Your photos.
Your choices.

This policy explains how Sway handles information when you use its iPhone app and website.

Who is responsible

Sway is operated by Alex. For privacy questions or requests, contact mail@fumaz.dev.

Information we use

We create an account identifier when you start as a guest. If you link Sign in with Apple, we store the Apple account identifier and authentication information needed to maintain and revoke that connection. We do not receive your Apple password or payment card details.

We store your selected age range, gender preference, hair texture, and style goals to personalize inspiration. You can update these in You. We do not need your exact birth date.

When you create a look, we process your source photo, any reference photo, your instructions, the generated result, and the job’s status. The optional reusable photo is saved on your iPhone. Your saved looks and their associated images are stored on Sway’s servers or private object storage.

We store subscription transaction identifiers, product, expiry, and verification information from Apple. We also collect limited product events, such as opening a paywall and starting a creation, along with technical information needed to operate and secure the service.

AI processing and service providers

Before your first look, the app explains what is sent and who receives it, and asks for your permission. Nothing is sent to OpenAI unless you allow it, and you can withdraw permission at any time in You. With your permission, creating a look sends your source photo, any reference photo, and your chosen style, color, and written instructions for that request to OpenAI for image generation. OpenAI processes those inputs as our service provider under its API terms; it does not use them to train its models and may retain them for up to 30 days to monitor for abuse. We share personal data only with service providers that are bound to protect it with the same or equal protection as described in this policy. Apple handles sign-in and App Store purchases. Railway hosts the backend and database. Cloudflare provides domain services, private image storage, and encrypted backup storage. Service providers may process information outside your country, including in the United States.

We use these providers to deliver the service, not to sell your photos. Sway does not use your photos for advertising or publish your looks automatically. A hairstyle preview is not an identity verification or biometric identification service.

Why we process information

We process account, purchase, and creation information to provide the service you request. We use limited operational information to maintain security, diagnose failures, and improve reliability. Where required, we rely on consent for optional processing, which you can withdraw by stopping that processing or contacting us. We may retain information where necessary to meet legal obligations.

Retention and deletion

Your look history remains until you delete individual looks or your account. Deleting a look removes it from your history and queues associated images that are no longer needed for deletion. Unfinished and abandoned uploads are scheduled for cleanup after one day. Storage deletion is retried if a provider is temporarily unavailable.

You can remove your reusable photo in You. You can also delete your account and all photos from You. This removes the account and queues stored images for deletion. Encrypted disaster-recovery backups expire within 31 days. Deleted data in backups is not used for ordinary access; deletion requests must be reapplied if a backup is restored. Copies processed by a service provider are subject to that provider’s retention rules. To enforce fair use, we retain processing cost and time linked to a hashed subscription identifier for up to 60 days. We also retain the current allowance balance and its update time under that hashed subscription identifier across account deletion and purchase restoration, so deleting or reinstalling does not reset fair use. These records do not contain photos, prompts, or your account identifier. Limited records may also be retained where legally required. Deleting Sway does not cancel an Apple subscription.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection to processing. Contact us using the email above. You may also complain to your local data protection authority. We may need to verify control of your account before fulfilling a request.

Children and other people’s photos

Sway is not intended for children under 13. If you are below the age needed to consent to a service in your country, involve your parent or guardian. Only upload images you have permission to use, including permission from the people shown.

This website

This site does not set advertising cookies or embed third-party analytics. Hosting and network providers process ordinary request information to deliver and protect the site.

Changes

We will update this page when our practices change and provide additional notice when required.