Uptone
Privacy

Your photos, and what happens to them

Written to be read, not to be survived. If anything here is unclear, that is a bug in the writing. Tell us.

A woman privately reviewing her own portrait on her phone
Your photo · your controlClear controls for what is saved, changed and deleted.

What we store

  • The inspiration images you upload, the photos of yourself you upload, and the looks we generate from them.
  • Your Uptone profile: the colour, feature and preference details you confirm or enter.
  • Your Makeup Bag, if you choose to add products to it.
  • Your account email, and your billing status if you subscribe.
  • Product analytics about which features you use, so we can tell what is working.

What we use it for

  • Creating your results. Your photo and your inspiration are sent to our analysis model to produce your look and its guide.
  • Making your next result better. Your confirmed profile, your saved looks and your feedback shape what we suggest next.
  • Nothing else. We do not sell your photos, and we do not use them to advertise to you.

What you control

  • You can delete any saved photo from Privacy and data inside the app.
  • You can correct or clear any profile trait we inferred.
  • You can delete your account, which removes your photos, looks, profile and Makeup Bag.
  • Deleting is real deletion of the stored files, not a hidden flag.

Who else handles it

  • Anthropic runs the analysis model. Your photo and what you asked for are sent there to produce the look and its guide.
  • fal.ai runs the image model. Your photo is sent there to generate the result.
  • Cloudflare R2 stores the image files. DigitalOcean runs the application and the database.
  • Billing is Dodo Payments on the web, and Apple with RevenueCat in the iOS app. We never receive your card number.
  • Apple and Google see only that you signed in, and only if you use their sign-in.
  • Google Analytics and Microsoft Clarity measure how the website is used. Your photos are not sent to either.

What is public, and what is not

  • A result you share is served at a public address. This is deliberate: the preview card on a link has to be fetchable by a crawler that carries no login, so a shared look is visible to anyone who has the link.
  • The photos you upload are not public. A selfie or an inspiration image is served only with a signature that expires, so a copied address stops working.
  • Unguessable was never the same as authorised, which is why the signature exists rather than a long filename.

How long it is kept

  • Until you delete it. There is no clock running in the background that quietly removes your work.
  • Deleting a photo deletes the stored file. Deleting your account removes your photos, looks, profile and Makeup Bag, and cancels billing first so a renewal cannot revive the account.
  • A link you have already shared stops resolving once the underlying result is deleted.

Age

  • Uptone is not built for children and is not directed at anyone under 13. We do not knowingly collect anything from a child under 13.
  • If you believe a child has created an account, email the address below and we will remove it.

Getting in touch, or complaining

  • Email polostudio.brand@gmail.com. Say which account it concerns and what you want done.
  • You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Deletion you can also do yourself, in the app, without asking anyone.
  • This page was last reviewed on 22 September 2026.

Reference images

  • When you upload an image of someone else as inspiration, we use it to read the look: the colours, placement and shapes.
  • We do not attempt to reproduce that person's identity onto you, and we do not build a likeness of them.
  • Please only upload images you are allowed to use.