Privacy Policy
Last updated 3 September 2026
Style Morph never stores your photo. It is held in your browser, sent to the AI services that restyle it, and gone when you close the tab. This page says exactly who receives what, and how to get any of it deleted.
Who we are
Style Morph (“we”) is operated by Style Morph. This policy covers the Style Morph website and everything you do on it. Questions, requests and complaints all go to [email protected].
Your photograph
Your photo is the most sensitive thing you give us, so it gets its own section.
- We do not store it. It is held in your browser while you work, and we keep no copy — not on disk, not in a database, not in a file store. Closing the tab ends it.
- It is sent to the AI services that process it. To read your photo and propose styles, and to generate each restyled look, we transmit it to the providers named below. This is what makes the product work, and it means your photo does leave your browser. Those providers hold it under their own policies, which we link to.
- Faces are analysed, not enrolled. Face landmarks are detected in your browser to align the looks for the morph. They are never sent to us, and we build no face template, faceprint or biometric identifier and do not use your photo to recognise you anywhere else.
- We do not train on it. We do not use your photo to train models, and we do not publish, sell or share it with anyone beyond the processing described here.
The finished video is likewise produced in your browser. It reaches our server only if you choose to send it to TikTok, and then only to pass it on.
What else we collect
- A device identifier. A random ID in a cookie, created on your first visit. It is how free daily runs and credits are counted. It is not linked to your name.
- Your email address, only if you sign in. It identifies your account so credits follow you between devices.
- Credit history. Purchases and usage, kept as a ledger — required to run a paid service and to settle disputes.
- Server logs, including IP address and timestamps, kept briefly for security and debugging.
We do not use advertising cookies, we do not run third-party trackers, and we do not sell or share personal information for advertising.
If you connect TikTok
Connecting TikTok is entirely optional and the product works fully without it. If you do connect it:
- We receive your TikTok account ID, display name and avatar. The name and avatar are shown next to the button so you can confirm which account you linked. That is their only use.
- We store an access token and refresh token, encrypted at rest with AES-256-GCM. They are used solely to send a video you have asked us to send.
- We request permission to place videos in your drafts only. We do not hold, and have not asked for, permission to publish to your profile. Every post is completed by you, inside TikTok.
- Disconnecting deletes the tokens immediately. Use the Disconnect control on the results screen, or revoke access in TikTok under Settings → Security and permissions → Manage app permissions. You can do either at any time, for any reason.
Who receives your data
Everyone outside Style Morph who handles any of it, and what they get:
| Who | Why | What they receive |
|---|---|---|
| fal.ai | Generates the restyled looks. | Your uploaded photo, the reference photo you chose, and the text prompt. |
| Google (Gemini API) | Reads the photo to propose the three style directions. | Your uploaded photo. |
| Firecrawl | Finds the reference photographs for each style direction. | The search terms — never your photo. |
| Supabase | Stores the account, credit ledger and connection records. | Your device identifier, email if you sign in, and credit history. |
| Stripe | Takes payment as merchant of record. | Your payment details, directly — they never reach our servers. |
| Resend | Delivers sign-in codes. | Your email address. |
| TikTok | Receives the video you choose to send, if you connect an account. | The video file and your authorisation. |
| Railway | Hosts the application. | Ordinary server logs, including IP address. |
These providers operate in several countries, so using Style Morph involves transferring data internationally. We disclose data otherwise only where the law requires it.
How long we keep things
- Photos and videos: not retained. Only for the moments a request takes.
- Account, email and credit ledger: until you ask us to delete the account. Purchase records may be kept longer where tax or accounting law requires.
- TikTok tokens: until you disconnect, you revoke access, or the grant expires.
- Free-run and usage counters: reset daily.
- Server logs: a short rolling window.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it and close your account. Depending on where you live you may also have rights to restrict or object to processing, to portability, and to complain to your data protection authority.
Email [email protected] and we will respond within 30 days. There is no charge, and asking costs you nothing else.
Children
Style Morph is not for anyone under 13, and we do not knowingly collect their data. If you are under 18, use it only with a parent or guardian’s permission. If you believe a child has used the service, write to us and we will delete what we hold.
Security
Connections are encrypted in transit. Stored TikTok tokens are encrypted at rest. Database access is denied to browsers outright and goes only through our server. Payment card details never reach our systems. No system is perfect, and we will tell affected users promptly if something goes wrong.
Changes
If we change this policy we update the date at the top. If a change materially affects how your data is used, we will say so in the product before it takes effect.
This document is provided in English. Translations elsewhere in the product are for convenience; the English text is the one that applies.
