Privacy Policy — Mane

Last updated: August 2026

1. Introduction

Nexa Labs, LLC ("we," "our," or "us") operates Mane: AI Hairstyle Try On, an iOS app that shows you a haircut or hair colour on your own face, and the llabs.top website (together, the "Service"). This policy explains what Mane does with your information, what it deliberately does not do, and the choices you have.

This policy is written specifically for Mane. Other apps we publish have their own privacy policies, and nothing described here applies to them.

The short version

Mane cannot create a preview on your device. To put a new hairstyle on your face, your photograph has to be sent to an AI image service. We say so plainly, we name the companies involved, and we ask your permission before it happens.

Adding a photo is part of the paid preview feature. If you do not have an active subscription, Mane never asks iOS for access to your camera or your photo library, and no photograph of yours is taken, chosen or sent anywhere. You can browse the whole style catalogue without ever supplying one.

Your previews and the photo behind them are kept on your iPhone, not on our servers. We hold no copy of your face, which also means there is nothing about your face for us to hand over or to lose.

2. Data Controller Information

The data controller for your personal information is:

Nexa Labs, LLC
30 North Gould Street, Ste N
Sheridan, WY 82801
United States
Email: support+hair@llabs.top

3. Your Photo

3.1 What happens to it

Providing a photograph is optional and is only ever requested inside the preview feature. Here is the whole path it takes.

Only subscribers are asked for one. Tapping "Take a photo" or "Choose from gallery" shows the subscription screen first. If you do not subscribe, iOS is never asked for camera or photo-library access on our behalf, and no photograph of you is ever taken, chosen or sent anywhere. The diagnostics and measurement described in sections 6 and 9 still apply, as they do everywhere in the app.
We ask your permission before anything is sent. Before your first photograph — and before the camera or your photo library opens — Mane shows a consent screen that names what is sent, names who receives it, states how long they keep it, and states what we never do with it. Nothing is sent unless you tap "Agree and continue"; "Not now" cancels, and no photograph is taken. You can read that same screen at any time, with or without a subscription, under Settings › AI photo sharing, and grant or withdraw your permission there.
What is prepared on your device. The photograph is resized (longest side 1280 pixels) and re-encoded as a JPEG so the upload is small. A quality check runs on your device before anything leaves it; it reads only the image's dimensions, its shape and its average brightness, and it does not look for, locate or measure a face.
Where it goes. Your photograph is transmitted over an encrypted (TLS) connection to our processing endpoint, a serverless function hosted on Supabase. That endpoint checks that your subscription is active and immediately forwards the image to fal.ai, the AI service that runs the image-editing model producing your preview. These two companies act as processors on our behalf and are permitted to use your photograph only to generate that preview.
Exactly what is sent. The request contains four things: the photograph, the identifier of the hairstyle you tapped, the fixed English description of that hairstyle from our built-in catalogue, and whether you asked for a style or a colour. It contains no name, no email address, no device identifier, no location and no text you have written. The request to our own endpoint also carries a token that identifies your subscription, so we can confirm you are entitled to a preview; that token is not passed on to fal.ai, which receives nothing that identifies you.
What comes back. fal.ai returns a link to the generated image. The app downloads it to your device and keeps it there. The link itself is a long, unguessable web address on fal.ai's storage; it is not password-protected, so anyone you deliberately give it to could open it while it lasts. We never publish it.
What we do not do with it. Your photograph is not used to train, fine-tune or evaluate any AI model, ours or anyone else's. It is not used for advertising, profiling or identity verification. It is never sold or rented. It is not shared with anyone beyond the two processors named above: no advertising network, no data broker, no analytics provider, and no other user or customer of ours.
Nothing about it is stored on our servers. Our processing endpoint writes no database record, no storage file and no log entry containing your photograph. It receives the image, passes it on, returns the resulting link and keeps nothing. Your preview history lives on your device only.

3.2 What Mane stores on your device

So that you do not have to pick your photo again and can come back to your previews, Mane keeps the following inside its own private app storage on your iPhone:

What	Why it exists
One copy of the last photograph you confirmed	So that trying a second hairstyle does not make you choose a photo all over again
Each preview you generated	So it stays available in My Looks
The photograph each preview was made from	So My Looks can show you the before-and-after pair
A small index listing your looks: an identifier, the hairstyle name, the file names and the date	To show your library in order
App settings and your answers to the setup questions, such as the hair length and texture you chose	To keep the app behaving the way you set it
Your decision about AI photo sharing	So you are asked once rather than every time

These files are written to the app's own sandbox on your device and are protected by iOS file encryption. We have no access to any of them. If you have iCloud Backup switched on, they are included in your own encrypted device backup, in the same way as other app data. While a preview is being prepared, temporary working copies of the image may also exist in the app's temporary storage, where iOS reclaims them.

3.3 Retention and deletion

At our AI provider. We instruct fal.ai not to retain the request that carries your photograph, and we set the generated preview to expire from their storage after seven days, after which it is deleted automatically. Your photograph is not stored by us at any point in this path.
On your device — it is your call. Deleting a look in My Looks removes both the preview and the photograph it was made from. Deleting your last remaining look also removes the stored copy of your photograph. Withdrawing your permission under Settings › AI photo sharing removes that stored copy too, and Mane will ask you again before anything is sent in future. Choosing a new photo replaces the previous one. Deleting the app removes everything listed in section 3.2 permanently.
What deletion cannot reach. Deleting a look or withdrawing permission removes copies from your device and stops future sending. It cannot recall a preview already generated; that one expires on the seven-day schedule above. If you saved a preview to your iOS photo library or shared it, that copy is yours to manage like any other photo.
There is nothing for us to delete. We operate no database, storage bucket or log containing your photograph, and none of it is linked to an account, so there is no server-side copy of your face for us to keep, hand over or delete on request. If you would like confirmation of that, write to us at the address in section 18.

4. Face Data

Mane works with a photograph of your face, so this section states exactly what that does and does not involve.

What we collect: the photograph itself, and nothing derived from it.
No biometric identifiers. We do not create, derive or store a faceprint, a face template, face geometry or a landmark map. The app performs no face detection, face recognition, face matching, clustering or liveness detection, and it infers no identity, age, gender, ethnicity or emotion. It bundles no face-detection or biometric software. The only automatic check it makes is the whole-image quality test described in section 3.1, which never locates a face.
It is not used to identify anyone. Your photograph is never compared against any database, never linked to a name, and never used to recognise you or anyone else. We could not identify you from it: Mane has no sign-up, and we hold no copy.
It is never used for training. Neither we nor our processors may use your photograph to train, fine-tune or evaluate any model. That restriction is part of our arrangements with them, and we select providers whose data-processing terms give your data the same or equal protection as this policy does — covering confidentiality, security, limitation to the purpose we specify, and deletion.
Analytics and session recording do not see it. We use Microsoft Clarity to record app screens for diagnostics. Every view that can display your photograph or your preview — the camera viewfinder, the photo you confirmed, the before-and-after comparison, the result screen and the My Looks gallery — is masked at the source before capture, so these recordings show a blank placeholder where your image would be. Our analytics receive event names, counters and the hairstyle you tapped — never image data, never a file, never text you have written.
It is never written to a log. Our processing endpoint does not log the request, the image, or any part of it. When something goes wrong we record the error code and a short, truncated message from the provider, and nothing else.

5. Photos of Other People

Mane is built for previewing hairstyles on your own face, and the app asks you for a clear photo of yourself. If a photograph you supply shows someone else, please make sure you have their permission first, and do not upload a photograph of a child. Everything in sections 3 and 4 applies to whoever appears in the image: no faceprint is created, nothing is used for training or advertising, and no copy is kept by us.

For the age of the person using the app, see section 12.

6. Information We Do Collect

Mane has no sign-up, and we never ask you for your name, postal address or phone number. To run the app, keep it working and support purchases, we and our providers collect the following:

Category	What it is
Anonymous app account	On first launch, Mane creates an anonymous account identifier so your subscription can be recognised on your device. It is not linked to your name or email, and you are never asked to sign in. Most of the other data in this table is associated with that identifier.
Purchase and subscription status	Whether you have an active Mane subscription, which plan, purchase and renewal events, store country and currency. Payment itself is handled by Apple; we never see your card details.
Device and app information	Device model, operating system version, app version, language, country, IP address, and app- and vendor-generated installation identifiers.
Crash and diagnostic data	Crash reports, error traces and performance data, so we can fix faults. We do not send your photographs to our crash reporter.
Product analytics	Events about how the app is used — screens opened, features used, previews started and finished, paywalls shown — plus properties such as the answers you gave to the setup questions (hair length, texture, colour and similar) and which variant of an experiment your device was assigned to. Never your photograph, never a file, never free text you have typed.
Session recordings	Recordings of app screens and interactions for diagnostics, with every view that can show your photograph masked at the source as described in section 4.
Advertising and attribution data	If you allow tracking when asked, your device's advertising identifier (IDFA). With or without it: IP address, device and app information, the vendor identifier, and events such as installing the app, opening it, finishing setup, reaching a paywall and starting a subscription, together with the campaign that brought you to Mane. See section 9.
Push notification token	If you allow notifications, a device token so we can send them, together with your language. You can withdraw this at any time in iOS Settings.
Ratings and feedback you choose to give	If you rate the app inside a Mane dialog, we receive the star rating with your app version and device model. If you tell us why you are cancelling or leaving, we receive what you wrote, your app version, platform and language. Please do not include personal details in that message — we do not need any.
Support correspondence	If you email us, we receive your email address and whatever you write to us.

7. How We Use Your Information

To generate the hairstyle previews you ask for
To provide the app and keep your subscription working
To detect, diagnose and fix crashes and technical problems
To understand which features are used, so we can decide what to improve
To run product experiments, such as testing which version of a screen works better
To provide customer support when you contact us
To measure how well our advertising works, to attribute app installs and subscriptions to the campaign that produced them, and to reach people who are likely to find Mane useful
To send you notifications you have agreed to receive, and to tell you about changes to the Service
To comply with legal obligations and to prevent abuse and fraud

If you are in the European Economic Area or the United Kingdom, our legal bases are: your explicit consent for processing the photograph you supply, which you give on the consent screen described in section 3.1 and can withdraw at any time in Settings; performance of a contract for providing the app and your subscription; legitimate interests for diagnostics, security and improving the app, balanced against your rights; consent for push notifications, for advertising measurement that uses your device's advertising identifier, and for anything you volunteer to us; and legal obligation where the law requires it.

8. Service Providers

We use the following providers to run the Service. They act on our behalf and may use the information only to provide their service to us.

Provider	Purpose	What it receives
fal.ai	Generating your hairstyle preview	The photograph you supplied and the description of the hairstyle you chose, and nothing else — no identifier, no account, no device data from us
Supabase	Our processing endpoint, which passes the photograph to fal.ai, and hosting our anonymous account, entitlement and feedback records	The photograph in transit (not stored), the anonymous account identifier, subscription status, notification token, language, and any feedback you send us
Apple	App distribution, payments and subscriptions	Purchase and subscription records; Apple's own account data
RevenueCat	Subscription management	Anonymous app account identifier, purchase and subscription events, device and store information, and device identifiers including the advertising identifier where you have allowed tracking
Google (Firebase)	Anonymous authentication, crash reporting, analytics, remote configuration, push notifications; the app may also retrieve its font files from Google's font service	Anonymous account identifier, device and app information, IP address, crash reports, usage events, push token
Amplitude	Product analytics	Usage events and properties tied to the anonymous account identifier, device information
Microsoft (Clarity)	Session recording and diagnostics	Masked recordings of app screens and interactions, device information
Adjust	Advertising measurement and install attribution	Device and app information, IP address, advertising identifier (IDFA) if you allow tracking, install, session, setup, paywall and purchase events, campaign data, and Apple's SKAdNetwork postbacks

Only fal.ai and our own Supabase processing endpoint ever receive your photograph. No other provider in this table receives it, or anything derived from your face. Our advertising measurement partner receives events about how the app is used and the identifiers described in section 9 — never your photograph, never a face, never a file. No provider outside this list receives personal information from Mane, and we do not give your information to data brokers.

9. Advertising and Tracking

We advertise Mane on other platforms, and we measure whether that advertising works. This means some information about your device is shared with the measurement partner named in section 8.

We ask first. iOS shows you Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", your device's advertising identifier (IDFA) is not used, and our campaigns are measured without it, using Apple's privacy-preserving SKAdNetwork and aggregated signals instead.
If you allow tracking, your advertising identifier may be shared with our measurement partner so that an app install or a subscription can be matched to the ad you saw. You can change your mind at any time in iOS Settings › Privacy & Security › Tracking.
What is shared: device and app information, IP address, the advertising and vendor identifiers where permitted, and events such as installing the app, opening it, finishing setup, reaching a paywall and starting a subscription.
What is never shared: your photograph, your previews, anything derived from a face, and any file. Advertising partners receive none of it under any circumstances.
We do not show ads inside Mane, and we do not sell your personal information. Under California law, sharing information with advertising partners as described above may count as "sharing" for cross-context behavioural advertising; declining the tracking prompt, or turning tracking off in iOS Settings, opts you out of it.

10. Data Retention

Data	Retention
Your photograph, at us	Not retained. It passes through our processing endpoint and is not written to any database, file or log.
Your photograph, at our AI provider	We instruct fal.ai not to retain the request that carries it
The generated preview, at our AI provider	Expires and is deleted after seven days
Your photograph and previews, on your device	Until you delete the look, withdraw your permission, replace the photo, or delete the app. We hold no copy.
Anonymous account and subscription records	For as long as the app is in use, and afterwards as long as needed for tax, accounting and dispute-resolution obligations
Crash and diagnostic data	Up to 90 days, under our provider's standard retention
Session recordings	Up to 30 days, under our provider's standard retention
Product analytics events	Retained by our analytics providers under their standard retention periods, and thereafter only in aggregate
Advertising and attribution data	Retained by our measurement partner in line with its standard retention periods
Feedback and ratings you send us	Up to 24 months
Support emails	Up to 24 months after the issue is resolved

11. Transfer of Data

We are based in the United States. The providers listed in section 8 store and process information on servers that may be outside the country where you live and where data protection laws may differ. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

Your photograph crosses the network twice: once to our processing endpoint and on to fal.ai, and once back as the finished preview. It is encrypted in transit both ways, and it comes to rest only on your own device.

12. Children's Privacy — Age of the User

Mane is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe a child has provided us with personal information, contact us at the address in section 18 and we will delete it.

This is separate from the people who may appear in a photograph you supply — see section 5.

13. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal information, to receive a copy of it in a portable format, and to withdraw consent you have given. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and why, to request its deletion or correction, to request a copy of it, and not to be discriminated against for exercising these rights. You also have the right to opt out of the sharing of your personal information for cross-context behavioural advertising. We do not sell your personal information; for how sharing works and how to opt out, see section 9.

Practical steps you can take at any time, without contacting us: withdraw your permission for AI photo sharing under Settings › AI photo sharing, which also deletes the stored copy of your photograph; delete individual looks in My Looks; delete the app to remove everything it stored on the device; turn tracking off in iOS Settings › Privacy & Security › Tracking, which also serves as your opt-out from the sharing described in section 9; turn notifications off in iOS Settings; and revoke Mane's access to your camera and photo library in iOS Settings.

To exercise any other right, email support+hair@llabs.top. Because Mane has no sign-in, we may ask you for information that lets us locate your records, such as your anonymous app account identifier or your Apple purchase receipt. Note that we hold no photograph of yours to produce or delete, as explained in section 3.3. We respond within the period required by applicable law.

14. Security

Your photograph, your previews and your app settings are written to the app's own sandbox on your device with iOS file protection. Every network request the app makes is encrypted in transit with TLS. Your photograph is sent only to the two processors named in section 3.1, and only after you have agreed; it is never written to a log, a database or a storage bucket that we operate. Screens that can show your face are masked before any diagnostic recording is captured.

No method of transmission over the internet or of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect personal information, we cannot guarantee absolute security.

15. Disclosure of Data

We may disclose personal information in the good faith belief that such action is necessary to comply with a legal obligation, to protect and defend our rights or property, to prevent or investigate possible wrongdoing in connection with the Service, to protect the personal safety of users or the public, or to protect against legal liability. We may also transfer information as part of a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

Because we keep no copy of your photograph or your previews, there is nothing of your face for us to disclose under any circumstances, including a legal request.

16. Cookies and Our Website

The Mane app does not use cookies. Our website pages may use essential cookies and similar technologies to function and to measure traffic. You can instruct your browser to refuse cookies, though some parts of the site may then not work correctly.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date at the top. Changes are effective when posted.

18. Contact Us

If you have any questions about this Privacy Policy, contact us:

Nexa Labs, LLC
Email: support+hair@llabs.top
Address: 30 North Gould Street, Ste N, Sheridan, WY 82801
Website: llabs.top

This Privacy Policy is governed by the laws of Wyoming, United States.