Privacy Policy

Last updated: September 3, 2026

Stylst is built to need as little personal data as possible. You can use the mobile app without an account; while a photo is being generated, we may invite you to add an email so your photos and credits can follow you to another device, but you can skip that step. The web app uses an emailed one-time code for sign-in. We do not ask you to create a password or a public profile.

What we process

Photos you upload and results we generate. Your uploaded photo is sent to our server and to a third-party AI image-processing provider to create the result. We retain the uploaded original privately for delivery, revisions, quality review, and service improvement. We do not publish the uploaded original. Except for the private listing-import results and paid Property Films described below, every generated result automatically receives an anonymous public Stylst page and may appear in our public inspiration feed, search engines, marketing, advertising, and social media. Ordinary generated-photo results have no private-result option. Public pages do not contain your name, email, device id, account information, address, or profile. Automated safety checks may suppress a result containing visible people or identifying information. Deleting an ordinary generated result removes its public image and page immediately and permanently erases its retained files within about a day; deleting your account erases its photos immediately. We do not sell your photos to third parties. Our AI provider may retain API inputs briefly for abuse monitoring per its API data policy; that data is not used to train its models.
Private listing imports. Listing import is available only to a signed-in account. We keep the listing name, source provider, source URL, your versioned rights acceptance, uploaded source photos, private thumbnails, analysis, selections, order state, and audit records needed to resume the draft and complete the order. Uploaded photos selected for staging are sent to our AI image-processing provider. We keep abandoned drafts and unselected source artifacts for seven days after the last activity, then delete them. Completed listing groupings and generated Gallery results remain in your account, but we do not retain upstream portal image URLs. Deleting the import removes its remaining source artifacts, and deleting the account removes its imports and artifacts immediately. Imported sources and results stay private: they are not added to Public Looks, used in marketing, published back to a listing portal, or shared automatically.
A device or browser identifier. Before you sign in, a random ID generated on your device or in your browser lets us keep track of credits, photos, and progress. For mobile attribution, Tenjin also assigns an anonymous installation ID. On Android, Tenjin may receive Google's resettable Advertising ID, its limited-ad-tracking setting, App Set ID, and Play install referrer so a paid click can be matched to an install. On iOS, Tenjin may receive Apple's app-scoped Identifier for Vendor (IDFV) and SKAdNetwork attribution data. We do not request Apple's App Tracking Transparency permission or collect IDFA. If you later sign in or link an email, the Stylst records associated with your device ID may be merged into your account so you do not lose them.
First-party site measurement (web only). To understand where people get stuck, we record which steps of the flow a browser reaches — for example, landed, chose a photo, reached sign-in, or finished a photo — against a random browser ID, along with the referring source. For paid visits, the advertising platform's click identifier may be stored in your browser until it is cleared or replaced. We may also keep a short-lived opaque attribution token and the associated click identifier on our server for up to 30 days so attribution can survive navigation or opening the same link in another browser. The opaque token itself contains no photo, email, or form content, and our server does not return the platform click identifier to the browser.
Analytics and advertising measurement (web and mobile). On the web, we use browser tags and server-to-server conversion reporting from Google, Meta, and Reddit to measure, attribute, and improve our advertising. Depending on the event and what is available, we may report that a browser visited a page, selected a photo, created an account, completed a photo, began checkout, or purchased, together with limited matching signals such as an advertising click ID, platform cookie or UUID, a hashed device or account ID, IP address, browser user agent, screen dimensions, and — for an identified account event — a normalized and hashed email address. These partners process the signals under their own privacy policies and settings: Google, Meta, and Reddit. Reddit's automatic email matching is enabled and may recognize an email typed or displayed in the web sign-in flow; Reddit's phone-number matching is disabled. In the mobile app, we use Tenjin for install, session, re-engagement, and funnel measurement. Tenjin may receive the anonymous installation ID and platform attribution identifiers described above, limited app, operating-system, and device metadata, and named milestones such as selecting or uploading a photo, completing a first result, viewing the paywall, or making a verified purchase. We do not send uploaded photos, prompts, generated images, optional brand-kit details, email addresses, account data, or IDFA to Tenjin.
Purchases and receipts. Credit packs are processed by Apple or Google in the mobile app, or by Stripe on the web. We keep the provider, product, purchase date, transaction reference, refund status, and the amount, currency, and tax details the payment provider makes available so you can find your purchases and download billing records. When you view or download a web receipt, we retrieve and process on demand the buyer name, email, billing address, and masked payment-method summary that you already supplied to Stripe, when available, to prepare that billing record. Receipt generation does not create a new local copy of those Stripe-supplied details. Stripe remains the source of truth for web payment amounts and documents. If tax collection is activated after the required registrations and taxability review, Stripe may collect or update billing-address details to determine the applicable tax. Apple and Google issue and control the official receipts for purchases made through their stores; Stylst links you to those records rather than recreating them. After Apple or Google verifies a production mobile purchase, we report the product ID, platform, currency, and revenue amount to Tenjin for attribution. Sandbox and test purchases are excluded. We never receive or store your full card number or store-account payment credentials.
Your brand kit (optional). If you set one up, we store the business details you enter (business name, phone or handle, service area, logo) tied to your device ID or account, solely to place them on the share cards, reels, and exports you create. Brand-kit phone numbers and handles are not used for advertising matching. Delete the kit anytime from the same screen, or contact us to remove its details and logo from our servers.
Experimental Cinematic Property Films. When you place a film order, we process the listing address and URL, property facts, contact call-to-action, selected Stylst images, exterior or view uploads, attestations, order history, and human-review notes. Film sources may be sent to our video-generation provider through OpenRouter and to our rendering infrastructure. Unlike ordinary generated photo results, property-film source media and deliverables are private and are not added to the public inspiration feed. We retain sources and intermediate files for up to 30 days, final deliverables for up to 90 days, and billing and audit metadata after the raw media is removed. Private download access requires your signed-in account.

What we don't do

We don't sell your personal data or photos, show third-party ads inside Stylst, upload contact lists, ask for your precise location, independently collect a postal address outside the billing details Stripe may request for payment, invoices, tax, and receipts, collect IDFA, or use your photos or optional brand-kit phone number for advertising matching. We use only the limited analytics and advertising measurement described above.

Your choices

You can stop using Stylst at any time. Browser or device settings can clear or restrict cookies, local storage, and third-party tags, although doing so may reduce attribution or make a signed-out browser appear new. Deleting an ordinary generated result in Stylst immediately removes its public image and page and schedules its retained files for permanent erasure within about a day. Listing-import results are private and can be removed from My Photos. Deleting a listing import removes its retained draft and source artifacts. To request deletion of all retained originals, generated results, and records tied to your device ID or account, contact us below. Removing the app or clearing your browser alone does not remove server-retained photos.

Contact

Questions: team@stylst.app