Privacy
Updated
Onsee puts clothes on a photo of you. Here is what that involves, in plain words. There is no account and no advertising.
Your photos
Your photos leave your iPhone only when you tap Try it on, in the app or from the share sheet. Onsee then sends the photo of you and the photos of the pieces in that look over an encrypted connection. Nothing else from your photo library is sent.
Our server, hosted by Cloudflare, holds your photos in memory only while it passes them to Black Forest Labs (BFL), whose image model makes the look. It never stores them. BFL handles the photos it receives under its privacy policy and API terms.
The finished look waits on our server until your iPhone collects it, for one hour at most, and is then deleted. Your photo, your pieces and your looks stay on your iPhone. Keep saves a look to Photos only when you tap it.
Your device ID
Instead of an account, the app creates a random ID the first time it runs and keeps it in your iPhone’s Keychain, so your tries survive a reinstall. It is not linked to your name, email or Apple ID.
With that ID, our server keeps your tries balance, a short record of each look (never the images) and how many looks you started today, for the daily limit. Look records are deleted after 7 days. To confirm requests come from the real Onsee app, it also keeps the public part of a security key your iPhone creates with Apple’s App Attest.
Purchases
Tries are bought through Apple’s App Store, and Apple handles the payment. We never see your name, payment details or Apple ID. The app passes on Apple’s signed record of the purchase so our server can add the tries, and the server keeps the number of tries, the transaction number and the date. If Apple refunds a purchase, its tries are removed the next time the app runs.
Usage data
Our server logs how each look went, such as when it ran, whether it was a new look or a swap, how it ended and what it cost, and each purchase or refund. The logs contain no images and no IP addresses, and are kept for up to 7 days. We also keep daily totals with no per-person detail. We use these to run the service and to learn whether Onsee is useful.
Like any server, ours sees the IP address of each request. We use it for about two minutes to limit abuse, then delete it. It is never stored with your device ID.
Deleting your data
In the app, open the menu and tap Delete my data. This deletes everything our server holds for your device, including tries you bought and have not used, and cannot be undone. Two one-way records stay: one for each purchase and one for the security key. Neither can identify you; they stop a purchase from being credited twice and a key from being reused. Apple keeps its own record of your purchases, and logs expire within 7 days.
What we don’t do
- No account or sign-in.
- No advertising, and no tracking across other apps or websites. Because we don’t track you, Do Not Track signals change nothing.
- We don’t sell your data or share it for advertising. The only company we send your photos to is BFL, to make the look you asked for.
- The onsee.app website sets no cookies, has no analytics and keeps no visitor logs.
Changes and contact
If this page changes, we update it here and change the date at the top. Questions about privacy or your data: hello@onsee.app.