identifiers, product, expiry, and verification information from Apple. We also collect limited product events, such as opening a paywall and starting a creation, along with technical information needed to operate and secure the service.

AI processing and service providers

Creating a look sends the photos and instructions for that request to OpenAI for image generation. OpenAI processes those inputs under its applicable API terms and data controls. Apple handles sign-in and App Store purchases. Cloudflare provides domain and network services and may provide private image storage. Service providers may process information outside your country, including in the United States.

We use these providers to deliver the service, not to sell your photos. Sway does not use your photos for advertising or publish your looks automatically. A hairstyle preview is not an identity verification or biometric identification service.

Why we process information

We process account, purchase, and creation information to provide the service you request. We use limited operational information to maintain security, diagnose failures, and improve reliability. Where required, we rely on consent for optional processing, which you can withdraw by stopping that processing or contacting us. We may retain information where necessary to meet legal obligations.

Retention and deletion

Your look history remains until you delete individual looks or your account. Deleting a look removes it from your history and queues associated images that are no longer needed for deletion. Unfinished and abandoned uploads are scheduled for cleanup after one day. Storage deletion is retried if a provider is temporarily unavailable.

You can remove your reusable photo in You. You can also delete your account and all photos from You. This removes the account and queues stored images for deletion. Encrypted disaster-recovery backups expire within 31 days. Deleted data in backups is not used for ordinary access; deletion requests must be reapplied if a backup is restored. Copies processed by a service provider are subject to that provider’s retention rules. To enforce fair use, we retain processing cost and time linked to a hashed subscription identifier for up to 60 days. These records do not contain photos, prompts, or your account identifier. Limited records may also be retained where legally required. Deleting Sway does not cancel an Apple subscription.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection to processing. Contact us using the email above. You may also complain to your local data protection authority. We may need to verify control of your account before fulfilling a request.

Children and other people’s photos

Sway is not intended for children under 13. If you are below the age needed to consent to a service in your country, involve your parent or guardian. Only upload images you have permission to use, including permission from the people shown.

This website

This site does not set advertising cookies or embed third-party analytics. Hosting and network providers process ordinary request information to deliver and protect the site.

Changes

We will update this page when our practices change and provide additional notice when required.