Loify AI Privacy Policy

1. Scope

This Privacy Policy explains how Loify AI ("Loify", "we", "our", or "us") collects, uses, discloses, and protects personal data when you use the Loify AI mobile application and related services (collectively, the "Service").

This page is the official privacy policy URL for the Loify AI iOS app.

Loify AI is an eyewear try-on and fit analysis app. It is not a medical device and does not provide medical diagnosis, treatment, or prescriptions.

2. Data We Collect

• Account and profile data, such as guest identifiers, supported sign-in identifiers, display name, and avatar-related profile fields.
• Face and image data, such as photos you upload or capture, front and side face photos, face scan assets, generated try-on images, and app-generated visual results.
• TrueDepth and ARKit face scan data, such as face mesh geometry, mesh topology, camera calibration/intrinsics, image resolution, face pose, face distance, eye position, interpupillary distance, lighting and quality measurements, and scan-derived fit metrics such as face width and face shape.
• Analysis and recommendation data, such as fit reports, eyewear fit measurements, recommendation traits, age/gender/quality analysis where used by the feature, and related result metadata.
• Community and interaction data, such as published posts, polls, comments, votes, likes, and moderation metadata where those features are available.
• Device, usage, and diagnostic data, such as app events, crash logs, network diagnostics, and basic device/app environment details needed for security and performance.

3. Sensitive and Face-Related Data Notice

Face-related images and scan-derived data may be considered sensitive in some jurisdictions. We process this data only to provide the try-on, analysis, scan quality guidance, fit measurement, and related app features you request.

When you start a face scan or try-on flow, Loify AI may use Apple TrueDepth camera and ARKit face tracking to process front-facing camera frames and face anchors. This processing is used to determine whether a face is present, guide scan positioning, estimate face pose and distance, calculate interpupillary distance, build a face mesh, evaluate scan quality, and generate fit-aware eyewear previews and recommendations.

We do not use TrueDepth, ARKit, or other face data for advertising, marketing, user tracking, data mining unrelated to the requested feature, law-enforcement profiling, or identifying users across unrelated services.

We do not sell face data. We do not use face data to build a general biometric identity database.

4. TrueDepth and Face Data Details

Loify AI collects TrueDepth-derived data only after the user grants camera permission and actively starts a scan or try-on flow. The app may collect or derive front and side face photos, ARKit face mesh vertices and triangle topology, camera intrinsics, image resolution, face pose, face distance, left and right eye transforms, interpupillary distance, lighting measurements, scan quality values, and face-fit metrics.

The app may upload selected face photos, scan files, and derived analysis to our backend so the Service can generate eyewear try-on images, produce face-fit reports, preserve scan history, and let the user view results across app sessions.

Some real-time scan guidance values, such as pose, distance, lighting, and scan quality, may be processed temporarily on the device for positioning feedback. Scan photos, mesh files, generated try-on images, and related analysis may be stored in the cloud when needed to provide the requested results.

5. How We Use Data

• Provide and operate core app features.
• Authenticate users and help secure accounts.
• Capture face scans and photos requested by the user.
• Generate eyewear try-ons, analysis reports, fit measurements, and recommendations.
• Evaluate scan quality, lighting, pose, face presence, and other signals needed to guide the scanning experience.
• Enable community features such as publishing, commenting, and voting when available.
• Troubleshoot bugs, improve performance, and monitor service reliability.
• Detect abuse, fraud, and policy violations.
• Comply with legal obligations and enforce our terms.

6. Sharing and Disclosure

We may share personal data with service providers and partners that help us operate the Service, such as cloud infrastructure, storage, database, identity, analytics, face analysis, AI image generation, and app functionality providers.

Face photos, scan files, and derived analysis may be processed by service providers only to provide the app features requested by the user. Current service provider categories include Supabase for cloud storage, database, authentication, and backend infrastructure; Aliyun Facebody and related Aliyun temporary object storage utilities for face attribute and image quality analysis; and AI image generation providers, including Pruna AI and configured image generation gateways, for virtual try-on image generation.

Service providers may receive the minimum data needed for their function, such as a face photo, generated image prompt, scan ID, signed storage URL, or derived analysis value. We do not authorize these providers to use face data for their own advertising, user tracking, or unrelated profiling.

We may also disclose data when required by law, to protect users or the Service, or in connection with a merger, acquisition, financing, or asset transfer.

We do not sell your personal information or face data.

7. Storage and Data Retention

Face photos, scan mesh files, generated try-on images, and related analysis may be stored in Supabase storage buckets and database tables associated with the user profile or scan ID. Storage paths may include scan images, original scan images, mesh JSON files, user-uploaded photos, generated results, and result history.

We retain personal data for as long as reasonably necessary to provide the Service, maintain scan history and account functionality, generate and display try-on results, troubleshoot issues, comply with legal obligations, resolve disputes, and protect the Service.

Users may request deletion of applicable face data, scan data, generated results, and account-linked personal data by contacting the privacy email listed on this page. After a verified deletion request, we delete or de-identify applicable data where reasonably feasible, subject to legal, security, fraud-prevention, and backup retention requirements.

When data is no longer needed for the purposes described in this policy, we delete it or de-identify it where reasonably feasible.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to certain processing, or request portability of your personal data. You may also withdraw consent where processing is based on consent, subject to applicable law.

You may stop a scan by leaving the scan flow or revoke camera permission through iOS settings. Some features that rely on camera, TrueDepth, face photos, or scan data will not work without that permission or data.

To exercise privacy rights or make a data request, contact us using the email address below. We may need to verify your request before completing it. Include the email, sign-in method, or scan details that help us locate the relevant data.

9. International Transfers and Security

Your data may be processed in countries other than your own. Where required, we apply reasonable safeguards for cross-border transfers.

We use reasonable technical and organizational measures to protect personal data. However, no system is perfectly secure, and we cannot guarantee absolute security.

10. Children's Privacy

Loify AI is not directed to children under 13, or the applicable minimum age in the relevant jurisdiction. We do not knowingly collect personal data from children below the applicable age threshold without required authorization.

If you believe a child has provided personal data in violation of this policy, contact us and we will investigate and take appropriate action.

11. Third-Party Services

The Service may integrate with third-party services such as sign-in providers, hosting infrastructure, storage, analytics, support tools, face analysis providers, and AI image generation providers. Those providers process data under their own terms and privacy notices where applicable.

The Service may use Apple system frameworks, including camera access and ARKit/TrueDepth APIs, on supported devices. Apple system permission prompts control access to the camera. Loify AI receives and processes data from those frameworks only as described in this policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Service or by other reasonable means. The "Last updated" date at the top of this page indicates when this policy was last revised.