Privacy Policy

Last updated: December 2025

1. Introduction

Nexa Labs, LLC ("we," "our," or "us") operates the llabs.top website (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Data Controller Information

The data controller for your personal information is:

3. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

3.1 Types of Data Collected

• Personal Data: While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include:
  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Cookies and Usage Data
• Usage Data: We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
• Tracking & Cookies Data: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

3.2 Photos and Face Data

Some of our apps let you supply a photograph of yourself so that AI image processing can show you an edited version of it. In Mane: AI Hairstyle Try On, you may provide a selfie so the app can show you a hairstyle or hair colour on your own face. Creating that preview requires sending your photograph to AI processing services outside your device. This section explains exactly what is sent, to whom, and for how long it is kept.

This section applies only to those of our apps that offer a photo-based feature and that ask you for a photograph. Our apps that never request a photograph do not collect, process or transmit any face data at all, and nothing in this section applies to them.

• What we collect: The only face data we collect is the photograph itself, which you choose to take with the camera or select from your photo library. Nothing else is derived from it. Providing a photograph is entirely optional and is requested only at the moment you ask for a preview; you can browse the full style catalogue without ever supplying one.
• No biometric identifiers: We do not collect, generate, derive or store any biometric identifier. We do not create a faceprint, face template, face geometry, or facial landmark map. We do not run face detection, face recognition, face matching, face clustering or liveness detection, and we do not infer identity, age, gender, ethnicity or emotion. Before your photograph is sent, the app runs a quality check on your device that reads only whole-image statistics — pixel dimensions, aspect ratio and average brightness — and never locates or measures a face.
• How we use it: Your photograph is used for one purpose only: to generate the hairstyle and hair colour previews you request. We do not use it for advertising, profiling or identity verification, and we do not use it to train, fine-tune or improve any AI model. We never sell or rent it, and it is never used to identify you.
• Your photograph is sent off your device for processing: When you ask for a preview, your photograph is transmitted over an encrypted (TLS) connection to our processing endpoint, which is a serverless function hosted on Supabase. That endpoint immediately forwards it to our AI image provider, fal.ai, which runs the image-editing model that produces the preview. These companies act as processors on our behalf and are permitted to use your photograph only to generate your preview. Your photograph is not shared with anyone else: no advertising network, no data broker, no analytics provider, and no other customer or user of ours.
• Where the generated preview is hosted: The finished preview is not returned to us as a file. Our AI provider stores it and returns a unique, unlisted link to it, and the app loads the image from that link to display your result. The link is unguessable and is not published, indexed or shared by us, but it is not password-protected, so anyone you deliberately give the link to could open it while it remains active.
• How long it is kept by our providers: Your original photograph is not stored by us or by our providers. It exists on the processing path only in memory for the few seconds needed to generate the preview, and we explicitly instruct our AI provider not to retain the request. The generated preview is retained by our AI provider for no more than seven days, after which it is permanently and automatically deleted and its link stops working. We do not keep any copy of either image on our own servers: no photograph or preview is ever written to a database, a storage bucket, or a log file that we operate.
• Where your copy is stored: Your photograph and every preview you choose to save are stored on your device, inside the app's private storage. If you have iCloud Backup enabled, they are included in your own encrypted device backup, which is under your control. Because the app keeps your saved looks locally, they remain available to you long after the provider's temporary copy has expired.
• Analytics and session recording: Our analytics and session-recording tools receive no image data at all. Every screen area that can display your photograph — the camera viewfinder, the selected selfie, the before-and-after comparison, the generated result and the saved-looks gallery — is explicitly masked at the source, so these tools never capture or transmit it.
• Your control and deletion: You can delete any saved look at any time from within the app, which removes both the generated image and the original photograph from your device. Selecting a new selfie replaces the previous one, and deleting the app removes all photographs and previews permanently. Camera and photo library access is optional and can be revoked at any time in your device settings. Because we operate no server-side store of face data and none of it is linked to an account, there is no server-side face data of yours for us to delete on request; if you would like confirmation of this, contact us at the address in Section 13.

4. How We Use Your Information

Nexa Labs, LLC uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

5. Legal Basis for Processing Personal Data

If you are from the European Economic Area (EEA), Nexa Labs, LLC's legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

6. Data Retention

Nexa Labs, LLC will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

7. Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

Geographic Location: Our servers are located in Frankfurt, Germany.

8. Disclosure of Data

Nexa Labs, LLC may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Nexa Labs, LLC
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

9. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

10. Third-Party Services

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

11. Children's Privacy

Our Service does not address anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

This Privacy Policy is governed by the laws of Wyoming, United States.