The short version. Beardly works anonymously by default — no email or account needed to start. Your selfie is sent to an AI image model to create your preview and stored under your account so you can view your results. We do not use your photos to train AI models, we do not sell your data, and no other user can access your photos. One tap in Account → Delete my data wipes your selfies, previews, and history for good.
1. Who we are
Beardly (“Beardly,” “we,” “us,” or “our”) is a mobile application for iOS and Android that generates photorealistic AI previews of how you would look with a chosen beard style. Beardly is operated by KMavericks, which is the controller responsible for the personal data described in this policy.
This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the rights and controls you have. It applies to the Beardly mobile app and this website. If you have any questions, contact us at hamza@kmavericks.com.
2. Information we collect
Photos you provide
To generate a preview, you provide a selfie — a photo of your face — by taking one with your camera or choosing one from your photo library. This image, together with the resulting AI-generated preview, is stored securely under your account so you can view your results. A photo of your face is sensitive personal information, and we handle it accordingly (see How your photo is processed). Beardly does not use your photo to recognize, identify, or track you, and does not build a faceprint or biometric template from it.
Account and identifiers
When you first open the app, we create an anonymous account identified by a randomly generated user ID. No email, name, or personal details are required. If you choose to Sign in with Apple or Sign in with Google to secure your account across devices, we receive an account identifier from that provider and, depending on your choices, your name and email address (Apple lets you use a private relay email). We store which provider you linked.
Purchases and subscription status
Beardly offers consumable credit packs and a Beardly Pro subscription. Payments are processed by the Apple App Store or Google Play and managed through our payments provider, RevenueCat. We do not receive or store your credit-card or payment details. We store your entitlement state — your credit balance, whether Pro is active and its expiry, and the product purchased — so we can deliver what you bought.
Diagnostics and crash data
In released versions of the app, we use Firebase Crashlytics to record crashes and errors so we can fix them. This includes crash logs, the sequence of events leading up to a problem, and device and operating-system information, associated with your (anonymous or linked) user ID. We do not use analytics to build advertising profiles.
App integrity and technical data
To protect the service from fraud and abuse, we use app-attestation (Apple App Attest and Google Play Integrity via Firebase App Check) to verify that requests come from a genuine, untampered copy of the app. Our servers also process standard technical information — such as request timestamps and status — needed to operate the service securely.
3. How we use your information
- To generate your previews — processing your selfie with an AI image model and returning the result.
- To operate your account and purchases — tracking credits, granting and enforcing Beardly Pro, and honoring your purchases.
- To keep Beardly secure and reliable — preventing fraud and abuse, enforcing usage limits, and diagnosing and fixing crashes and bugs.
- To provide support — responding to you when you contact us.
- To comply with law — meeting legal, tax, and regulatory obligations.
Where the GDPR or similar laws apply, we rely on these legal bases: performance of a contract (to deliver the previews and features you request), your consent (to process the photo you submit for generation, which you can withdraw at any time by deleting your data), our legitimate interests (keeping the service secure and improving reliability), and legal obligation where applicable.
4. What we never do
- We never train AI models on your photos. Your selfie is used to produce your preview and nothing else.
- We never sell or rent your personal information, and we never share it with advertisers or data brokers. We do not build advertising profiles.
- We never make your photos available to other users. Your uploads and results are owner-scoped and enforced by server-side security rules — only your account can access them.
5. How your photo is processed
When you request a preview, your selfie is uploaded to secure cloud storage and passed to a server-side function that sends it, along with the style instructions, to Google’s Gemini image model to generate the result. The generated image is stored under your account, and both your selfie and result remain available to you until you delete them.
We use Google’s paid, enterprise API for this. Under Google’s applicable terms for its paid AI services, Google does not use the content you submit to train or improve its models and processes it only to return the generated image. You can review Google’s Gemini API terms for details.
6. Sharing and service providers
We do not sell your data. We share it only with the service providers (sub-processors) that operate Beardly on our behalf, each bound to handle it securely and only for the purposes below:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase & Cloud | Authentication, cloud storage, database, serverless functions, app integrity, and crash reporting | Account ID, selfies & previews, generation history, entitlement state, diagnostics |
| Google Gemini API | AI image generation | Your selfie and the style prompt, to produce a preview |
| RevenueCat | Purchase and subscription management | Account ID, purchase and entitlement records (no card details) |
| Apple App Store / Google Play | Payment processing and app distribution | Payment is handled by the store; we receive only the result |
We may also disclose information if required to do so by law, or to protect the rights, safety, and security of our users, the public, or Beardly. If Beardly is involved in a merger, acquisition, or sale of assets, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.
7. Data retention
- Selfies, previews, and generation history are kept so you can view your results until you delete them or your account, using the in-app controls below.
- Account and entitlement records are kept while your account exists and as needed to honor purchases and meet legal and accounting obligations.
- Diagnostics and crash data are retained on a rolling basis by our crash-reporting provider (generally up to 90 days) and then automatically deleted.
8. Your privacy rights and choices
You have direct control over your data from inside the app, and you have rights under privacy laws such as the GDPR and the CCPA/CPRA.
In-app controls
- Delete my data — In Account → Delete my data, one tap permanently deletes your uploaded selfies, generated previews, and generation history.
- Delete your account — To delete your account entirely, including linked sign-in details, email hamza@kmavericks.com and we will process your request.
Your legal rights
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. We do not sell or “share” personal information as those terms are defined under U.S. state privacy laws, so there is nothing to opt out of — and we will not discriminate against you for exercising any right. To make a request, email hamza@kmavericks.com. We will verify and respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.
9. Device permissions
Beardly asks for access to your camera and photo library solely so you can capture or select the selfie you want to preview. We access a photo only when you choose one, and we do not scan or upload your photo library. You can change these permissions at any time in your device settings.
10. Data security
We protect your information with layered safeguards: encryption in transit (TLS); owner-scoped storage and database rules that ensure only your account can read your photos; server-side enforcement of purchases and usage; app-attestation on every sensitive request; and API keys kept exclusively on our servers, never in the app. No method of transmission or storage is completely secure, but we work to protect your data and continually improve our safeguards.
11. International data transfers
Beardly’s infrastructure is hosted on Google Cloud in the United States. If you access Beardly from outside the United States, your information will be transferred to and processed there. Where required, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses — for international transfers.
12. Children’s privacy
Beardly is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided us with personal information, contact hamza@kmavericks.com and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of Beardly after an update means you accept the revised policy.
14. Contact us
If you have questions, requests, or concerns about this policy or your data, contact us at hamza@kmavericks.com. We’re happy to help.