Privacy Policy

This app is provided by Fat Octopus Apps ("we", "us"). This Privacy Policy explains what information Lash Create handles and how. Please read the section that matches how you use the app.

Two ways to use Lash Create

Lash Create can be used in two different ways, and the privacy practices differ between them:

• The design tool (free & Premium). Take or pick a photo, try lashes on, and save your designs. This works entirely on your device with no account and your images are never uploaded to us.
• Business plans (salon CRM). Optional paid plans for lash professionals that add client records, bookings, consultations, and a shared team workspace. These plans require an account and store your salon's data in the cloud so it syncs across your devices and your team, and is backed up.

Throughout this policy, "Business plans" means the paid Individual and Salon tiers. If you only use the free or Premium design tool, the account and cloud sections below do not apply to you.

Summary

• The design tool keeps your photos and designs on your device. We have no server copy of your images.
• The face tools work only inside the design studio, on your device. No facial recognition, nothing about a face is stored or sent anywhere, we collect no biometric data, and a saved result is an ordinary picture.
• Business plans require an email-and-password account and store the salon data you enter (including your clients' details) in the cloud.
• Business plans can optionally publish a public booking page. It shows the salon details you choose (including an optional cover photo), and lets clients send you a booking request with their contact details.
• Business plans can optionally list the salon in a public directory on the web, showing only the business details and photos you choose to publish.
• Business plans can choose to publish photos of recent work — including a result photo from a client's record — to the booking page and directory. Because a result photo can show a client, you choose which to publish and confirm you have that client's consent; removing a photo in the app also removes the public copy.
• Business plans can optionally take payments from clients online — booking deposits, full payment, gift cards, and prepaid bundles — through Stripe. Card details go directly to Stripe and the salon's own connected Stripe account; we never see or store card numbers.
• Business plans include messaging between a salon and its clients, plus a private team chat, and can send push notifications. These are stored in the cloud so they sync across devices.
• The app includes the TikTok Business SDK and Firebase Analytics for measuring advertising and improving the app. You can decline cross-app tracking when prompted.
• App subscriptions are processed by Apple, with subscription status managed through RevenueCat.

Account information (Business plans)

To use a Business plan you create an account with your email address and a password. Authentication is handled by Google Firebase Authentication on our behalf. We use this to:

• Create and secure your account, and sign you in across devices.
• Send a verification email to confirm your address.
• Send password-reset emails when you request them.

Firebase stores your email and a securely hashed password, and assigns your account a unique identifier. We use that identifier to link your account to your subscription and to your salon. We never see or store your password in readable form.

When you create your salon you can also optionally provide a contact phone number. We use it only to help you get set up and to provide account support — for example contacting you by email, phone, or WhatsApp where you've given us a number. Your phone number is kept private: it is never shown on your booking page or public listing, and it is not used for advertising.

Your salon data in the cloud (Business plans)

When you use a Business plan — whether the solo Individual plan or the team Salon plan — the information you enter is stored in Google Cloud Firestore and Firebase Storage so it can sync across your devices, be shared securely with any staff you invite (Salon plan), and be backed up. Each salon's data is restricted to that salon's active owner and staff.

The salon data we store on your behalf includes your salon setup (name, services, lash and adhesive brands, styles, pricing, promotions and package deals, gift cards, prepaid bundles, and message templates), your team members (names, display colours, working hours and, if the owner records it, what they are paid — see What your team are paid), bookings and appointment history, lash recipes, inventory and expenses, messages (described below), and your client records (described next).

Client information you enter (Business plans)

Business plans let you, as a lash professional, keep records about your own clients. This is personal information about other people, so it deserves special care. The records you can store about a client include:

• Contact details — name, phone number, email, address, and social handles (Instagram, WhatsApp), where you choose to enter them.
• Consultation & health information — notes such as allergies, sensitivities, eye conditions, lash health, natural-lash retention, patch-test dates, consent status, and intake answers. Some of this is health-related and should be handled accordingly.
• Signed consent forms — if you use consent forms, we store the questions as they were worded at the time, the client's answers, the date and time they signed, and an image of the signature they drew. A form can be signed in the salon or by the client on your booking page. Because consent answers are often health-related, they are treated the same way as the health notes above.
• Appointment & service history — dates, services, lash styles, products used, payment records, and rebooking dates.
• Photos — client profile photos, and design snapshots and result photos you save against an appointment. Your client photos stay private to your salon unless you choose to publish a result photo to your booking page or directory listing (see How your photos are handled).

Your responsibilities. When you enter a client's information you are the controller of that information, and we process it on your behalf to provide the app. You confirm that you have a lawful basis and any necessary consent to store and use your clients' details — including health-related notes — in the app, and that you will respond to your clients' requests about their own data. If you choose to publish a photo that shows a client — for example a result photo shown as recent work on your booking page or directory listing — you confirm you have that client's consent to display their image on a public web page, and you will remove it in the app if they withdraw that consent. We act only on your instructions and do not use your client records for any purpose other than running the app for you.

Team & staff invites (Salon plan)

A Salon owner can invite staff using a one-time invite code. When a staff member redeems a code, their account is linked to the salon so they can access the shared workspace. The owner controls what staff can see through in-app sharing settings (for example, whether staff can view client photos or health notes), and the owner can revoke a staff member's access at any time. Revoking access removes that person's ability to open the salon on their device.

What your team are paid (Salon plan)

A Salon owner can record what each team member is paid: whether their base is hourly or a monthly salary, the rate itself and the dates each rate started from, how many hours a week they work before overtime, the overtime rate, whether their days off are paid, and any commission percentages. This is off until the owner fills it in; a member with nothing set is simply not on the payroll.

From that, the app works out a figure for a period — hours from the rota, and where there is commission, the value of the work that member did and the products they personally sold. The result is shown to the owner, offered as the suggested amount on that member's wages bill, and included on the owner's exported statement. Nothing is paid, filed or sent anywhere: Lash Create does not run payroll, does not calculate tax, national insurance or pension, does not produce payslips, and shares none of this with any third party.

Who can see it. Inside the app, pay is shown to the salon owner only. It is not shown to an admin, not shown to the member it is about, and a wages bill linked to a person is hidden from everyone but the owner too — in your expenses, in the month's history, and on the exported statement, where those bills are folded into a single "Staff wages" line so the totals still add up without naming anyone.

What that does not cover. Pay is stored as part of your salon's record, and your salon's record is synced to the devices of the staff you have invited so the app can work offline — the same as your client list, your bookings and the rest of your salon data. No screen shows it to them, but it is held on their device, and a determined person with technical skill could read it there. If that matters for your salon, keep pay out of the app and record it elsewhere.

Your responsibilities. What you pay someone is their personal information and, in most places, employment data they have rights over. You are the controller of it; we store it on your behalf to run the app for you and use it for nothing else. The figures the app produces are an estimate from your own rota and are not a payroll calculation, a payslip, or advice — paying people correctly, and meeting whatever your country requires of an employer, stays with you.

Your public booking page (Business plans)

Business plans can optionally turn on an online booking page — a public web page (at a link such as book.lashcreate.app/your-salon) that you can share or embed on your own website. The page is unauthenticated, so anyone with the link can view it. You control whether it is switched on.

What the page shows. The business details you choose to publish: your salon name and location, your logo, an optional cover banner photo, your bookable services and (if you enable prices) their prices, your opening hours, and a link to your reviews. You can also choose to publish photos of recent work to the page. Where a recent-work photo is a result photo that shows a client, it is that client's personal data and you are responsible for having their consent to display it publicly (see How your photos are handled).

Logo and banner images. Your logo and cover banner are stored in Firebase Storage and are publicly readable so the page can display them. When you upload one, the app resizes and compresses it and strips embedded metadata (such as EXIF and any GPS location) before storing it.

When a client requests a booking. A visitor chooses a service and time and submits their name, contact details (phone and/or email), and any notes for you. If the salon uses a promo or friend-referral code, the visitor may also enter that code. We use this to create a booking request for your salon and to email a confirmation. This information becomes part of your salon's bookings and client records described above, with you as the controller. Booking-confirmation emails are sent on our behalf by Resend. If the salon has switched on online payments, a deposit or the full amount may be taken at this step (see Online payments below); otherwise the page takes no payment and you approve each request.

Consent forms on the page. If you use consent forms, the client completes them as part of booking and signs with their finger on the page. Their answers and the signature image are submitted with the request and stored against the booking and their client record, as described under Signed consent forms. You write the questions, so you decide what is asked; where the answers are health-related, you are responsible for having a lawful basis to collect them.

Waitlist requests. If a day is full, or you allow it, a visitor can ask for a time you are not offering. They submit their name, phone and/or email, the day and hour they would like, and which service and artist they want. These people are usually not clients of yours yet, so the entry is the only record of them; it sits on your waitlist until you close it, and you can delete it at any time. If you then offer them a slot, we create a single-use link for that one time and you send it to them yourself from your own phone, by WhatsApp, Messages or your own email app. We do not contact anyone on your waitlist.

What we count. The page counts what happens on it, for each salon and by day: visits and where they came from, services chosen, times viewed, days with no available slots, bookings, items added to a cart, which products and bundles were tapped, and which gift card amounts were chosen. The counts contain no names or contact details, and we set no cookie to make them, so they count visits rather than people. The salon sees them in Insights, and we can see them to provide support. They are kept with the salon's data until the salon is deleted. A shop cart is saved in the visitor's own browser so it is still there when they return.

Your online shop (Business plans)

You can optionally sell products through your booking page. The shop is off unless you turn it on and connect Stripe.

What a buyer submits. To place an order a visitor gives their name, email address and phone number, and either a delivery address (street, city, region or county, and postcode) or a note that they will collect it at their next appointment. We use this to create the order for your salon, to take the payment, and to email the buyer a receipt and, when you post it, a dispatch email with any tracking link you add. These order records become part of your salon's data, with you as the controller.

Payment. Card details are collected by Stripe and charged to your own connected Stripe account, exactly as for a booking deposit. We never see or store card numbers. See Online payments below.

Postage. You can print a postage label from the app, which prints the buyer's name and delivery address, and scan the barcode on a parcel with your camera to find its order. Barcode reading happens on your device; the photo is not uploaded.

Your public directory listing (Business plans)

Separately from your booking page, you can choose to list your salon in the public Lash Create directory on the web (at lashcreate.app/directory). Listing is optional — it appears only if you turn it on and set your salon location — and you can remove it at any time by switching it off in the app.

What the listing shows. Only the details you provide: your salon name and location (country, city, and area), a short tagline, your name, role, photo and introduction, your services and styles, your team members' names, roles and photos, recent-work and facility photos you add, your social links, and a link to your booking page. It never includes your private contact details (such as the phone number above). Recent-work photos you add may include result photos of clients' lashes; where a photo shows a client, you choose to publish it and are responsible for having that client's consent, as set out under Your responsibilities. Because the directory is a public web page, anyone with the link can view what it shows, and the photos on it are stored so they can be displayed publicly.

If your subscription ends. Your listing may remain visible for up to 30 days after a plan lapses, with booking switched off, before it is removed. This gives you time to renew without losing your place in the directory. You can remove the listing sooner at any time from the app.

Online payments (Business plans)

A salon can optionally connect a Stripe account to take payments from clients — for example a booking deposit, the full service price, a no-show or late-cancellation fee, a gift card purchase, or a prepaid bundle. This is switched off unless the salon sets it up.

How card details are handled. When a client pays, their card and payment details are collected by Stripe and charged directly to the salon's own connected Stripe account. Stripe acts as the payment processor. We never see, handle, or store card numbers. We store only what's needed to run the app for the salon — the fact and amount of a payment, its status, and the Stripe reference for it — as part of the salon's booking and client records.

The salon's Stripe account. To connect Stripe, the salon owner completes Stripe's own onboarding. The salon is Stripe's customer (a "connected account"), holds the client relationship for those payments, and is responsible for refunds and any payment disputes through their own Stripe dashboard. Stripe's handling of payment data is governed by Stripe's Privacy Policy.

Messages & notifications (Business plans)

Business plans include messaging so a salon and its clients can chat about a booking, and a private team chat for a Salon's owner and staff. The messages you send are stored in Google Cloud Firestore so they sync across devices and, for team chat, are shared with the salon's staff. Client-facing chat can also send automated replies to common questions. As with other salon data, you are the controller of messages you exchange with your clients.

To let you and your clients know about new messages, booking requests, and reminders, the app can send push notifications. If you allow notifications, we register a device notification token with Google Firebase Cloud Messaging, which delivers the notification to your device via Apple's push service. Appointment and rebooking reminders you set are scheduled on your device. You can turn notifications off any time in iOS Settings.

Your own calendar (Business plans)

You can choose to have Lash Create write your appointments and days off into a calendar on your iPhone, and keep them up to date when something moves or is cancelled. This is off until you turn it on and grant calendar access.

It writes, it does not read. We create our own calendar for these events and only touch events we put there. We never read, change or collect your other calendar events.

What an event contains. The client's name, the service, the artist where a salon shows the whole team, and your salon address. This takes client names out of the app and into your own calendar, where your own settings decide what happens next: if the calendar you pick syncs with iCloud or another provider, those events go with it to your other devices. That is your calendar and your choice, so make it the way you would any other note of a client's name on your phone, and turn the setting off if you would rather it stayed in the app.

Switching it off stops new events. Events already written stay in your calendar until you delete them there.

How your photos are handled

Design tool: when you take a photo with the camera or pick one from your library, the image is processed entirely on your device and is never uploaded to us. Designs you save are stored locally; if you choose to save a design to Photos, that copy is added to your iOS Photos library.

Eye photo in the Lash Map editor: you can take or pick a photo of a client's eye to show behind a lash map while you plan it. That photo is only held while the editor is open. It is never saved with the map, added to the client's record, synced to your salon or sent anywhere, and it is gone when you close the editor.

Business plans: client profile photos, saved design snapshots, and result photos are uploaded to your salon's private Firebase Storage so they sync to your team and devices. They are stored privately, used to show those images inside the app, and deleted from storage when you delete the associated client, appointment, or salon.

Result photos you publish: you can choose to publish a result photo to your public booking page and directory listing as recent work. When you do, a public copy of that photo is stored in Firebase Storage so those pages can display it, and it can then be seen by anyone with the link and indexed by search engines. Because a result photo can show a client, you publish it on the basis set out under Your public booking page and Your responsibilities. When you delete the result photo in the app, we remove the published copy from your booking page and directory and delete the stored file.

Booking-page logo and cover banner are stored publicly for the same reason: because your booking page is public, these images are stored so that anyone with the page link can view them. They are business branding you choose to publish. As noted above, embedded metadata is stripped from them on upload.

Face data

Lash Create reads the shape of a face in a photo so its editing tools work on the face and nothing else. All of this happens entirely on your device. Four things are used:

• Apple's Vision framework (VNDetectFaceLandmarksRequest) finds where the eyes, brows, nose, lips and jawline sit, as 2D points in the image. These place lashes over each eye and brows over each brow, and guide the Beautify tools.
• Apple's person segmentation (VNGeneratePersonSegmentationRequest) works out which pixels are the person and which are the background, so Beautify never moves the background and Focus can blur the background alone.
• A face parsing model (Google's MediaPipe selfie multiclass segmentation model, built into the app) labels each pixel as face skin, hair, body skin, clothing or background, so Beautify moves the face together with its hair while the background stays where it is, Even skin, Redness, Wrinkles and the contours touch only face skin, and blemish removal never borrows from hair.
• A face mesh model (Google's MediaPipe Face Mesh, built into the app) places 478 points over the face, with a relative depth for each, so brows can be laid on the brows, Brow bleach can lighten the real brows toward the skin around them, and the Beautify tools follow the exact edges of the brows, eyes, lips and jaw. The same points tell Even skin, Redness, Wrinkles, Eye bags, Smile lines and the face, nose and philtrum contours where to work, and keep the eyes, brows, lips and nostrils out of them. Their relative depth also lets the Lens slider in Adjustment change the apparent lens of the whole picture.

No facial recognition is performed. The face tools are used only in the app's design studio, while you edit a photo. The face points are worked out on your device, are never saved or sent anywhere, and are never used to recognise or identify anyone, or to tell one face from another. They describe only where things are in that one photo, and they are used only to place lashes and brows and to apply the edits you choose.

We do not collect face data or biometric data of any kind. None of it ever reaches us, so we cannot see the face points and cannot tell when the face tools are used.

This face data exists only in memory during the current editing session. It is not saved to disk, exported, transmitted to a server (ours, Google's, Apple's or anyone else's), shared with any third party, or used for any other purpose. It is never used for advertising, marketing, analytics or profiling. It is released from memory as soon as you close the editor, open a different photo, or quit the app. Both face models run inside the app and make no network connection.

When you save a design or an edited photo, it is saved as an ordinary picture, like any other photo: on your phone, and on Business plans also in your salon's private storage as described above. The face points and pixel labels are not part of it and are not kept anywhere.

Subscriptions & payments

Lash Create offers auto-renewable subscriptions (Premium for the design tool, and Individual and Salon plans for Business). These app subscription payments are processed by Apple via the App Store, and we never see your payment information. (Payments a salon takes from its own clients are separate and handled by Stripe — see Online payments above.)

We use RevenueCat to manage subscription status and entitlements. When you subscribe, RevenueCat receives your purchase details from Apple (such as the product, price, currency, and Apple's purchase receipt) and an identifier for your account (your account's unique identifier for Business plans, or an anonymous identifier otherwise). This is used only to determine whether your subscription is active and which features to unlock.

Apple's handling of purchase data is governed by Apple's Privacy Policy, and RevenueCat's by RevenueCat's Privacy Policy.

Advertising, analytics & tracking

We use two measurement tools to understand how people find and use the app:

• TikTok Business SDK — measures which of our ads lead people to install and subscribe. Through it we collect your device's advertising identifier (IDFA, only if you allow tracking), a TikTok-assigned identifier, install/launch/session activity, and purchase conversion events (product, price, currency). This data is shared with TikTok and may be used to track you across other companies' apps and websites for advertising attribution.
• Firebase Analytics (Google) — measures in-app usage (such as which screens and features are used and the steps of the onboarding and purchase funnels) to improve the app. Events include product identifiers and basic interaction data, not your name, your clients' details, or your photos.

Because the TikTok SDK involves tracking, iOS asks for your permission through the App Tracking Transparency prompt. If you choose "Ask App Not to Track," your IDFA is not shared and measurement relies on Apple's privacy-preserving methods (SKAdNetwork) instead. You can change this any time in Settings → Privacy & Security → Tracking.

TikTok's handling of this data is governed by TikTok's Privacy Policy, and Google's by Google's Privacy Policy.

Permissions

Lash Create requests the following permissions and uses them only for the stated purpose:

• Camera — to capture a new photo for lash design or a client record, a temporary eye photo behind a lash map, and to scan the barcode on a parcel so you can find its order.
• Photos (Read) — to let you pick an existing photo from your library (for a lash design, a client record, a temporary eye photo behind a lash map, your booking-page logo and cover banner, or to read the barcode from a photo of a parcel label).
• Photos (Add) — to save your finished designs to your iOS Photos library when you choose to.
• Calendar (full access) — only if you turn on calendar sync, to create and update Lash Create's own events for your bookings and days off. iOS has no write-only calendar permission, so the prompt asks for full access; we only read the events we created, to update them. See Your own calendar above.
• Notifications — if you enable them, to remind you about upcoming appointments and rebookings (scheduled on your device), and to alert you to new messages and booking requests (sent as push notifications via Firebase Cloud Messaging).

You can revoke any of these permissions at any time in iOS Settings.

Service providers

We share data only with the providers needed to run the app, and only for that purpose:

• Apple — App Store subscription payments and push-notification delivery.
• Google (Firebase) — account authentication, cloud database (Firestore), file storage (Firebase Storage), push notifications (Cloud Messaging), and analytics, for Business plans and app measurement.
• Stripe — processing the payments a salon takes from its own clients (deposits, full payment, no-show fees, gift cards, bundles, and shop orders).
• RevenueCat — subscription status and entitlement management.
• Resend — sending account emails, and the booking-page confirmation, consent, and shop order and dispatch emails, on our behalf.
• TikTok — advertising measurement and attribution.

Data retention & deletion

You stay in control of your data:

• Client and salon records. You can delete individual clients, appointments, or other records from inside the app at any time; deleting a record also deletes its associated photos from cloud storage, and if a result photo was published to your booking page or directory, deleting it also removes the public copy.
• Your account and salon. You can delete your account in the app, from your Profile. If you are the owner, this also deletes the salon and its data. If you are a staff member, it deletes your account and removes you from the salon, and the salon's data stays with the salon. You can also contact us at support@lashcreate.app and we will delete it for you.
• Subscriptions. You can cancel any time in iOS Settings; cancelling does not delete your data.

Security

Data sent to and from the cloud is encrypted in transit. Account access is protected by your email and password, and salon data is restricted so that only the salon's active owner and staff can access it. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.

International transfers

Our service providers, including Google, Stripe, RevenueCat, and TikTok, may process data on servers located in the United States and other countries. Where data is transferred internationally, those providers apply appropriate safeguards.

Children

Lash Create is not directed to children. We do not knowingly collect personal information from children under 13, and the advertising measurement described above relies on tracking only where permission has been granted through iOS. If you believe a child has used the app, contact us and we will help.

Third-party software

Lash Create includes the MediaPipe selfie multiclass segmentation model, Copyright Google LLC, licensed under the Apache License, Version 2.0. The model was converted to Apple's Core ML format to run on device; it is otherwise used as published. Its model card is available from Google. It also includes the MediaPipe Face Mesh model (from MediaPipe's face landmarker), Copyright Google LLC, under the same licence, converted to Core ML in the same way. Its model card is available from Google. Software distributed under the Apache License is provided "as is", without warranties or conditions of any kind.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available at this URL. The "Last updated" date above will reflect any changes.

Contact

Questions about this Privacy Policy, or a request about your data? Email support@lashcreate.app — we reply within 1–2 business days.