Kayla Privacy Policy
Last updated: 24 August 2026
Kayla lets you see a hairstyle on your own face before you commit to it. Doing that means handling your photograph, so this policy tells you exactly what happens to it, in plain language.
The short version
- Your photos and the Looks you make live on your phone. We do not keep copies.
- To make a Look, your photo is sent over an encrypted connection to our server, which passes it straight to the image provider that generates the picture. Neither we nor they keep it to train anything.
- We do not ask for your name, your email or your phone number, and we do not know who you are.
- There is no advertising, no ad network and no cross-app tracking in this app.
- Deleting is real. "Delete everything" in Account removes your photos, your Looks and your activity from the phone immediately.
Who we are
Kayla is made and operated by Anaye Milligan, in Houston, Texas, United States.
You can reach us at Anaye@LittleBrownFaces.com about anything in this policy, including a request to delete what we hold.
What Kayla collects
Photos you choose. A photo you take in the app or pick from your library. It stays in Kayla's own storage on your phone. Kayla asks the system for camera or photo access only at the moment you use those features, and you can refuse or revoke it in iOS Settings.
The Looks you make. The generated images are saved to My Looks on your phone, alongside a copy of the photo they were made from so a Look stays whole if you later delete the original.
An anonymous account. The first time you open Kayla, the app quietly creates an account that is nothing but a random identifier. It has no email address, no password and no name attached, and it is what lets our server keep track of how many Looks you have. We cannot use it to work out who you are.
What you bought. If you buy a pass, a pack or a subscription, our server records what you bought, how many Looks it carried, when it expires and how many are left. We never see or store your card, your Apple ID or any payment details. Apple handles the payment and tells us only that it succeeded.
How much you use it. Our server counts how many images you generate each day. This exists to stop a fault or a misuse running up a bill, and it is a count, not a record of what you made.
A diagnostics log, on your phone. Kayla keeps a local log of generation attempts, including timings, whether an attempt succeeded and automated image-quality measurements. It stays on the device and is only ever shared if you deliberately export it.
What you browse and heart, if you use style alerts. Kayla notices which styles you view, favorite and try, so it can work out which categories you like. That working out happens on your phone. If you turn on alerts, we send our server three things: the categories you are interested in, a notification token so we know where to send an alert, and your time zone, so a reminder can name the right date. The record of which individual styles you looked at never leaves your phone. If you never turn alerts on, none of this is sent at all.
What Kayla never collects
- Your name, address, date of birth or phone number
- Your email address, unless you choose to write to us
- Your location
- Your contacts, calendar, microphone or health data
- Payment card details of any kind
- Any advertising identifier. There is no ad SDK and no analytics SDK in this app, and nothing tracks you across other apps or websites.
We do not sell your information. There is nothing here to sell and no arrangement to sell it under.
Where your photo goes when you make a Look
This is the part worth reading closely.
- Kayla may crop your photo on your phone before sending it, so that less of you leaves the device than you gave it.
- The photo is sent over an encrypted connection to our own server, which runs on Supabase in the United States.
- Our server passes the photo, and the reference image for the hairstyle you picked, to OpenAI, which generates the new image and returns it.
- Our server hands the image back to your phone and does not store your photo or the result. We keep neither. OpenAI may hold the image briefly for abuse monitoring, up to thirty days under their API policy, after which it is deleted. It is never used to train their models.
Under OpenAI's API data policy, content sent through their API is not used to train their models and is held only briefly for abuse monitoring before deletion. That policy is theirs, not ours, and you can read the current version at https://openai.com/policies/.
If you would rather no photograph of yours was processed this way, do not make a Look. Browsing the style catalog sends nothing at all.
Face detection, and what it is not
Some app stores call this "face data", so to be exact about ours: the only face data Kayla produces is a rectangle around the face in your photo, measured on your own phone, plus how big that rectangle is and how many faces were found. That is all. It never leaves your device.
Kayla looks for a face in your photo on your own device, to decide whether the photo is framed closely enough and whether to offer you a tighter crop. It also measures colour in the image so it can tell when a generated result has changed your skin tone, which is a fault we want to catch.
Both of those run on your phone. Kayla does not build a faceprint or face template, does not use your face to identify you, does not match you against any database, and does not compare your face with any other person's. Nothing about the shape of your face is stored or transmitted as a biometric identifier.
Where things are kept, and for how long
| What | Where | For how long |
|---|---|---|
| Your photos and Looks | Your phone only | Until you delete them, or delete the app |
| Your diagnostics log | Your phone only | Until you delete everything |
| Your anonymous account id | Our server | Until you ask us to delete it |
| What you bought and what is left | Our server | Until you ask us to delete it, or seven years if tax law requires the record of a sale |
| Daily generation counts | Our server | Rolling, and not kept indefinitely |
| Your photo, during generation | In transit only | Not stored by us at any point |
Who else is involved
Three companies, and only these three:
- Apple, which sells the passes and subscriptions and handles all payment. Apple's own privacy policy governs that.
- Supabase, which hosts our server and database in the United States.
- OpenAI, which generates the images.
No one else receives anything. We do not share your information with advertisers, data brokers or partners, because we have none.
We may disclose information if the law genuinely requires it, and if that ever happens we will tell you unless we are legally forbidden from doing so.
Your choices
Delete everything. Account has a "Delete everything" control. It removes your photos, your Looks, your diagnostics log and your browsing activity from the phone right away, and it cannot be undone.
Delete what is on our server. Email Anaye@LittleBrownFaces.com from the device you use, and include the account id shown in the app, and we will delete the account record and everything attached to it. If you have unused Looks, deleting the account deletes those too.
Turn off alerts. In Account, or in iOS Settings under Notifications.
Withdraw photo or camera access. In iOS Settings, under Kayla. Kayla will keep working; it just will not be able to make new Looks.
Depending on where you live, you may also have the right to ask what we hold about you, to correct it, to receive a copy of it, or to object to how we use it. Write to us and we will do it. We will not charge you and we will not treat you differently for asking.
Children
Kayla is not intended for children under 13, and we do not knowingly collect anything from a child under 13. If you believe a child has used Kayla and given us something, write to us and we will delete it.
Security
Everything Kayla sends travels over an encrypted connection. The database tables that hold accounts and purchases deny access outright to the app itself; only our server can read them, using a key that never leaves the server. The key belonging to our image provider is held on the server and has never been distributed inside the app.
No system is perfect, and we will not claim otherwise. If something goes wrong that affects you, we will tell you.
If you are outside the United States
Kayla's server and its image provider are in the United States, so using Kayla means your photo is processed there. Privacy law in the United States may differ from the law where you live.
Changes to this policy
If we change what Kayla does with your information, we will update this policy and change the date at the top. If the change is significant, we will tell you in the app before it takes effect rather than quietly editing this page.
Contact
Anaye@LittleBrownFaces.com