What exactly happens to your photo?

1. Who is responsible and what this policy covers

The business operating the Service under the Lace Riot name (“Lace Riot”, “we”, “us”) is responsible for the processing described in this policy. Privacy contact: contact@laceriot.com. The developer details shown in the applicable app store identify the business offering the app.

This policy covers laceriot.com, the Lace Riot mobile app, virtual try-on, visual product search, purchases, complimentary support access, support, feedback, generated-content reports, attribution, and technical events. Fal.ai, OpenAI, Apple, Google, hosting providers, and linked sellers may act as processors, service providers, contractors, or independent businesses depending on the activity and applicable law. A seller you open from a search result applies its own policy.

2. Information we process

We do not require a profile containing your name, phone number, contacts, or precise location. If you email us, we necessarily receive your email address and message. A server, hosting provider, content-delivery network, or security service may receive IP address, user-agent, request timing, and related technical information.

3. Your photo, step by step

1. Selection on your device. iOS or Android gives the app access to the photo you select or take, according to the system permission you grant.
2. Preparation on your device. The app may resize, reformat, or compress the image and encode it for transmission.
3. Encrypted transport. The app sends the person image over HTTPS with the random app identifier. A standard try-on includes the selected catalogue outfit identifier and image; Custom Outfit includes only your clothing-change description and no separate garment image.
4. Processing by Lace Riot. The server validates the request and handles the incoming person photo, any selected catalogue outfit image, and any Custom Outfit description in working memory. The Service code does not write the input images, base64 payloads, or custom description to the Lace Riot database.
5. Under-20 appearance safety check by OpenAI. Before reserving a try-on credit, the server sends OpenAI the person photo, narrow server-generated classification instructions, and a one-way safety identifier. The server age-rejects the image only when a sufficiently visible face appears younger than 20. A missing, hidden, or unassessable face and uncertain age alone do not cause age rejection. A clear absence of any person or a clearly group photo is rejected separately as an invalid try-on input. An invalid model response or provider outage stops the request without reserving a credit.
6. Generation by fal.ai. For a standard try-on, the server sends fal.ai your photo, the selected catalogue outfit reference, and a server-generated instruction. For Custom Outfit, it sends only your photo and a server-generated instruction containing your bounded clothing-change description as untrusted descriptive text. Fal.ai runs the configured model and creates a synthetic output.
7. Provider storage control. Requests use X-Fal-Store-IO: 0, which asks fal.ai not to enable persistent platform storage for the input/output payload. Fal.ai documentation explains that this does not automatically delete files from its CDN or eliminate security, legal, or infrastructure records.
8. Result URL. Fal.ai returns a URL for the generated image. Lace Riot stores the URL, status, model, error code if any, a catalogue outfit identifier or custom-outfit flag, and time—not the input prompt or a binary copy of the generated image in its database.
9. Display and local saving. The app loads the image from the external URL. It is placed in your photo library only if you tap Save and grant any permission required by your system.
10. Optional report. In app versions with Report this AI result, you can flag a generated result from its result screen. The form sends your chosen reason, optional comment, and references to that result and your app/account record. It does not upload your original photo again. Our team can review the linked result and record a review status and notes. Avoid adding personal information to the comment.

The provider-hosted result and technical, security, backup, or compliance copies may be subject to fal.ai's current rules and retention. We do not control or guarantee the expiry date of a particular URL. Save a result locally if you want to keep it, or contact us if you want to request deletion of associated records.

4. Product search does not receive your personal photo

When you run visual product search, the app sends OpenAI only the selected catalogue outfit image, trusted catalogue information, a search instruction, language or region context, and a one-way safety value derived from the random app identifier. Your personal try-on photo is not part of this request.

The request uses the OpenAI Responses API, web search, and store=false. That setting disables storage of the response object as application state; it is not a promise of zero logs. Under OpenAI's published API data controls, standard abuse-monitoring logs may generally be retained for up to 30 days, with longer or content-specific retention where law or safety review requires. API data is not used to train OpenAI models by default unless the API account owner opts in; Lace Riot does not opt in.

The response and cited links are returned to the app. The current implementation does not save the product-search response in the Lace Riot database. Once you open a result, the independent website processes information under its own privacy policy.

5. Organisations that may receive information

We may also disclose information reasonably necessary to professional advisers, a successor in a genuine corporate transaction, or a competent authority when required by law or necessary to protect people, rights, safety, or Service integrity. We do not sell personal photos or use them for behavioural advertising.

6. Purposes and legal grounds

We process information only for the purposes described here: to perform your requested feature, manage purchases and credits, provide support, maintain security, prevent abuse and duplicate transactions, diagnose failures, comply with law, and establish or defend legal claims.

• United Kingdom: where UK GDPR applies, the main grounds are performance of a contract or steps you request, compliance with legal obligations, legitimate interests in security, fraud prevention, diagnostics, and legal claims after balancing interests, and consent where the law requires it.
• Canada: where PIPEDA or substantially similar provincial law applies, we rely on meaningful consent and other grounds permitted by law, limit collection to identified reasonable purposes, and permit withdrawal of consent subject to legal or contractual limits and reasonable notice.
• United States: we collect and disclose the categories listed in this policy for the stated operational, security, support, transaction, and legal purposes, including through service providers or contractors. State-law rights apply where the relevant law covers us and the request.

A photo that includes a face is personal information, but Lace Riot does not use facial recognition or process it to uniquely authenticate or identify you. AI models analyse visible features to perform the under-20 appearance check and the requested image transformation. The check is not formal identity or legal-age verification and can be wrong. A photo can nonetheless reveal sensitive information, so upload only an ordinary, non-explicit fashion photo and do not submit material revealing health, intimate life, or other sensitive circumstances.

7. Retention

• Input photos and custom description in the Lace Riot database: not stored as image files, base64 payloads, or prompt text. Working-memory, transport, and short-lived infrastructure buffers may exist as needed to complete and protect the request.
• Generation record and result URL: normally retained for up to 90 days, or deleted earlier following a valid deletion request. Records necessary for an unresolved support or safety case, fraud prevention, a legal obligation, or a legal claim may be retained for that purpose.
• fal.ai: we request disabled I/O storage through the header described above, but a result CDN file and data required for provider security or law may remain under the provider's current rules.
• OpenAI: both the under-20 appearance check and product search use store=false; standard abuse-monitoring retention and documented exceptions may still apply.
• Purchase and transaction records: retained as needed for store reconciliation, accounting or tax requirements, fraud prevention, and legal claims. For a consumable pack, Lace Riot stores a durable replay-prevention record containing one-way hashes of the store transaction identifier and random app/account identifier, the product and credit amount, and whether the verified store environment was production or test. It does not retain the raw Google purchase token in this ledger.
• IP and account-abuse records: the canonical IP, one-way account key, first/last-seen times, and restriction information are retained while reasonably needed to prevent repeated starter-credit abuse, investigate mistakes, and protect legal claims. An automatic restriction on further free starter access normally expires after seven days; a manual administrator restriction can last longer. Paid entitlements are not removed by an automatic starter restriction. Eligible observations are normally removed after 90 days without a matching request; evidence tied to an active/manual restriction or needed for a legal claim can be kept longer. The narrow account/IP observation can therefore remain after an anonymous account is deleted so immediate deletion and recreation does not reset the control.
• Generated-content reports: stored separately with the reason, optional comment, review status, review notes, and timestamps. Deleting an account or result record can remove its link to a report without automatically deleting the report content. Ask support to include report text and review notes in a deletion request; any applicable security or legal retention exception must be considered separately.
• Support and feedback: normally retained for up to 90 days. Information needed to resolve an open request, comply with law, or handle a legal claim may be retained longer for that purpose; unnecessary sensitive attachments may be removed sooner.

The consumable replay-prevention record may remain after the associated anonymous account is deleted. Keeping this narrow tombstone prevents deletion and recreation of an account from making the same paid store transaction redeemable again. A valid deletion request may therefore remove the account link and other eligible records while this hashed transaction-integrity record remains.

Our standard retention period for operational personal data is 90 days. The exceptions above cover active entitlements, open requests, payment integrity, security and legal requirements. Retention at fal.ai and OpenAI follows the provider rules described above; the 90-day policy is not a guarantee that provider-hosted image URLs expire on that date.

8. International processing

Providers may be located or operate infrastructure outside your country, including in the United States. Information may therefore be processed in jurisdictions with different privacy laws and may be available to local authorities under lawful process. Where UK transfer rules apply, we use an available legal mechanism such as adequacy regulations, approved contractual safeguards, or another permitted basis. Canadian users understand that service providers outside Canada may process information under foreign law. We apply contractual and technical safeguards where appropriate and available.

9. Your privacy choices and rights

Depending on your location, the law, and the processing involved, you may have rights to know or access information, receive a copy, correct inaccurate information, delete information, restrict or object to processing, obtain portability, withdraw consent, opt out of certain uses, and appeal a refusal. Exceptions may apply for security, legal compliance, transaction records, another person's rights, or legal claims.

Email contact@laceriot.com with “Privacy request” in the subject to request access, correction, or deletion. In app versions that display Installation ID in Settings, press and hold the ID to copy it or use Share installation ID, then include it in your request. If these controls are unavailable, email us with your platform and app version so we can help identify the relevant records.

App versions with Request data deletion in Settings can prepare an email containing your installation ID. You must send that email yourself. Opening a draft does not submit a request or automatically delete data. Support handles requests and may ask for proportionate verification so that we do not disclose or delete the wrong person's information. Do not send your photo, password, full card number, or sign-in code for verification.

A privacy request or removal of app data does not cancel an active Apple or Google subscription. Use Manage subscription in Settings or the store's subscription controls separately.

You may use an authorised agent where applicable law permits, subject to verification of authority and identity. We will not discriminate against you for exercising a privacy right. If we deny a request, we will explain the reason and any available appeal unless law prevents that disclosure.

• UK: rights may include being informed, access, rectification, erasure, restriction, objection, and portability. You may complain to the Information Commissioner's Office.
• Canada: you may request access and challenge the accuracy or completeness of personal information, withdraw consent subject to lawful limits, and challenge compliance. You may complain to the Office of the Privacy Commissioner of Canada or the relevant provincial regulator.
• United States: covered state laws may provide rights to know, access, delete, correct, obtain portability, opt out, limit certain sensitive-data uses, and appeal. You may also contact your state attorney general or privacy authority.

10. United States notice at collection

During the preceding 12 months, the Service may have collected the categories described in Section 2: identifiers and network activity, commercial and transaction records, user-provided photos and related visual information, generated-result metadata, app events, feedback, generated-content reports, and support communications. Sources are you, your device, Apple or Google transaction systems, our providers, and normal Service interactions. Purposes and recipient categories are described in Sections 5 and 6.

We do not sell personal information for money. We do not “sell” or “share” personal information for cross-context behavioural advertising, and we do not use personal photos for targeted advertising, as those terms are defined by applicable US state privacy laws. We have no actual knowledge that we sell or share personal information of anyone under 18; the Service prohibits all use by minors.

11. Automated processing

Under-20 appearance screening, generation, and product matching are automated, but they are not intended to make a decision producing legal or similarly significant effects about you. The age screen rejects only when a sufficiently visible face appears younger than 20; it does not reject merely because a face is missing or unassessable or because age is uncertain. A clear absence of any person or a clearly group photo may still fail the separate input rules. The screen can classify an adult photo incorrectly and is not proof of actual age. A safety rule, rate limit, credit check, provider filter, or repeated starter-account threshold can also reject a request automatically. Contact Support if you believe a restriction is mistaken.

We do not use your photo to decide credit, employment, insurance, healthcare, identity verification, emotion, attractiveness, or another high-impact matter.

12. Adults only and no third-party photos

The Service is for adults aged 18 and older. You may upload only your own photo. If you believe a child or another person was uploaded without authority, contact us immediately with technical context, but do not resend or distribute the image. We will respond according to the credibility of the report, applicable law, safety needs, and our ability to identify the record.

13. Security and its limits

Measures include HTTPS transport, server-side API keys, request validation, rate limits, pseudonymous identifiers, and data minimisation. No system is completely secure. Do not upload material whose disclosure could cause you serious harm; an ordinary, clothed fashion photo is sufficient for virtual try-on.

If you suspect a security incident, email contact@laceriot.com promptly without attaching a sensitive file.

14. Website, device storage, and analytics

The current public website does not set its own marketing cookies or include behavioural-advertising trackers. Hosting and security infrastructure may create necessary request logs. The mobile app stores settings, a random identifier, and operational information locally. You control camera, photo-library, and notification permissions in your device settings.

15. Changes and contact

We may update this policy as the Service, providers, or laws change. We will update the effective date and provide additional notice where a change materially affects your rights and the law requires it. Questions, requests, and complaints: contact@laceriot.com. See the Terms and Support page for related information.