Your photos deserve a straight answer.

Information Allure processes

• Three to five reference photos you select, plus your confirmation that the subject is an adult and that you have permission to use the photos.
• A reusable profile photo set stored locally on your iPhone and preselected for future generations until you replace it.
• Creative choices such as age range, interests, lifestyle, setting, and outfit direction.
• Generated images and limited job and media metadata needed to run, recover, display, download, retry, or delete a generation.
• A random application identifier, a support identifier derived from it, and App Store subscription status used to verify and restore access, protect results, apply generation limits, and provide support.
• Limited operational data such as request time, error category, and network/security logs maintained by our infrastructure providers.

Where the data goes

Apple processes purchases. RevenueCat receives the random application identifier and helps Allure read, verify, and restore subscription entitlements. Vercel hosts the Allure API, generation job records, and private result storage. The current iOS release uses Google's image-generation service for every generation; Google receives the selected reference photos and the creative instructions needed to produce the requested image.

Allure confirms that each third party with whom Allure shares user data must provide the same or equivalent protection described in this policy and required by applicable App Store privacy rules. Allure selects these providers under their binding privacy and data-protection terms, limits each disclosure to the information needed for the stated service, and does not permit processors to use your photos or instructions for advertising or independent AI-model training. Allure does not sell your photos. Optional sharing of app activity for advertising measurement is described below.

Usage statistics and advertising measurement

Allure uses limited, combined usage counts to improve its screens, onboarding and reliability. In the United States, United Kingdom, Canada, Australia, New Zealand and France, these statistics start without an opt-in prompt and can be turned off at any time. In other regions or when location is unknown, they remain off until you explicitly allow them in Privacy settings. Allowing or declining does not affect onboarding, your photos, subscription or access. An earlier analytics choice is respected.

The app counts screen reach, ordered progress through onboarding, button actions and technical outcomes. Only a journey start date, environment and a fixed set of numeric counters are sent to Allure's own API hosted by Vercel. These requests contain no account, device, advertising or session identifier, photos, profile answers, receipts, free text or exact event times. They are immediately added to combined counters; Allure does not store the individual request payloads or a server-side history of a person's activity. We do not send these statistics to PostHog, AppsFlyer or advertising partners or use them for personalization or advertising.

To avoid counting a screen again when you return, the app keeps limited progress flags locally for up to seven days; expired flags are cleared on the next launch. These flags have no identifying ID and are not uploaded. Vercel processes network information to deliver and secure requests and provides a country-level decision about whether statistics may default on. We do not save that country or IP in the statistical counters or join infrastructure logs to these statistics. Anonymous combined counters may be retained to compare product versions over time.

Allowing statistics in Settings enables subsequent usage counts; pre-consent activity is not replayed. You can turn Usage statistics off from Account → Privacy settings, without changing access to Allure. This stops future statistics, discards pending counters and clears local statistical progress. Already combined counts cannot be traced back to you or individually erased.

Apple processes purchases, and RevenueCat remains the source of subscription verification and purchase records regardless of optional statistics or advertising choices. The app's purchase-confirmed counter describes a funnel step, not an accounting record.

Allure also uses Apple's SKAdNetwork for aggregate advertising attribution. Apple can report an attributed install and limited conversion signals such as checkout, trial or a completed purchase, subject to its delays, measurement windows and privacy thresholds. These reports do not supply an advertising identifier or a person-by-person event history. Copies of Apple's attribution reports are sent to AppsFlyer to decode the conversion signals. Partner delivery to TikTok and Meta requires an active integration.

Unless you have turned off ad measurement in Allure, AppsFlyer starts at app launch to measure installs, app activity and verified subscription events. AppsFlyer receives an app-specific identifier, vendor identifier, network information and technical data. Its Aggregated Advanced Privacy framework restricts attribution and partner postbacks for users without Apple tracking permission to privacy-preserving aggregate information; those postbacks do not expose device identifiers or person-level attribution to TikTok or Meta. Identifiable cross-app ad tracking and access to the advertising identifier stay off until Apple's tracking permission is granted. Allure requests Apple's permission on the opening screen, without delaying aggregate measurement for the response. When authorized, AppsFlyer may link permitted device-level information with advertising interactions and send corresponding postbacks to TikTok and Meta (Facebook and Instagram).

Allure's Vercel backend receives the measurement preference, AppsFlyer/vendor identifiers, the app connection's IP address and, only with Apple permission, the advertising identifier, to forward RevenueCat-verified purchases. Network context is used only near the time it was captured; the relay does not substitute a server IP or reuse an old address as a current device address. Stable vendor identifiers can accompany later subscription events while measurement remains enabled. A verified event that arrives before device setup finishes can be queued for retry; retry eligibility expires after 24 hours, and expired entries are removed on the next record update. This context is separate from anonymous usage statistics and is cleared on a synced measurement opt-out or data deletion. After deletion, a one-way, non-reversible suppression reference is retained to prevent late subscription notifications from restarting advertising measurement; it contains no purchase data or device identifiers. Event payloads exclude photos, generated images, image URLs, instructions, profile answers, contact details and raw receipts. Accepting photo processing or making a purchase does not grant tracking permission.

Revoke Apple tracking permission in iPhone Settings to stop future identifiable tracking. Turn off Ad measurement in Account → Privacy settings to stop AppsFlyer measurement as well. Earlier in-app declines remain respected until you explicitly change that choice. Server subscription delivery uses the last recorded preference until the app can sync a change. Apple's anonymous SKAdNetwork reports operate separately from AppsFlyer measurement and tracking permission.

PostHog is no longer initialized for new app analytics in this version. Events previously sent with permission may remain there until retention expiry or deletion. Use Delete Allure data in Account to request deletion of associated historical PostHog and AppsFlyer data alongside Allure records. Provider erasure may complete asynchronously and lawful retention can apply.

Vercel, RevenueCat, AppsFlyer and previously used PostHog infrastructure may process data in the United States and other countries under applicable international-transfer safeguards. We rely on applicable statistical exceptions and legitimate interests for limited service-improvement statistics where permitted, and consent where required. Read AppsFlyer's services privacy policy and TikTok's privacy policy and Meta's privacy policy for provider information.

Storage and retention

Your reusable profile photo set stays in Allure's private app storage on your iPhone and is preselected when you create another generation. Submitting a different set replaces the saved profile set. Temporary photo copies are deleted on a best-effort basis after the durable profile set is saved.

Reference photos and creative instructions are handled in memory by the Allure API and are not written to Allure's Vercel Blob result library. They are sent to Google only to perform the generation you requested. Under Google's applicable paid-service data terms, Google does not use API prompts, files, or responses to improve its products. Google may keep limited or transient copies for service operation, caching, safety and abuse prevention, security, and legal obligations under its published retention rules.

Generated images remain in private, user-scoped Vercel Blob storage until you delete the individual result, Allure deletes an older result under the local-history limit described below, or you use Delete Allure data in Account. Limited job, media, generation-limit, and support records remain associated with your random application identifier until they are no longer needed for those purposes or you delete your Allure data, subject to security, fraud-prevention, and legal retention obligations. The app keeps up to 40 results in its local history and attempts to delete the oldest associated server image when that history limit is exceeded.

Deleting the app alone does not automatically delete data already stored on Allure's servers. Delete Allure data in Account permanently removes your generated images and associated Allure job, media, usage, and anonymous-account records from Allure's servers, and clears your profile photos, answers, history, and anonymous identifier from the app. Copies you saved to Photos or shared outside Allure are controlled by you and are not deleted by Allure. This action does not cancel your Apple subscription. Apple and RevenueCat may retain purchase and transaction records under their own legal, fraud-prevention, accounting, and platform obligations.

Withdrawing AI consent

You may withdraw permission for future sharing of your selected photos and instructions with Google at any time. Stop submitting new generations and email info@adenslab.com with the support identifier shown in the app and the words "withdraw AI consent." Allure will treat the request as applying to future AI processing under that identifier and will also accept a deletion request for the associated Allure records. Withdrawal does not undo a generation already sent for processing or erase copies a provider must temporarily retain for security, abuse prevention, or legal compliance. Because Google processing is necessary to create an image, Allure cannot provide new generations after withdrawal unless you choose to give express permission again.

Your controls

• You choose the reference photos saved for your profile set and can replace that set when you submit another generation.
• You can delete an individual generated result in the app, which removes its stored Allure image and media record.
• You can use Delete Allure data in Account to delete your anonymous Allure account and all associated data held by Allure without contacting Support.
• You can save a result to Photos or share it using the iOS share sheet.
• You can withdraw permission for future Google AI processing through Support.
• You can allow or turn off Usage statistics in Privacy settings, manage identifiable ad tracking in iPhone Settings, and request erasure of historical identifiable analytics using Delete Allure data.
• You can manage or cancel a subscription in your Apple ID subscription settings. Cancellation stops future renewal but does not reverse completed processing.

Safety and age

Allure is for adults. You must be at least 18 and may upload only your own photos or photos you are authorized to use. Do not upload minors, intimate images, deceptive impersonations, or content that violates another person's rights.

Questions or deletion help

Visit Allure Support or email info@adenslab.com. Include the support identifier shown in the app, but never email private reference photos.