Privacy Policy

1. Who we are and what this policy covers

Plastic AI is operated by Pure Labs Inc. (“Plastic AI,” “we,” “us,” or “our”). This policy explains how information is processed when you use the Plastic AI iOS application, our website, and related services.

Plastic AI provides AI-generated visual simulations for exploration and entertainment. It is not a medical device and does not provide medical advice or guarantee real-world results.

2. Information we process

Photos and generated looks

When you take or select a photo, we process that image, your selected treatment area and option, and the resulting AI-generated preview. The original and generated images are saved to your private My Looks library so you can view and compare them later.

We process face images to create the preview you request. We do not use them to identify you, verify your identity, build a facial recognition database, or create a biometric identity profile.

Anonymous account and look records

The app automatically creates an anonymous Supabase account. We process its random user identifier, authentication information, look identifiers, selected feature, storage paths, and creation time. You do not need to provide a name, email address, phone number, or profile.

App analytics

We use PostHog to understand product usage and reliability. Events may include app opens, camera permission results, photo source, selected feature, generation success or failure and duration, result interactions, My Looks actions, paywall interactions, product identifiers, subscription status, app version, build number, install date, and a pseudonymous analytics identifier. We do not send your photos or generated images to PostHog.

Purchases

Subscriptions are purchased and managed through Apple. Apple handles your payment details. Plastic AI receives information needed to display products, verify entitlement, restore a purchase, and record subscription-related product and status events.

Support communications

If you contact us, we process the information you choose to provide, such as your email address, message, and troubleshooting details.

3. How we use information

We process information to:

• generate the cosmetic preview you request;
• save and retrieve your private before-and-after looks;
• authenticate the app’s anonymous cloud session;
• provide, verify, and restore subscription access;
• measure feature usage and improve reliability;
• prevent abuse, protect the service, and enforce limits;
• respond to support, privacy, and legal requests.

We do not sell your photos or use them for advertising, facial recognition, or user profiling.

4. AI processing

Your selected photo and the instructions for your chosen look are securely sent through our Supabase Edge Function to an AI image processing provider. Depending on service configuration, the provider may be Replicate or OpenAI. The provider returns the generated image to Plastic AI so it can be stored in My Looks and displayed in the app.

We use these providers to fulfill your request. Their processing of data is governed by our service arrangements and their applicable privacy and data-processing terms.

5. Private cloud storage and retention

Your original and generated images are stored in a private Supabase Storage bucket under your anonymous user identifier. Related look records are stored in our Supabase database. Access controls are designed so an authenticated anonymous user can access only the looks assigned to that user.

Looks remain stored until you delete them, clear My Looks, request deletion where we can verify the relevant anonymous account, or we remove them as part of service administration or applicable retention requirements. Removing the app from your device does not itself delete cloud-stored looks. Because the account is anonymous, losing its local credentials may also mean losing access to the stored library.

Analytics, transaction, security, and support records may be kept for as long as reasonably necessary for the purposes described in this policy, including fraud prevention, service operation, and legal compliance.

6. Service providers and disclosure

We use the following categories of providers:

• Supabase for anonymous authentication, edge functions, database records, and private image storage;
• Replicate or OpenAI for AI image generation;
• PostHog for pseudonymous product analytics;
• Apple for App Store distribution, subscriptions, and purchase verification;
• Vercel for hosting the Plastic AI website.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing, acquisition, or sale of assets, subject to appropriate safeguards.

7. Security

We use HTTPS/TLS in transit, private cloud storage, authenticated access, database and storage access controls, file type and size validation, and operational safeguards. No security method is perfect, so we cannot guarantee absolute security.

8. Your choices and privacy rights

You can delete individual looks or clear your My Looks library inside the app. You can control camera and photo-library access in iOS Settings, manage or cancel subscriptions through Apple, and choose whether to save a generated image to your Photos library.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a copy of certain personal information. Email us to make a request. Because Plastic AI does not require identifying profile information, we may need information from the app to verify which anonymous account is yours.

9. International processing

Our providers may process information in the United States and other countries. Those countries may have different data protection laws from your jurisdiction. We use providers and safeguards appropriate to the services they perform.

10. Children

Plastic AI is not directed to children under 13, or the minimum age required by local law. We do not knowingly collect personal information from children below that age. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

11. Changes to this policy

We may update this policy as the service changes. We will update the effective date above and provide additional notice when required by law.

12. Contact us

For privacy questions or requests, contact: