Privacy Policy

Effective date: October 30, 2026 · Last updated: October 30, 2026

The short version

• Your photos, your face map and your edits never leave your phone. Rouj edits them on your device. Nothing is uploaded, seen by us or used to train AI.
• No face recognition. Rouj maps your facial features only to apply the looks you choose. It never uses the map to identify you.
• No account, no location, no microphone, no contacts. The App sees only the photos you take or pick, and can only add images to your Photos when you tap Save.
• We don't track you, show ads, or sell or share your personal information.
• A few things do leave your device: app usage events and crash reports (Google Firebase), app settings (Firebase Remote Config) your subscription status (RevenueCat) and download requests for some looks and presets. Never your photos, face map or results. In the EEA, usage analytics and crash reports run only if you allow them.
• Questions or requests: support@rouj.app.

1. Who we are

Rouj (the "App") is provided by Core App Labs Limited, Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong ("we", "us"). We are the controller of the personal data described in this Policy.

Contact for all privacy matters: support@rouj.app.

2. Your photos stay on your device

We have no servers that receive your photos, face map or edits. Everything below happens only on your iPhone or iPad.

• Selfies and photos. You take a selfie with the camera or pick a photo with the iOS photo picker. The App sees only the photo you choose, not your library.
• Skin, sculpting, makeup, filters and Magic Eraser. All edits are made on your device by models built into the App.
• Sample faces. If you try looks on a sample face, it is a model photo we have the rights to use, or a synthetic face.
• Looks and presets come with the App. Some new looks and presets may be downloaded from our content server when you open them. A download request reveals your IP address and basic technical details to the server, but never your photos, face map or edits (see section 5).

In line with Apple's rules, data from the camera, photo and face-mapping tools is never used for advertising, marketing or data mining.

3. Your face map

To apply looks precisely, the App detects points and lines on your face — for example the position of your eyes, lips, nose and jawline (your "face map"). Some laws, including those of Illinois, Texas, Washington and Colorado, treat this kind of data as biometric information, so here is exactly how we handle it:

• What it's for: only to apply the edits you choose to the photo you're editing.
• Where it lives: in your device's memory while you edit, and with your draft on your device if you save one. It is never sent to us or to anyone else.
• What we don't do: we never use it to recognize or identify you, compare your face with other faces, or create a template that could identify you. We never sell, lease, trade or share it, and we never receive it.
• When it's deleted: when you finish editing a photo without saving a draft, when you delete the draft, or when you delete the App.
• Your choice: the App tells you on the selfie screen that it maps your features on your phone. You choose whether to take or pick a photo. You can always try looks on a sample face instead.

4. Your drafts and saved images

• Drafts. Your photo, the look and its strength can be saved as a draft in the App's private storage on your device.
• Saving and sharing. When you tap Save, the App adds the edited image to your Photos using add-only access, so it cannot see or read your existing photos. When you tap Share, the image goes to the iOS share sheet and you choose where it goes. Images the App creates contain no location data. They may contain a machine-readable note that the image was edited with AI.
• Backups. Data stored in the App may be included in your device backups (for example iCloud Backup) according to your Apple settings. Apple handles those backups under its own privacy policy, and we cannot access them.

You may edit photos that show other people. Please respect their privacy and get their permission before you share an edited image of them.

5. What leaves your device

Usage analytics — Google Firebase Analytics

• Why: to understand how the App is used and improve it.
• Data: usage events (screens viewed, buttons tapped, tools and looks used, your onboarding answers such as goal, style and focus areas), app instance ID, device model, iOS and App version, language, approximate country or region (inferred by Google from your IP address), session and first-open times. Never your photos, face map or results.
• Legal basis: EEA — your consent; UK — legitimate interests (you can turn it off).
• Kept for: 14 months.

Crash reports — Google Firebase Crashlytics

• Why: to find and fix crashes.
• Data: stack trace, device model, iOS and App version, crash ID, Firebase installation ID. Crash reports are designed not to contain your photos or face map.
• Legal basis: EEA — your consent; UK — legitimate interests (you can turn it off).
• Kept for: 90 days.

App settings and service notices — Google Firebase Remote Config

• Why: to deliver App settings, offers shown in the App and important service notices without an App update.
• Data: Firebase installation ID, App version, device language and country.
• Legal basis: performance of our contract with you.
• Kept for: not stored by us; Google processes it only to deliver the settings.

Subscriptions and purchases — RevenueCat

• Why: to manage your subscription, Lifetime access and one-time purchases, check which offers you can get, and keep a record of the terms you agreed to.
• Data: a random user ID generated by the App and stored in your Keychain; purchase history and subscription status received from Apple (product, dates, renewal status, trial or offer used); country of your App Store account; the version of the terms shown to you when you bought.
• Legal basis: performance of our contract; compliance with legal obligations.
• Kept for: while you use the App, then as required by law (up to 7 years for transaction records; at least 3 years for subscription consent records).

Looks and presets — our content server

• Why: to deliver looks and presets that don't come with the App when you open them, and to keep the server secure.
• Data: IP address, App version, device model and language sent with the request, the files requested, and the time of the request. Never your photos, face map or edits.
• Legal basis: performance of our contract with you; legitimate interests (security).
• Kept for: server logs, 30 days.

Support requests — our email service provider

• Why: to answer your questions.
• Data: your email address, your message and anything you choose to attach.
• Legal basis: legitimate interests; performance of our contract.
• Kept for: 24 months after the conversation ends.

We never see your name or payment card details. Apple processes payments under its own terms.

We have configured Firebase not to collect the advertising identifier (IDFA), with Google Signals and ad personalization turned off, and without sharing data with Google for Google's own purposes.

Outside the EEA and UK, we rely on our legitimate interests for usage analytics and crash reports, and you can turn them off at any time.

6. What we don't do

• We don't upload, see or store your photos, face map or edits.
• We don't use face recognition, and we don't create biometric identifiers.
• We don't use your photos or edits to train AI models.
• We don't track you. The App does not use the advertising identifier, does not show ads and does not ask for App Tracking Transparency permission.
• We don't sell or share personal information for cross-context behavioral advertising, targeted advertising or profiling.
• We don't collect precise or approximate location from your device.
• We don't use your data for automated decisions with legal or similarly significant effects.

7. Permissions

Each permission is optional and used only for the features below. You can change permissions at any time in iOS Settings.

• Camera — to take a selfie. If you decline, you can pick a photo or use a sample face.
• Photos you pick — the App uses the iOS photo picker and sees only the photos you choose.
• Add to Photos — to save your edited images when you tap Save or after you buy.
• Notifications — only if you ask for a reminder before your free trial ends. The reminder is scheduled on your device.

8. Your consent choices

In the EEA: when you first open the App, we ask whether you allow usage analytics and crash reports. They stay off until you allow them.

Everyone: you can turn usage analytics and crash reports on or off at any time in Settings → Usage analytics. Withdrawing consent does not affect processing that happened before.

9. Service providers and international transfers

We share data only with the providers listed in section 5. They act as our processors on our instructions, under data processing terms that require them to protect your data to the same standard as this Policy.

• Google LLC / Google Ireland Ltd (Firebase Analytics, Crashlytics, Remote Config)
• RevenueCat, Inc.
• Our hosting provider (used only to run our content server for looks and presets)
• Our email service provider (used only to receive and answer support emails)

These providers may store data in the United States and other countries. We are based in Hong Kong. For transfers from the EEA, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. For transfers from the UK, we rely on the UK Extension to the Data Privacy Framework or the UK International Data Transfer Addendum. For Switzerland, we rely on the Swiss-US Data Privacy Framework or the Standard Contractual Clauses as adapted for Swiss law.

We may also disclose data if required by law, to protect the safety of users or others, or in a merger or acquisition. In that last case we will tell you first.

10. Your rights

The App has no accounts, so we find your data by your App ID, shown in the App's Settings. Please include it when you write to us. Your photos, face map and edits are only on your device, so you control them directly.

Everyone can ask us to access, correct or delete their data by emailing support@rouj.app. We reply within 30 days, or sooner where the law requires.

European Economic Area, Switzerland and United Kingdom: you also have the rights to restrict processing, to data portability, to object to processing based on legitimate interests, and to withdraw consent at any time. You can complain to the data protection authority where you live or work. In the UK, this is the Information Commissioner's Office (ico.org.uk).

United States (California and other states with comprehensive privacy laws): you have the right to know what we collect, to access, correct and delete it, and to opt out of sale, sharing, targeted advertising and profiling. We don't sell or share personal information and don't do targeted advertising or profiling, so there is nothing to opt out of. You can appeal a refusal by replying to our answer; if we deny the appeal, you can contact your state Attorney General. You can use an authorized agent. We will never treat you differently for using your rights.

Categories collected in the last 12 months (California): identifiers (IP address, app instance ID, Firebase installation ID, App user ID); commercial information (purchase history and subscription status); internet or other electronic network activity (App usage events, crash reports); approximate geolocation (country or region inferred from IP address); preferences you give us (your goal, style and focus areas). We collect no biometric information: your face map never leaves your device. Sources: you and your device. Purposes and retention periods are listed in section 5.

Canada: you can access and correct your data and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d'accès à l'information.

Australia and New Zealand: you can access and correct your data. If you are not satisfied with our answer, you can complain to the OAIC (Australia) or the Office of the Privacy Commissioner (New Zealand).

Hong Kong: you have the right to access and correct your data under the Personal Data (Privacy) Ordinance.

11. Deleting your data

• Deleting a draft removes it and its face map from your device. Images you saved to Photos stay there until you delete them.
• Deleting the App removes everything stored in the App on your device. Your subscription or Lifetime access stays with your Apple ID.
• Data held by our providers: tap Contact Support in the App or email support@rouj.app with your App ID. We will delete your data from Firebase and RevenueCat within 30 days, except records we must keep by law. Content server logs are deleted automatically after 30 days.
• Deleting data does not cancel a subscription. Cancel in iOS Settings → [your name] → Subscriptions → Rouj → Cancel Subscription.

12. Age

The App is for people aged 16 and over. We don't knowingly collect personal information from anyone under 16. If you believe someone under 16 has given us personal information, email us and we will delete it. Where the law requires, we use age information provided by Apple only to comply with that law.

13. Security

Data is encrypted in transit. We limit access to provider dashboards to people who need it and use two-factor authentication. No method is 100% secure. If a breach affects you, we will notify you and regulators as the law requires.

14. Changes

If we change this Policy materially, for example to add a new provider or start processing photos anywhere other than your device, we will tell you in the App before the change applies. Where the law requires your consent, we will ask for it. The date at the top shows the latest version.

15. Contact

Company: Core App Labs Limited

Address: Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong

Email: support@rouj.app