Privacy

Your account details from your sign-in provider — an email address and, if you give one, a name and avatar.

Whatever you put in your collection: wig details, photos you upload, notes, prices, and your wear and care history.

If you use try-on, the photo of yourself you choose to upload, and the generated image produced from it.

A photo of your face is sensitive information, and it is treated differently to everything else here.

We ask for your explicit consent before you upload one, and record when you gave it. You can withdraw it at any time.

To generate a try-on, your photo and the wig’s product images are sent to a third-party AI image provider. They are used to produce your image and for nothing else — not to train a model, not for advertising.

Your photo and the generated result are deleted automatically after your retention period, which defaults to 30 days and which you control. Deletion is run by a scheduled job, not on request.

Files live in private storage. They are never publicly readable — the app issues short-lived links that expire within the hour, and only to you.

When we import a wig from a link, product images are copied into our own storage rather than loaded from the retailer, so browsing your collection does not tell them what you are looking at.

We measure how the app is used so we know which parts are worth improving — that a wear was logged, that a try-on finished, how long it took. This is handled for us by PostHog.

What we send is counts and categories, tied to your account identifier. We do not send your photos, your wig names, your brands, your notes, your email address, or anything else you have typed. There is no session recording, so nothing on your screen is ever captured.

We do not sell your information, and we do not run advertising.

We do not share your collection with other users. Try-on results are private unless you deliberately create a share link, which you can revoke.

You can delete everything from your profile. That removes your stored files and puts your collection beyond reach immediately.

Deleting your sign-in account also removes your data here — we act on the deletion notice from the sign-in provider.

To ask what we hold about you, correct it, or complain about how it has been handled, contact us and we will respond within 30 days. If you are not satisfied, you can escalate to the Office of the Australian Information Commissioner.