Privacy Policy
Last updated: June 2026
Your photos & biometric data
The selfies you upload are used only to generate your headshots. We treat facial images as sensitive biometric data and only process them with your explicit consent, which you give before uploading.
Automatic deletion
We never store your photos on our own servers — they pass through only to generate your headshots, and we keep no copy. Two separate clocks then protect them: the secure links we give you to view and download your results expire within 7 days, and the AI provider that processes your photos (Magica) automatically deletes the uploaded selfies and generated images within 30 days. Deleting your account removes your account data (sign-in, purchase history and usage records) immediately; any photos still held by the AI provider expire on the same 30-day clock. For anything else, email us at the address below.
Children's photos
Our baby and children portrait features are for parents and legal guardians only. By uploading a child's photo you confirm you are that child's parent or legal guardian and consent to the processing described here — we require this confirmation before any child's photo is processed. Children's photos get the same protections as everything else (never stored on our servers, never used to train models, never sold, automatic 30-day deletion). Our service is not directed at children and we do not knowingly collect information from anyone under 13; accounts may only be created by adults.
Where data is processed
Image generation runs on professional Western-hosted AI infrastructure. We do not sell your photos or use them to train public models.
Your own apparel & logos
If you upload photos of yourself wearing branded apparel (for example, your own organization's gear), you confirm you own that apparel and the resulting headshot is for your personal use.
Service providers we use
A small number of trusted providers process data on our behalf, each only for the purpose listed: Magica (AI image generation — receives your photos to create your headshots, auto-deletes within 30 days), Clerk (sign-in and account management), Stripe (payments — we never see your card number), Vercel (website hosting), Resend(transactional email, like "your photos are ready"), Prodigi (print fulfillment — receives your chosen photo and shipping address only if you order prints), Vercel Analytics and PostHog (aggregate, privacy-friendly analytics, loaded only after you accept cookies), Rewardful (affiliate/referral attribution — sets a referral cookie so we can credit a partner who referred you; loaded only after you accept cookies), and Upstash(abuse protection — stores only short-lived request counters, never photos). We don't sell your data to anyone.
Cookies & similar technologies
We use a small number of essential cookies plus optional analytics and referral cookies. Clerk sets cookies to keep you securely signed in. Stripe sets cookies during checkout to process payments and help prevent fraud. These essential cookies are required for the service to work. The optional cookies — Vercel Analytics and PostHog ( privacy-friendly, aggregate usage measurement, with no session recording and with on-screen text masked) and Rewardful (a referral cookie for affiliate attribution) — load only after you accept cookies. When our cookie banner appears you can Accept or Reject the optional cookies; if you reject, none of the analytics or referral scripts load. You can also block cookies in your browser settings, though some features may stop working.
Contact
Questions? Email smithappsupport@gmail.com.