This policy explains what personal information TrueStyleAI collects, why we collect it, who we share it with, and the choices you have. It covers the TrueStyle Admin and TrueStyle Customer mobile apps and our web applications (together, the “Service”).
The Service is operated by TRUESTYLEAI LIMITED, a company registered in New Zealand (“TrueStyleAI”, “we”, “us”). We handle personal information in accordance with the New Zealand Privacy Act 2020. If you have questions about this policy, contact our Privacy Officer at admin@truestyleai.com.
TrueStyleAI is a platform for barbershops and salons. There are two kinds of user:
Salon staff accounts are created by an organisation administrator, not by self sign-up. If you are a customer, the salon you visit is also a controller of your information, and its own privacy terms may apply alongside this policy.
We use Auth0 to authenticate all users. When you sign in, we receive your email address, your name, and the role assigned to your account. We do not receive or store your password — authentication is handled entirely by Auth0.
Depending on your role and what you choose to provide: name, email address, phone number, date of birth, gender, address, and a profile photo.
The apps request camera and photo library permission only to support these features, and only at the point you use them. We access the specific images you select — we do not scan or upload the rest of your photo library.
Records created as you use the Service: queue entries and wait times, appointment and visit history, selected services, hairstyle selections and AI style sessions, reviews you leave, and QR codes used to join the queue at a salon.
In our customer apps, if you enable notifications we store a device token supplied by Firebase Cloud Messaging so we can send you queue and offer alerts. The TrueStyle Admin app does not use push notifications.
We do not collect your location. We do not use advertising identifiers, advertising SDKs, analytics SDKs, or crash-reporting SDKs. We do not sell your personal information, and we do not share it with third parties for advertising purposes.
We do not use your information to make automated decisions that produce legal or similarly significant effects.
If you use the hairstyle recommendation feature, the photo you submit is sent from our backend to the Google Gemini API to generate style previews and recommendations. The photo is transmitted over an encrypted connection and is processed in order to return a result to you. We do not use your photos to train our own models.
When a barber photographs a customer’s finished haircut, the front photo and the AI preview the customer chose are also sent to the Google Gemini API. It returns a score and a short coaching note on how closely the cut matched the preview. This feedback is shown only to that barber, to help them improve. It is not shown to the customer, not used to compare barbers, and not used to make any decision about the customer.
Facial images are sensitive. If you would prefer not to have a photo processed this way, simply do not use the hairstyle recommendation feature — the rest of the Service works without it — and ask your barber not to photograph your finished haircut. You can ask us to delete a photo you have already submitted at any time (see section 8).
We share personal information only with the providers needed to run the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Auth0 (Okta) | Authentication and user accounts | Email, name, role |
| Microsoft Azure | Application hosting, database and photo storage | Service data |
| Google (Gemini API) | AI hairstyle recommendation; barber coaching feedback | Submitted photo; finished-haircut photo and chosen preview |
| Google (Firebase Cloud Messaging) | Push notifications, customer apps only | Device token |
| Twilio | SMS notifications | Phone number, message content |
| Resend | Email notifications | Email address, message content |
We may also disclose information where required by law, or to protect the rights, safety and property of our users or of TrueStyleAI.
Service data is hosted on Microsoft Azure infrastructure in Australia. Some of the providers listed in section 5 process data in other countries, including the United States.
These providers process your information on our behalf, only to run the Service. Under the New Zealand Privacy Act 2020 we remain responsible for your information while they do.
All traffic between the apps and our servers is encrypted in transit using HTTPS. Access tokens are held in the secure credential storage provided by your device’s operating system. Access to records within the Service is restricted by organisation and by role, so staff can only see data belonging to their own salon.
No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access.
If a privacy breach involving your information causes, or is likely to cause, serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.
We keep personal information for as long as your account is active and for as long as we need it to provide the Service. Salon records such as visit history may be retained while that salon’s account remains active, and afterwards only where we are required to keep them.
To request deletion of your account and associated personal data, email admin@truestyleai.com from the address on your account, or ask your salon administrator. We will confirm your request and delete the data within 30 days, except where we are legally required to retain specific records. Photos, including photos of your haircut taken by your barber, can be deleted on request without deleting your whole account.
Step-by-step instructions, and a full list of what is deleted and what is kept, are on our Delete your account or data page.
Under the New Zealand Privacy Act 2020 you can ask to see the personal information we hold about you, and ask us to correct it. We will respond as soon as we reasonably can, and within 20 working days.
Depending on where you live, you may have further rights, such as having your information deleted, objecting to or restricting how we use it, or receiving a copy in a portable format.
To make a request, contact our Privacy Officer at admin@truestyleai.com. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at www.privacy.org.nz.
The Service is not directed at children under 13, and we do not knowingly collect their personal information. Where a minor is a customer of a salon, their information should be provided and managed by a parent or guardian. If you believe a child has provided us with personal information, contact us and we will delete it.
We may update this policy as the Service changes. When we do, we will revise the “Last updated” date above. If a change materially affects how we handle your information, we will provide a more prominent notice.
Privacy Officer, TRUESTYLEAI LIMITED
Email: admin@truestyleai.com