Privacy

Last updated: April 2026

Your selfie is used once. Never sold, never shared. Delete anytime.

In one paragraph

Barbr takes your selfie, runs a face-shape analysis, and returns four photoreal haircut previews generated by an AI service. There is no account to create, no email to enter, no password to remember. Your selfie is processed once to generate the previews and then deleted from our service. Only the resulting preview images are kept — and they're kept on your iPhone, not ours. We do not run analytics, advertising, or behavioural tracking.

What stays on your device

• The generated preview images you receive (your on-device gallery).
• Your settings, favorite styles, and onboarding state.
• Your token balance, verified against Apple StoreKit.

What happens to your selfie

To generate previews, Barbr sends your selfie to our generation service. The service performs face-shape analysis and renders the preview images. The selfie is processed in memory and deleted from our service after the previews are delivered. We do not keep your selfie, we do not use it to train models, and we do not sell or share it with third parties. Only the generated preview images are persisted — and only on your device, where you can delete any or all of them at any time.

What we do not collect

• No analytics SDKs, no advertising SDKs, no third-party trackers.
• No IP address logging beyond transient request routing, no device identifiers, no advertising IDs.
• No microphone, location, or contacts access.
• No crash reports from us (Apple may collect these only if you opt in via iOS Settings → Privacy → Analytics & Improvements).

Payment

Token packs are handled entirely by Apple through the App Store. We never see your card, billing address, or Apple ID. Barbr only receives a signed receipt from StoreKit confirming the purchase.

Children

Barbr is not directed at children under 13. It does not collect any personal information from anyone.

Your rights under GDPR / DSGVO

If you are in the European Economic Area, the UK, or Switzerland, the General Data Protection Regulation (Art. 15–22 GDPR) gives you the following rights over your personal data:

• Access (Art. 15) — confirmation of whether we process data about you, and a copy of it.
• Rectification (Art. 16) — correction of inaccurate data.
• Erasure (Art. 17) — deletion of your data.
• Restriction (Art. 18) — pause processing in certain cases.
• Data portability (Art. 20) — a machine-readable export.
• Objection (Art. 21) — object to processing.
• Withdraw consent (Art. 7(3)) — at any time, without affecting prior lawful processing.
• Lodge a complaint (Art. 77) — with your local supervisory authority.

Because Barbr does not retain your selfie and does not create a user profile, most rights are satisfied by deleting the app (which removes all on-device data). For rights concerning email contact data you provide when writing to us, email support@barbrapp.com.

Data controller

The data controller under Art. 4(7) GDPR is:

Changes to this policy

If we ever change this policy, the updated version will be published at https://barbrapp.com/privacy and the "Last updated" date above will change.

Contact

Questions about privacy? support@barbrapp.com