Privacy Policy

1. Who is responsible for your information

This policy explains how Colorwise.me handles personal information for the Colorwise.me website and Colorwise One membership (the Services), including the account connections used to provide One benefits in My Best Colors and Wardling. Colorwise.me is the operator and controller of the information described here.

For support, privacy requests and deletion, email support@colorwise.me. Our business contact details are in the Terms and Conditions. Mention which product and account your request concerns. Please do not send your password, full card details or identity documents unless we have explained why limited verification is necessary.

The apps' separate privacy policies

My Best Colors and Wardling each provide a Privacy Policy through the links in the app or its current App Store or Google Play listing. Those notices explain the app's own features, information collection, permissions, AI or other service providers, analytics and retention practices. Contact support if you need help finding the relevant policy.

Using One to unlock an app does not replace that app's policy. This policy covers website and membership processing, including data shared to provide One benefits.

2. Information we collect

• Account information: your email, account identifiers, verification and sign-in information, and any name or profile image you provide. Connecting an app account can also provide its verified identifiers, sign-in provider, email and display name, as explained below. Authentication providers manage credentials.
• Color information and saved analyses: selected skin, hair and eye colors, color-season results, palettes, draping settings and saved results. We store a photo on our servers only when you explicitly choose Save for an analysis or palette.
• Purchases and membership: customer, transaction and subscription identifiers; product, billing and access status; renewal and cancellation information; Wardling styling-credit grants and use; and connections between your One and Wardling accounts. Paddle processes card payments. Colorwise does not receive or store your full card number or card security code. Paddle can provide limited payment-method details, such as card type and last four digits, with the transaction record.
• Technical and usage information: IP address, device and browser type, operating system, referring page, analytics identifiers, pages and features used, coarse location inferred from network information, errors and security logs.
• Communications: support requests, feedback, privacy requests and information you choose to include with them.

Information comes from you, your use of the website, authentication and payment providers, and connected accounts you authorize. You are not generally required by law to provide account, photo or color information, but we cannot deliver features that need information you choose not to provide. Basic website tools can be used without a registered account; saving palettes and activating membership benefits require the relevant account information.

3. Photos, color analysis and AI processing

We use the photos and color inputs you submit through the website to deliver the features you request. We do not use submitted photos or styling inputs to train our AI models, for research, testimonials or marketing. Uploading content does not give us permission to use it for those other purposes.

Your photo stays in your browser during color analysis. Photo preparation, color sampling and face landmarks used to position color effects are processed on your device. Color analysis and Undertone Explorer send selected or sampled color values to our analysis service, not the photo itself.

We upload and store your photo and associated palette images only when you explicitly choose Save for later access. Sharing or downloading a report does not itself save the photo on our servers. Your shared report can include your portrait; you choose where it goes.

Face landmarks used for website color effects are not used to identify you, create an identity-matching biometric template or authenticate you. For an app's own image analysis, styling profiles or image generation, read its separate Privacy Policy.

We require AI providers processing content on our behalf to use submitted photos and styling inputs to deliver the requested service, not to train their general AI models. They process content under applicable service and data-processing terms. Providers can retain limited information for service delivery, security, abuse prevention and legal obligations; processing is not necessarily instant or free of temporary storage.

You choose the images you select, save or submit for a website feature. Where a feature needs browser or device permission, you can manage that permission in its settings; changing permission does not erase content already submitted. Avoid submitting images or details about other people without permission, or information unrelated to the requested feature. You retain ownership of your submitted content.

4. Why we use information

We process account, content and membership information to deliver your requested Services, save and synchronize results, activate access, administer Wardling styling credits and provide support. We use technical and usage data to understand feature use, diagnose failures, secure the Services and prevent fraud. We keep records needed for legal compliance, purchase disputes and enforcement of our agreements.

Where European or UK data-protection law applies, the relevant bases are performance of our contract for requested features and support; legitimate interests in security, abuse prevention and proportionate service reliability; compliance with legal obligations; and consent where required for optional analytics, permissions or communications. You may ask for details of the basis for a particular use. Consent can be withdrawn without affecting earlier lawful processing.

Service messages and marketing choices

We send service messages about your account, purchases and security, and notices required for service or policy changes. We may send optional product news or promotions where you have consented or the law otherwise permits. Use the unsubscribe link in a marketing email, or email support@colorwise.me, to stop marketing messages. This does not stop essential transactional messages.

Before using personal information for a new purpose, we assess whether that use is permitted and provide any notice, choice or consent required by applicable law. This does not change our restriction on using submitted photos and styling inputs for training, research, testimonials or marketing.

5. Data shared to provide One benefits

Your Colorwise account lets Colorwise.me and My Best Colors access your saved palettes, associated images and One membership status.

When you connect Wardling, we exchange verified account identifiers, sign-in provider, email and display name where available, connection and subscription status, and information about your Priority Looks styling credits. We use this to verify account ownership, unlock benefits, provide the included styling credits and prevent duplicate or unauthorized grants. Wardling's own styling data and image processing are described in its separate policy.

Disconnecting Wardling stops future One benefits through that connection. It does not delete either account or cancel your subscription.

6. Service providers and other recipients

For the website and One, we share information as needed for the requested feature or the operational purposes described above:

• Google/Firebase and Google Cloud: account authentication, databases, saved palette and image storage, and hosting. Google Analytics is described in Cookies, local storage and analytics. See Firebase privacy information and the Google Privacy Policy.
• Amazon Web Services: service hosting, storage, databases, processing, security logs and service emails. See AWS privacy information.
• Paddle: web checkout, billing, tax, subscription management, fraud prevention, receipts and refunds. Paddle handles purchase data as a separate controller under its privacy notice.
• Apple or Google sign-in: when you use one of these providers to verify a connected app account, the provider processes the sign-in and supplies the account verification information. See Data shared to provide One benefits.

We disclose only the information needed for the functions and purposes described in this policy. We require providers processing personal information on our behalf to comply with contractual requirements appropriate to that processing, including documented instructions, confidentiality, security and restrictions on independent use, as required by applicable law. Our restriction on using submitted photos and styling inputs for AI training also applies to AI providers processing that content on our behalf.

Payment, sign-in and analytics providers may also act for their own purposes under their policies. Their independent-controller activities are distinct from processing carried out on our behalf. The apps' separate notices explain the providers used for their own features and store purchases.

Authorized staff and providers may access relevant account information or content to investigate suspected fraud, unlawful activity or violations of our Terms, subject to need-to-know access, confidentiality and security controls. We may disclose information when legally required, such as in response to valid legal process, when necessary to protect rights or people's safety, or in a business transfer subject to applicable privacy protections.

We do not sell your photos or styling inputs. A result, image or link you choose to share can be accessible to its recipients and anyone they forward it to. Shared-link access is different from keeping content private in your account. Deleting content from our Services does not delete copies that another person has independently saved or received.

If you follow a link to an external website, that website's privacy policy applies to information you provide directly to it.

7. Cookies, local storage and analytics

The website uses cookies and browser storage for sign-in, preferences, drafts, selected photos, color results and activation steps. Some stored information remains until you clear it or use a feature that replaces or removes it. Clearing browser data does not delete cloud accounts or saved cloud content.

We use Google Analytics to understand website use and diagnose problems, not for advertising tracking. Usage information can include pages and features used, color-season results and steps in the subscription process. Analytics uses a browser identifier and, when you are signed in, your internal account ID to associate activity. This is an account reference, not your name or email address. Photos are not included in analytics. App analytics and diagnostics are described in each app's own policy.

You can manage browser storage and device permissions in their settings and use Google's browser analytics opt-out tool where supported. Blocking storage can affect sign-in or saved preferences. Where the law requires consent for analytics cookies, those cookies require your consent and controls must allow you to refuse or withdraw it.

8. Retention and deletion

We retain website account information, saved palettes, associated photos and results, and membership records while needed for their stated purposes, unless you delete them or request deletion, subject to the legal-retention exceptions below. A canceled or expired One subscription does not itself delete saved content or connected app accounts.

Use deletion controls where available or email support@colorwise.me to request deletion of particular content or an account. We verify ownership using proportionate information. Deleting an item from a visible list and permanently erasing it from every system are not always simultaneous.

We process valid deletion requests as soon as reasonably possible and within applicable legal deadlines. Routine cleanup schedules do not delay a deletion required by law. Personal content is removed from active systems unless a specific lawful retention exception applies; protected backup copies expire through their normal cycles.

We may retain limited purchase, tax, transaction, security and dispute records for as long as applicable law or a specific unresolved issue requires. Retention depends on the record's purpose, legal requirements, fraud risk and any ongoing dispute; it is not permission to keep all uploaded content indefinitely. Backups expire through their normal restricted-access cycles. Payment and authentication providers can have their own legally required or documented retention periods.

The apps' separate policies describe retention and deletion for their own app data. Disconnecting an app from One does not delete its account. If you want deletion across products, identify the relevant accounts and products in your request so it can be verified and handled for each, including information shared through your Colorwise account.

Deleting an account or uninstalling an app does not itself stop billing. Cancel any renewal with the payment provider or contact us for help before deletion.

9. International processing and safeguards

We store our website and membership data on servers in the United States. Our service providers may process information in other countries. Where required, international transfers must be covered by a recognized adequacy decision or appropriate contractual safeguards, such as standard contractual clauses and UK transfer terms. Contact us for details or a copy of the safeguards relevant to your information.

We use technical, organizational and appropriate physical safeguards to protect information against unauthorized access, alteration, loss, disclosure or destruction. These include access controls, authenticated account requests and encryption in transit. Access is limited to authorized employees and contractors who need it for their work and are subject to confidentiality obligations. No storage or transmission method can be guaranteed completely secure. Keep your account credentials and shared links secure.

10. Your privacy rights

Email support@colorwise.me to request a copy of your personal information, correct it or ask for deletion. You can also request a portable copy or ask us to restrict particular uses where the law provides those rights. You can withdraw consent to uses that rely on it, without affecting earlier lawful processing.

You can object to processing based on legitimate interests and to direct marketing. We do not penalize you for exercising your privacy rights.

We handle requests under the law that applies to you. We may need to verify account ownership, clarify the request or confirm a representative's authority. We respond within the applicable legal period and explain any legal exception or extension.

Please contact us first about a privacy concern so we have an opportunity to address it. You also have the right to complain to the relevant privacy regulator, such as the Israeli Privacy Protection Authority, an EEA data-protection authority or the UK Information Commissioner's Office. We cooperate with relevant authorities as required by law.

11. Age and policy changes

The Services are intended for users aged 16 and over. We do not knowingly collect information from, solicit information from or direct marketing to children below that minimum. If you are a parent or guardian who believes a child has provided personal information, contact support. We will assess the report, take action required by applicable law and delete information collected in violation of the applicable age restriction, unless a specific legal obligation requires retention.

We update this policy to reflect changes in our practices or legal requirements and identify the effective date. Where required, we provide notice of material changes and obtain additional consent. An update to this policy or continued use of the Services does not by itself authorize a new use that requires consent.