Privacy policy

This policy explains what Undertone (“we”) collects, why, and what we do with it. Undertone is operated by [PLACEHOLDER: business legal name], [PLACEHOLDER: business address]. Contact: [PLACEHOLDER: privacy contact email].

Your photo: exactly what happens

Your selfie is used for one purpose: reading your coloring for color analysis. Step by step:

• On your phone, before upload. The photo is resized (to at most 1568 pixels on the long edge) and re-saved as a new JPEG image. This removes all embedded metadata, including GPS location, camera details and timestamps. Until you finish the quiz, the photo stays only in your browser's memory; it is not saved to your device's storage by our site.
• On our server. When you submit, the photo is sent over an encrypted connection and held in memory only for the duration of that request. It is never written to our database, to disk, or to our logs.
• Analysis. We send the photo to our AI provider, Anthropic, to judge color qualities: skin undertone, overall depth, contrast between hair, skin and eyes, and how clear or muted your coloring is. We do not use face recognition, we do not create face templates or other biometric identifiers, and we never try to identify who you are.
• Right after. As soon as the analysis returns, the photo is discarded. What we keep is the text result: the four color readings, the season, a confidence score, a few short color-only observations, and notes about photo quality (for example “too dark”).
• If the photo check fails. If you choose “Continue anyway”, we don't keep your photo for that either. Your browser holds a signed copy of the text analysis (not the photo) for up to 30 minutes so you can continue without uploading again.
• “Should I buy this?” photos of products are handled the same way: read for garment type and color, then discarded. We store only the color code, garment type and verdict.

Anthropic processes the image under its commercial API terms, which do not allow it to train models on your data. Anthropic may keep API inputs for a limited period for safety and abuse monitoring: [PLACEHOLDER: confirm Anthropic's current API data-retention terms and describe them here].

What else we collect

• Your quiz answers (natural hair, eye and beard color, sun reaction, color preferences, what you dress for, style and budget).
• Your email address, your choice about style emails, and your confirmation that you're 18 or older.
• Your results, outfit ideas, wardrobe plan, buy-check history and coach conversations if you subscribe.
• Subscription status from our payment processor. We never see or store your full card number.
• Basic analytics: which pages and steps are used, with a random identifier, the ad campaign that brought you (UTM tags, Meta click id) and a referral code if a friend shared their card.
• Your country (from your connection) to decide which cookie rules apply, and hashed IP addresses for rate limiting.

Why we use it

• To give you your result and run the features you pay for (contract).
• To send your result, sign-in links and account emails (contract).
• To send style tips or weekly outfit emails if you opted in or are a member (consent; you can unsubscribe in any email).
• To prevent abuse and keep costs under control, for example rate limits (legitimate interests).
• To measure our advertising, where allowed (consent in the UK and EU; legitimate interests elsewhere, which you can decline).

Cookies and tracking

We use first-party cookies for your session, a random visitor id, the campaign that brought you, and your cookie choice. With your permission (always required in the UK and EU) we load the Meta Pixel to measure ads, and we send sign-up events to Meta's Conversions API with your email address in hashed form. If you decline, neither happens.

Who we share it with

• Anthropic (AI analysis of photos and text)
• Supabase (database and sign-in), Vercel (hosting)
• Stripe (payments and subscriptions)
• Resend (sending email)
• Meta (ad measurement, only as described above)

We don't sell your personal information. [PLACEHOLDER: add any other processors and their locations.]

How long we keep it

Photos: not kept (see above). Account data: while you have an account. If you never subscribe, we keep your email and result for [PLACEHOLDER: retention period] unless you ask us to delete them sooner. Payment records are kept by Stripe as the law requires.

Your rights

You can access, correct, export or delete your data. Members can delete everything from Settings → Delete account. Anyone can email [PLACEHOLDER: privacy contact email]. Depending on where you live (for example the EU, UK or California) you have further rights, including to object and to complain to a regulator.

Age

Undertone is for adults 18 and over. We don't knowingly collect data from anyone younger.

International transfers

[PLACEHOLDER: describe where data is stored and the safeguards used for transfers outside the UK/EU.]

Changes

We'll post changes here and, if they're significant, email members.