Privacy policy

Color is built on a single promise: your selfie never leaves your iPhone. There is no cloud upload of your face, no remote analysis, no marketing of your data.

1. What we collect

Nothing. Color does not collect, transmit, or sell any personal information. There is no analytics SDK, no crash-reporting SDK, no advertising SDK, no behavioural tracker. The app contains no third-party network code.

2. On-device processing — Vision, ARKit, and the TrueDepth camera

When you take a selfie, the image is held in memory long enough for Apple's Vision framework to detect facial landmarks and for Color to sample skin, hair, and eye colour patches. The image is then discarded unless you explicitly save the resulting palette card to your Photos library.

The Pro AR try-on feature uses Apple's ARKit ARFaceTrackingConfiguration, which on supported iPhones is backed by the TrueDepth camera. ARKit returns a real-time face mesh (lip and cheek vertex regions) which Color re-tints with shades from your best palette so you can preview lipstick and blush colours in the live camera feed. The face mesh and any TrueDepth depth data:

• are processed entirely on-device by Apple's ARKit / Vision frameworks;
• are never transmitted off the device — there is no Color server, no cloud endpoint, and no third party that receives this data;
• are not persisted — the mesh is only used to render the live preview and is discarded the moment you leave the AR Try-On screen;
• are not used for identification, authentication, advertising, or profiling of any kind. Color does not perform face recognition.

No third-party AI service is involved. Color does not call OpenAI, Anthropic, Google, Microsoft, Amazon, Stability AI, Replicate, Hugging Face, or any other remote machine-learning service. All colour analysis is a deterministic rule-based classifier (sRGB→LAB transform plus 12-season decision thresholds) running on the device's CPU. There is no LLM, no cloud inference, no generative AI.

3. iCloud sync (Pro+ only)

Pro+ subscribers can opt in to CloudKit sync. CloudKit stores your saved palettes and closet items inside your own iCloud account using Apple's end-to-end encryption. We have no access to that database, no server you connect to, and no way to read your sync data.

4. Purchases

Subscriptions are processed by Apple's App Store. We never see your payment information. We receive only the transaction receipts Apple sends to your device.

5. Permissions

• Camera — required to capture a selfie.
• Photo library (read) — optional, used only if you import a wardrobe photo for the Pro+ closet analyser.
• Photo library (add) — optional, used only when you tap Save to keep a palette card.

6. Children

Color is rated 4+ and does not collect personal data from anyone, including users under 13.

7. Changes

If we ever change the privacy posture (we won't, but Apple requires this clause), an updated policy will replace this page and ship in the next app update.

8. Contact

Questions: jasperabundant@gmail.com.