1. Information you provide
- Account and profile: name or handle, email address, avatar, preferences, and login information.
- Try-on inputs: portrait photos, selected hairstyle, generation request, and resulting image.
- Community and communications: posts, captions, likes, saves, challenge entries, reports, direct messages, and photos sent in conversations.
- Support and feedback: messages you send us and information needed to resolve the issue.
- Purchases: product, transaction status, and coin balance. App stores handle full payment-card details; we do not receive them.
2. Information created through use
We may process limited device and activity data such as app version, device type, language, approximate region derived from IP address, timestamps, feature interactions, crash records, and security logs. We use this to operate, protect, debug, and improve Bela. We do not seek precise location, contacts, health information, or unrelated device data unless a future feature clearly needs it and asks for permission first.
3. Camera and photo library
Camera or photo-library access occurs only after you choose a feature that needs it and grant system permission. You can revoke permission in device settings. We process selected photos to create try-ons, attach images to messages, set an avatar, or publish content as you direct. Bela does not scan your entire photo library.
4. AI processing
Bela’s AI models are developed by us, trained by us, and deployed by us on infrastructure under our control. We do not send your photo or prompt to third-party AI model services. We process a selected photo and style choice to generate the requested hairstyle visualization. Try-on inputs and results are not used to identify you or for advertising. We do not use private try-on photos to train our models without separate, clear, opt-in consent.
5. Why we use information
We process information to provide requested features; personalize discovery and saved looks; deliver messages and notifications; maintain accounts and coin balances; moderate content and prevent fraud or abuse; diagnose errors; answer support requests; comply with law; and improve performance and usability. Depending on location, our legal bases may include performing our contract with you, consent, compliance with law, and our legitimate interests in a safe and reliable service.
6. When information is disclosed
We do not sell, trade, rent, or share personal information with unrelated third parties. We may disclose only what is necessary:
- to other users when you publish, message, or otherwise choose to share;
- to carefully selected infrastructure, storage, analytics, security, customer-support, and payment providers acting under contract on our instructions;
- to comply with a valid legal process or protect users, rights, and safety;
- in a merger, financing, reorganization, or sale, subject to confidentiality and continued protection; or
- with your direction or consent.
Service providers may not use the information for their own advertising or unrelated purposes. They are not third-party AI model providers.
7. Public and private spaces
Profiles, posts, challenge entries, likes, and other content marked public can be seen or copied by others. Direct messages are visible to conversation participants. We may access reported content and related context to investigate safety issues. Please avoid posting sensitive information and obtain permission before sharing another person’s image.
8. Retention and deletion
Account and profile information is kept while your account is active. Public content remains until you delete it or the account, subject to moderation and legal needs. Messages may remain for participants and for a limited safety or backup period. Try-on uploads and generated results are retained only as long as needed to provide history or the feature, according to in-app controls. Security, transaction, and support records may be kept longer where reasonably required by fraud prevention, accounting, dispute resolution, or law. Backups are deleted on a rolling schedule.
9. Security
We use safeguards appropriate to the sensitivity of information, including encrypted transmission, access controls, least-privilege practices, logging, secure development, separation of environments, and incident response. No system is perfectly secure. If a breach creates a legally reportable risk, we will notify affected users and authorities as required.
10. International processing
Bela may process information in countries other than yours. Where required, we use recognized transfer safeguards and require recipients to protect information consistently with this policy. Mandatory local privacy rights remain available.
11. Children
Bela is not intended for children under 13. Users must also meet the minimum digital-consent age in their country. We do not knowingly collect personal information from an ineligible child. A parent or guardian who believes a child provided information should contact us so we can investigate and delete it.
12. Changes
We may update this policy as Bela changes. We will post the revised policy with a new effective date and provide additional notice when a change is material or legally required. Prior versions may be requested by email.