Privacy Policy
Last updated: October 2026
Your photos & biometric data
The selfies you upload are used only to generate your headshots. We treat facial images as sensitive biometric data and only process them with your explicit consent, which you give before uploading.
How long your photos are kept
We never store your photos on our own servers — they pass through only to generate your headshots, and we keep no copy. The secure links we give you to view and download your results expire within 7 days. To create your headshots, the AI provider that processes your photos (Magica) stores the uploaded selfies and generated images on its own systems under its own retention policy, which does not currently set a fixed automatic-deletion period. Deleting your account removes your account data (sign-in, purchase history and usage records) immediately, but does not by itself remove photos held by the AI provider. To have your photos removed there, email us at the address below and we will ask the provider to delete them.
Children's photos
Our baby and children portrait features are for parents and legal guardians only. By uploading a child's photo you confirm you are that child's parent or legal guardian and consent to the processing described here — we require this confirmation before any child's photo is processed. Children's photos get the same protections as everything else (never stored on our servers, never used to train models, never sold, and removal from our AI provider on request). Our service is not directed at children and we do not knowingly collect information from anyone under 13; accounts may only be created by adults.
Where data is processed
Image generation runs on professional Western-hosted AI infrastructure. We do not sell your photos or use them to train public models.
Your own apparel & logos
If you upload photos of yourself wearing branded apparel (for example, your own organization's gear), you confirm you own that apparel and the resulting headshot is for your personal use.
Service providers we use
A small number of trusted providers process data on our behalf, each only for the purpose listed: Magica (AI image generation — receives and stores your photos to create your headshots, under its own retention policy), Clerk (sign-in and account management), Stripe (payments — we never see your card number), Vercel (website hosting), Resend (transactional email, like "your photos are ready"), Prodigi (print fulfillment — receives your chosen photo and shipping address only if you order prints), Vercel Analytics and PostHog (aggregate, privacy-friendly analytics, loaded only after you accept cookies), Rewardful (affiliate/referral attribution — sets a referral cookie so we can credit a partner who referred you; loaded only after you accept cookies), and Upstash (abuse protection — stores only short-lived request counters, never photos). We don't sell your data to anyone.
Cookies & similar technologies
We use a small number of essential cookies plus optional analytics and referral cookies. Clerk sets cookies to keep you securely signed in. Stripe sets cookies during checkout to process payments and help prevent fraud. These essential cookies are required for the service to work. The optional cookies — Vercel Analytics and PostHog ( privacy-friendly, aggregate usage measurement, with no session recording and with on-screen text masked) and Rewardful (a referral cookie for affiliate attribution) — load only after you accept cookies. When our cookie banner appears you can Accept or Reject the optional cookies; if you reject, none of the analytics or referral scripts load. You can also block cookies in your browser settings, though some features may stop working.
Contact
Questions? Email smithappsupport@gmail.com.