Privacy Policy

Last updated: August 27, 2026

1. Introduction

This Privacy Policy explains how BRANE collects, uses, shares, retains, and protects personal information when you use our AI-powered hairstyle generator, purchase hairstyle credits, receive notifications, or contact us. It also describes the choices available to you. This policy applies to information BRANE controls; our providers may separately process information under their own privacy notices.

2. Information We Collect

Account information

We receive your account identifier, name, email address, and profile image from Clerk, our authentication provider. We also maintain identifiers that connect your BRANE account with our billing and notification providers.

Photos, selections, and generated content

We collect selfies you upload or save as a default photo, third-party hairstyle inspiration images you submit, the hairstyle and color options you select, analysis and generation status and settings, and images produced for you. Inspiration analysis may derive a visible hairstyle description, color components, confidence and visibility notes, and a personalized color suggestion from your source photos. Generations are private by default. If you choose to make a generation public, we also record that choice.

During first-look onboarding, we may temporarily stage your hairstyle inspiration and selfie before you create or sign in to an account. This lets you return from account creation without selecting the photos again. The staged photos are linked to a short-lived browser session and are not analyzed or used to create a hairstyle until the session is attached to your account.

Credits, purchases, and provider events

We process information about your credit balance, credit grants and uses, packs purchased, transaction identifiers, checkout status, currency and formatted price, refunds, disputes, and reversals. BRANE does not receive or store your complete payment-card number. Stripe, including Stripe Link where used, processes payment and checkout information. RevenueCat manages our product offerings and virtual-credit records.

Notifications and communications

We process contact details, notification preferences and read state, marketing-consent and unsubscribe records, delivery and bounce status, campaign assignment, and limited event data needed to notify you about generations, credits, purchases, account activity, support, or an optional promotional offer. We do not send your selfie, generated image, prompt, or private image URL in our notification event payloads.

Usage, device, and diagnostic information

We may collect IP address, browser and device information, pages and features used, timestamps, request and workflow identifiers, performance data, and sanitized error or security events. PostHog product analytics, Logs, and Error Tracking help us understand product usage, diagnose failures, and improve reliability. Operational logs are designed to exclude image content, AI prompts and outputs, payment credentials, authentication tokens, and notification message bodies.

After this notice took effect, BRANE began publishing rounded, anonymous totals for current member accounts and hairstyle generation records. The generation total starts from records retained when public counting begins, then increases when new records are created. It may include drafts, retries, failed or canceled attempts, and completed looks. These totals do not include names, photos, prompts, individual generation details, or dates. We publish them only after at least 100 members and 100 generations are counted.

3. How We Use Information

We use information to:

  • Create and manage accounts and authenticate users
  • Process images and create requested hairstyle generations
  • Analyze submitted inspiration and provide hairstyle and color suggestions
  • Maintain generation history and restore in-progress work
  • Offer, sell, grant, debit, reconcile, refund, and display credits
  • Process purchases and respond to refunds, disputes, fraud, and support requests
  • Send transactional email and in-app notifications
  • Send optional marketing email when your preference permits it and measure whether a campaign leads to a return, claim, or purchase
  • Operate, secure, troubleshoot, analyze, and improve the Service
  • Enforce our Terms and comply with legal obligations

4. AI and Image Processing

BRANE sends the selfie, inspiration image, and hairstyle instructions needed for your request to Google's Gemini service for AI processing. The information is used to analyze visible hairstyle and color details, provide a color suggestion, produce the requested image, detect prohibited or unsafe use, and operate the analysis and generation processes in accordance with our provider arrangements. Do not upload sensitive images or images of another person unless you have their permission, and submit third-party inspiration only when you have appropriate rights to use it. AI processing may occur in countries other than your own.

We also use PostHog AI Observability to monitor and improve these AI workflows. This captures the raw prompts and responses for an AI request, including hairstyle instructions, selfies and inspiration images embedded in the request, analysis results, and generated image outputs, together with metadata such as model, latency, token usage, cost, errors, and trace identifiers. This AI observability capture is separate from the restricted operational logs described above.

5. How We Share Information

We share information only as reasonably necessary for the purposes described above, including with:

  • Clerk for authentication and account identity
  • Convex for application data, file storage, and workflow execution
  • Google Gemini for AI image processing
  • PostHog for product analytics, Logs, Error Tracking, and AI Observability
  • RevenueCat for product offerings, virtual credits, and purchase events
  • Stripe and Stripe Link for checkout, payment processing, merchant-of-record services where applicable, tax, fraud, refunds, and payment support
  • Knock and Resend to coordinate and deliver transactional notifications and optional marketing email
  • Hosting, security, analytics, and professional service providers that help operate and protect the Service

We may also disclose information when required by law, to protect rights and safety, to investigate abuse or fraud, or as part of a merger, financing, acquisition, reorganization, or sale of assets. We do not sell your selfies or generated images.

6. Public Content and Marketing

Generations are private by default. BRANE does not use a private generation for marketing. If you affirmatively make a generation public, it may appear on BRANE's website, social media, advertising, or other promotional materials as described in our Terms.

You may later change a public generation to private. We will stop new uses after processing the change, but copies already published, shared, cached, archived, or included in physical materials may remain. Contact us if you need help with a public-content request.

7. Retention and Deletion

  • First-look photos staged before account creation expire after one hour if they are not attached to an account. Expired staged photos are deleted from active systems, although restricted backup copies may remain until routine backup rotation. A raw upload that is interrupted before it can be attached to a guest draft is removed by routine orphan cleanup within 24 hours.
  • Incomplete drafts expire after 24 hours. Selfies owned only by those drafts are then deleted from active systems, although restricted backup copies may remain until routine backup rotation.
  • Completed inspiration analyses and their source images remain available for reuse until you delete the analysis or your account. Unfinished and failed analysis drafts expire after 24 hours; media still referenced by a saved generation is retained with that generation.
  • Completed generations and their associated media remain until you delete the generation or your account.
  • Failed attempts remain in History with a safe failure status, but generation-owned photos and partial output media are deleted from active systems after 24 hours. A shared default selfie is not deleted by this cleanup.
  • A reusable default selfie is shared account storage. Deleting one generation does not delete that photo; you may delete it separately or by deleting your account.
  • Low-volume operational event records are generally retained for up to 90 days unless a longer period is needed for security, fraud, dispute, or legal purposes.
  • The published member total reflects current accounts and may decrease after account deletion. The published generation total is cumulative from its launch baseline and may remain after an account or generation is deleted. Neither total can be used to recover an identity, photo, or individual generation.
  • PostHog retains the large input and output properties attached to AI Observability events—including captured prompts, selfies, inspiration images, analysis results, and generated outputs—for up to 30 days. PostHog then removes those large properties; related event metadata such as model, provider, token counts, cost, latency, and trace identifiers may remain under the applicable analytics retention period.

When you delete your account, we delete BRANE-controlled account data, analyses, generations, drafts, and owned media through our deletion process and request deletion from connected providers where applicable. Deletion may take a reasonable period to propagate through active jobs, backups, and provider systems. BRANE and its providers may retain payment, tax, fraud, dispute, security, and compliance records when legally permitted or required. Those retained records remain subject to applicable safeguards and are not kept for ordinary product use.

8. Legal Bases and Your Choices

Where applicable law requires a legal basis, we process information to perform our contract with you, comply with law, protect legitimate interests such as security and service improvement, and obtain consent where required. Depending on where you live, you may have rights to:

  • Access or obtain a copy of personal information
  • Correct inaccurate information
  • Delete information or your account
  • Object to or restrict certain processing
  • Receive portable information where available
  • Withdraw consent without affecting earlier lawful processing
  • Appeal a denied request or complain to a local data-protection authority

These rights vary by jurisdiction and may be subject to exceptions. We may need to verify your identity before completing a request. Service-related messages about active generations, purchases, credit adjustments, security, or account changes are transactional; optional marketing messages will provide an unsubscribe method.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including authenticated access controls, private-by-default generations, and restricted operational logging. No system can guarantee absolute security. Please use a strong account credential and contact us promptly if you believe your account or information has been compromised.

10. International Processing

BRANE and its providers may process information in countries other than where you live. Where required, we use contractual or other recognized safeguards for cross-border transfers. Privacy protections and government-access rules may differ between countries.

11. Cookies and Similar Technologies

We use cookies and similar technologies that are necessary for authentication, security, preferences, and operation of the Service. We may also use measurement tools, including PostHog product analytics and Vercel Analytics, to understand Service performance and usage. Browser or device controls may let you restrict cookies, but blocking necessary storage may prevent parts of the Service from working.

12. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Additional age limits may apply where you live. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy as the Service or legal requirements change. We will post the updated policy, revise the "Last updated" date, and provide additional notice where required by law.

14. Contact Us

For privacy questions or requests, contact privacy@braneapp.com. For general support, contact support@braneapp.com.