TRYLUNE
Trylune (“we”, “us”) provides AI outfit try-on visualizations. This policy explains what we collect, why, how long we keep it, and the choices you have. It applies to the Trylune iOS app, the Trylune backend service, and the trylune.net website.
1. What we collect
- Account data. When you sign in with Apple, we receive Apple's stable user identifier, and optionally the name and email you choose to share. We create a Trylune user ID and a session token. Guest accounts receive a random Trylune user ID.
- Photos and generated images. The person photo you upload (including a built-in AI portrait you choose, which the app uploads as an image) and the generated result. We also store limited technical metadata such as MIME type and size.
- Credits and purchases. Your wallet balance and an append-only credit ledger, plus product identifiers, transaction identifiers, purchase environment (Sandbox/Production), and purchase status received from Apple and RevenueCat. We never receive your full payment card number.
- Usage and diagnostics. Generation job status, the generation engine used, timestamps, latency, error codes, approximate cost estimates, and basic request metadata (such as IP address) used for rate limiting, fraud prevention, security, and support. We do not log image bytes or AI provider keys.
- Website visits. The trylune.net website is a static site. It does not set cookies and does not use analytics, advertising, or tracking scripts. Our hosting provider may record standard access logs (IP address, user agent, requested URL, timestamp, response status) for security and operations.
- Support messages. If you email us, we receive your email address, message, and any attachments you send.
2. How we use data
- Generate the try-on image you request and show it in your history.
- Maintain your credit balance, process purchases, and reconcile delayed or refunded transactions.
- Prevent abuse, enforce limits, debug failures, and keep the Service secure.
- Respond to support requests and comply with legal obligations.
3. Service providers
We share only what is necessary with:
- Apple for Sign in with Apple and in-app purchases, under Apple's privacy policy.
- RevenueCat to validate purchases and deliver purchase events to our backend. RevenueCat receives an app user ID and store transaction data, not your photos.
- AI image providers selected by Trylune to perform the generation. Depending on the configured engine, this may include OpenAI, Google, or ByteDance/Volcano Engine. The provider receives the input images and prompt needed for your job and processes them under its own terms.
- Hosting and infrastructure providers that store the backend database, media files, and website on our behalf.
We do not sell personal data and do not use third-party advertising or cross-app tracking SDKs.
4. Retention
- Uploaded source photos are kept for up to 7 days and then deleted, unless a shorter period is configured or you delete them earlier.
- Generated results are kept for up to 30 days so you can view them in your account and history, unless you delete them or your account earlier.
- Account and wallet records are kept while your account is active. Purchase and ledger records may be kept after deletion where required for tax, accounting, fraud prevention, or legal compliance; they are then limited to the minimum required.
- Standard web server access logs are kept for a limited operational period, normally no longer than 30 days.
- You can delete individual media, all cloud photos, or your entire account in the app at any time. Deletion removes the associated personal data and cloud media, subject to the legal-retention exception above.
5. Security
Production traffic uses HTTPS. Media is stored in private storage with owner-only access and AES-GCM encryption at rest. Access tokens and AI provider keys are kept server-side. No system is perfectly secure, so please use a strong Apple account and keep your device updated.
6. Children
Trylune is intended for users aged 17 and over. We do not knowingly collect personal data from children. If you believe a minor has provided data, contact us and we will delete it.
7. Your choices and rights
You can view your credit history, delete media, sign out, or delete your account in the app. Depending on where you live, you may also have rights to access, correct, export, delete, or restrict processing of your data, and to object to certain processing. Contact us at support@trylune.net. We may need to verify your account before fulfilling a request. You also have the right to complain to your local data-protection authority.
8. International transfers
Our providers may process data in the United States or other countries where they operate. We use appropriate safeguards required by applicable law.
9. Changes
We may update this policy as the Service changes. The new version will be posted here and in the app with a new effective date. Material changes will be communicated where required.
10. Contact
Questions, requests, or concerns about privacy can be sent to support@trylune.net with “Privacy” in the subject line.