PRIVACY & PHOTO SECURITY

Your face is not our product.

How DyeCast handles your photos and data — in plain words.

Photos are optional

You can describe your hair by hand and never take a photo. Every forecast uses the choices you confirm, not the raw photo.

What happens when you use a photo

• Camera or upload, your choice. You can take the photo with your phone's camera or your computer's webcam, or upload one. The live camera view never leaves your browser, and the camera turns off as soon as the photo is taken.
• Cleaned in your browser. Before upload, your photo is re-encoded on your device, which strips location (GPS), camera and other hidden metadata, and downsized.
• Measured on your device. Hair color is measured in your browser with on-device AI. Box photos (for reading shade codes) and inspiration photos never leave your device at all.
• Analyzed by YouCam. To suggest your hair color class, length and density, and to render try-on previews, a copy is sent over HTTPS to YouCam (Perfect Corp). Only after you tick the consent box.
• Deletion requests and retries. After delivering an analysis or a preview, we ask YouCam to delete its task, uploaded photo and outputs. Unconfirmed deletions and interrupted tasks remain queued for a daily retry. This is not a guarantee of instant deletion: YouCam must confirm it. An upload whose task never started cannot be deleted through its File API and falls under YouCam's automatic retention (up to 30 days).
• Previews are delivered once. Rendered images pass through our server to you. Their download links never reach your browser and are erased as soon as the preview is delivered (or by the daily cleanup if it never is).
• Kept in this browser, for you only. A selfie you analyze is kept in this browser for previews, tied to your account, for up to 30 days. Signing out, deleting your account or "Clear photos on this device" in Settings removes it, and another account on the same browser never sees it.

If you choose to store your selfie

• Off by default. You can turn it on in Settings so previews work on any device.
• Encrypted with AES-256-GCM using a key unique to you, which is itself encrypted with a server key that never sits in the database.
• Each photo is cryptographically bound to your account, so it can't be read as anyone else's.
• Kept for 30 days, then deleted by a daily cleanup. Deleting your photos or your account also deletes your key.
• Served only to you, over an authenticated connection, never cached.

Your account

• Passwords are hashed with scrypt; sessions use random tokens stored only as hashes. Repeated sign-in attempts are slowed down, per email and per network.
• Sign in with Google uses OAuth with PKCE; we receive your name and verified email, nothing else.
• Download your account data as JSON (photo metadata, not image files), or delete your account in Settings. Deletion removes your profile, saved checks, stored photos and key, and queues any outstanding YouCam tasks for deletion. Usage records without your account identifier stay for the daily limits; short-lived abuse-prevention counters are removed by cleanup.

What we never do

We don't sell data, run ads, use your photos to train models, or share your hair profile with brands.

Third-party processing: YouCam API privacy policy. DyeCast is an educational prototype, not medical advice.