Privacy Policy

01The short version

• Your selfie stays on your phone and is not saved to your Olune account. To create looks, the app sends it to our server, which keeps it only in memory, never on disk, and stops using it after 20 minutes.
• To render and check your looks, your selfie goes to our AI provider fal.ai, which runs Google models. We do not use your photos to train AI models, and we never sell your data.
• Your looks, the words you type and your fit settings are saved to your account so they follow you across devices.
• No ads, no advertising IDs, no analytics or crash-reporting SDKs in the app, and no tracking cookies on this website.
• You can delete your account in the app at any time: Profile, then Account, then Delete my account. See Delete your account for exactly what that removes.

02Who we are

Olune (the app and joinolune.com) is operated by OB DATA LLC (“Olune”, “we”, “us”). We decide how your personal data is used, which makes us the controller of it. Contact us at support@joinolune.com.

If you are in the European Union or the United Kingdom, you can reach us the same way, by email.

03Your selfie, in detail

This is exactly what happens to the photo you take or choose to create looks:

1. On your phone. The photo is saved in the app’s private storage, along with a smaller copy made for uploading. It is not uploaded to your Olune account or to our database.
2. On our server. When you create looks, the app uploads the photo to our API server, hosted by Railway. The server holds it in memory, never writes it to disk and does not log it. So that your next looks do not need a fresh upload, it keeps the photo in memory under a reference code for up to 20 minutes and does not use it after that. Memory is cleared as newer photos replace older ones and whenever the server restarts.
3. With our AI providers. The server sends the photo, together with a description of the look, to fal.ai, which runs Google’s image and vision models. Some of these vision requests are routed by fal.ai through OpenRouter to Google. Your photo is used there to render your looks and for the checks described next.
4. Checks against your photo. To style you correctly and keep each look true to you, an AI model reads the apparent sex in your selfie (to choose menswear or womenswear) and notes visible details such as facial hair, glasses and hair. Each finished look is compared with your selfie for apparent sex and skin tone, and redone once if they do not match. We do not store the results of these comparisons. We do not create a face template and do not use your face to identify you.

We ask for your agreement before your first selfie is sent. We do not use your photos to train AI models and do not sell them. Our providers process them under their own terms.

04What we collect and why

When you sign in with a code, the app may read a six-digit code from your clipboard to fill it in for you. That stays on your phone.

05Information about other people

If you type the @handle of a public Instagram, Pinterest or TikTok profile, our server uses Apify to fetch that profile’s public content: up to six recent image links, the username, display name, profile picture link, follower count and whether the account is verified or private. A vision model turns those images into a written description of the style, and only that description is used to render your look. We keep a count of how often each handle is searched along with one image link, and the name or handle you typed is saved with your look.

Only upload photos of yourself to create looks. Photos you use in Shop any photo are only used to find products. If you believe Olune holds information about you that you did not provide, write to support@joinolune.com.

06Who processes your data

We share data only with providers that help us run Olune, and only what each one needs:

When you open a store link, you leave Olune and the store’s own privacy policy applies. We may also disclose data if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

We do not sell personal data, and we do not share it for cross-context behavioral advertising. There are no advertising SDKs in the app.

07Legal bases (EU and UK)

• Contract: to provide the features you ask for, such as rendering looks, saving them, shopping and subscriptions.
• Consent: to process your selfie, including the appearance checks described above, and to send you notifications. You can withdraw consent at any time by removing your selfies and deleting your account, or by turning off notifications.
• Legitimate interests: to keep Olune secure, prevent abuse of free limits, manage costs and improve the app, balanced against your rights.
• Legal obligation: to keep records the law requires, such as for tax.

08How long we keep data

• Selfies: on your phone until you delete the app. Removing a selfie in Profile stops Olune from using it; deleting the app removes Olune’s files from your phone, and your phone’s own backups follow your backup settings. On our server, never on disk and not used after 20 minutes.
• Looks, prompts, settings and your profile: until you delete them or your account. The look image files are hosted by fal.ai at unlisted links and kept under fal.ai’s retention policy.
• Usage records, shopping activity and notification records: kept for billing, fair use, abuse prevention and analytics. They are linked to a random account ID, not your name or email, and are not removed automatically when you delete your account. Ask us and we will delete them unless we must keep them.
• Server logs: kept by Railway and Vercel for their standard log periods.
• Product search cache: up to 7 days.
• Purchase records: kept by Apple, Google and RevenueCat as their terms and the law require.

09International transfers

We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal data from the EU, the UK or Switzerland, we rely on safeguards the law recognizes, such as the Standard Contractual Clauses in our providers’ data processing terms.

10Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and get a copy in a portable format;
• correct it, or delete it;
• object to or restrict some processing, and withdraw consent;
• not be treated differently for using these rights;
• complain to a data protection authority, such as your local supervisory authority in the EU or the ICO in the UK.

California and other US states. In the last 12 months we collected the categories in the table above: identifiers, customer records, physical characteristics (your fit settings), commercial information (purchases and shopping activity), internet and app activity, photos, inferences (style preferences) and, as sensitive personal information, the appearance data described in “Your selfie, in detail”. We use sensitive personal information only to provide the service you request. We do not sell or share personal information, and we do not knowingly sell or share the data of anyone under 16.

To use your rights, delete your account in the app or email support@joinolune.com from the address on your account. We may need to confirm it is you, and we answer within the time the law allows, usually one month or 45 days. You can use an authorized agent. You can turn off notifications in your phone’s settings or in Profile, and change your fit and style settings at any time.

11Children

Olune is not for children under 13, or under the age of digital consent where you live if that is higher, and people under 18 need a parent’s or guardian’s permission. We do not knowingly collect data from children under 13. If you believe a child has used Olune, write to support@joinolune.com and we will delete the account.

12Security

Data travels over encrypted connections. Account data is protected by access rules in our database, and our servers verify who is making each request. No system is perfectly secure, so if you think your account has been compromised, write to support@joinolune.com right away.

13This website

joinolune.com sets no cookies and runs no analytics or advertising scripts. When you follow a store link through joinolune.com/go, our code logs the store’s domain and the time, not who you are. Our host, Vercel, keeps standard request logs, which include IP addresses.

14Changes to this policy

We will update this page when our practices change, and tell you in the app or by email before material changes take effect. The date at the top shows when it last changed.