Privacy and biometric notice
Last updated
Fitcut measures faces and reads hair, so we hold ourselves to a stricter standard than most apps. This page says exactly what happens to your photo and your data, in plain words.
The short version
- Your face is measured on your device. The 478-point mesh never leaves it.
- Your selfie is never stored at rest. At most, it's held encrypted for 24 hours while your previews render.
- Previews, measurements and answers delete themselves after 30 days.
- Anthropic, Google and, only as a fallback, fal process your photo. Nobody buys it.
- No face templates, no training on your photos, no session replay on sensitive screens.
- You can delete everything right now, from this page.
1What we collect and where it's processed
We only collect what we need to recommend haircuts and render the previews you ask for. The measuring of your face happens on your device; the rest happens on our servers and our processors’ servers.
| Data | Processed | Why |
|---|---|---|
| Face mesh (478 landmarks) | Your device only | To measure proportions. Never sent to us. |
| Face proportions | Our server | Unitless ratios (like length ÷ width), their percentiles and photo-quality flags. Used to rank cuts. |
| Your front photo | Our server and processors, in memory | Re-encoded on your device to at most 1092 px with location data removed. Used to read your hair and to render previews. |
| Hair traits | Our server | Texture, density, hairline range, cowlicks and similar, each with a confidence level. |
| Quiz answers | Our server | How much you'll cut, styling time, trims and the like. Used to rank cuts. |
| Previews | Our processors, then private storage | The images you asked for, labelled “AI preview”. |
| Email (optional) | Our server | To send your report and barber card. Marketing email only if you opt in separately. |
| Payment | Stripe | Card details go to Stripe, never to us. |
2Biometric notice and consent
Some US states treat face geometry, and photos used to derive it, as biometric identifiers or biometric information. We treat all of it that way, wherever you live.
- What: the face proportions derived from your photo, and the photo itself while it is being analysed and used for previews.
- Why: only to recommend haircuts and to render the previews you request. Nothing else.
- Consent first: before the camera opens, we ask you to confirm you are 18 or older, to give written consent to this processing, and to confirm the photo is of you or that you have the person’s consent.
- How long: as set out in the retention schedule below. Everything is permanently destroyed on that schedule, or sooner if you delete it, and never later than 30 days after your last analysis. The photo itself is never kept longer than 24 hours.
- No sale: we never sell, lease, trade or otherwise profit from your biometric data.
- Disclosure: only to the processors listed below, only to perform the service, or where the law requires it.
- Security: encrypted in transit and at rest. A photo held for rendering is encrypted with AES-256-GCM.
- Withdrawing consent: delete your data with the button below, or email us. Withdrawing stops all further processing of your photos and measurements. It doesn’t cancel a membership: billing continues until you cancel it (one click, from your account).
3Retention schedule
A deletion job runs every day and removes anything past its date.
| What | Kept for | Details |
|---|---|---|
| Your photo (selfie) | Never stored at rest | Processed in memory and discarded once your analysis and previews finish. The only exception: while your previews are rendering, the photo is held as an encrypted file and deleted automatically within 24 hours, whatever happens. |
| Face mesh (478 points) | Never leaves your device | Computed in your browser to measure proportions. We never receive it. |
| Previews of you | 30 days | Stored privately, then deleted automatically. |
| Measurements, hair profile and answers | 30 days | Your face proportions (ratios only), the hair traits read from your photo, your quiz answers and your ranked results. |
| Orders | Kept (financial records) | Product, amount, date and payment status. No images attached. |
| Anonymous aggregates | Kept | Counts such as which cuts people pick, published only for groups of 20 or more. No images, no landmarks, nothing that points to you. |
| Barbershop referral link | 12 months | If a partner shop's QR or link brought you here, which shop it was, so the shop gets its share of what you buy. |
4Who processes your data
We use these companies under their commercial API terms, and send each one only what its step needs.
| Processor | What they do | What they receive |
|---|---|---|
| Anthropic (Claude) | Reads hair traits from your photo; writes the plain-English reasons | Your photo, for the hair read; then text-only reason codes |
| Google (Gemini API) | Renders your previews | Your photo and the haircut spec |
| fal | Backup preview rendering, only if the primary provider fails | Your photo and the haircut spec |
| Vercel | Hosting, and private encrypted storage for previews | Previews; an encrypted photo while rendering |
| Neon | Database | Proportions, hair traits, answers, results. No images |
| Stripe | Membership payments, renewals and tax | Payment details, email, plan and amounts |
| Resend | Sends the emails you ask for | Your email address and the email content |
| PostHog | Product analytics, if enabled | Bucketed events only. No images, no measurements |
5What we never do
- Store face templates or face embeddings on our servers.
- Sell your data, or share it for advertising.
- Train models on your photos, unless you give separate, opt-in consent.
- Record your screen on the capture or results pages. No session replay there, ever.
- Put images, landmarks or raw measurements in logs or analytics.
- Rate your face or looks.
6Delete everything now
You don’t need to wait 30 days. This removes everything tied to this browser immediately, including the files in storage.
7Your choices and rights
Depending on where you live, you may have the right to know what we hold about you, to get a copy, to correct it, to delete it and to opt out of certain uses. We honour these requests for everyone.
- Delete: use the button above, or email support@fitcut.xyz for data from another device.
- Access or copy: email us and we’ll send what we hold within 30 days. We may ask you to confirm the email address you used.
- Marketing: every marketing email has a one-click unsubscribe.
- Barber cards: a partner shop only sees a card you explicitly chose to share with it.
9Adults only
Fitcut is for people 18 and over. We don’t knowingly collect data from anyone younger; if we learn we have, we delete it.
10Changes and contact
This notice is version 2026-09-25. If we change it in a way that affects how your data is handled, we’ll say so on this page and ask for consent again before any new processing. Questions: support@fitcut.xyz. See also our terms.