Privacy Policy
Last updated: 21 September 2026
This document explains what data Blenda collects, why, and how you can have it deleted. It is written to be understood, not to read like a legal text.
At a glance
| What | Where it lives | When it is deleted |
|---|---|---|
| Photo you upload for analysis | On your phone; sent to Google for analysis | When you delete the local copy. Google's side is explained below |
| Face scan photo | Sent to Google for analysis; temporary copy on the device | The operating system clears temporary copies |
| Product scan photo | Sent to Google for analysis | Blenda does not keep it |
| Your face and skin profile | Server | When you delete your account |
| Your makeup kit | Phone, plus server if you have an account | When you delete your account |
| Looks you share | Server, public | One by one, or with your account |
| Email, name, username | Server | When you delete your account |
| Purchase history | Google Play / App Store and RevenueCat | Under the store's rules |
| Usage events | Server | When you delete your account |
Your photos
When you have a photo analysed, it is sent to our AI provider, Google (Gemini). This applies to makeup analysis, nail analysis, face scans and product scans. The app asks for your consent before sending; if you decline, no photo is sent.
What happens on Google's side: under its AI service terms, Google may use the content sent and the response generated to improve its own products and services, and a human reviewer may see it for that purpose. How long Google keeps that content is governed by its terms; we have no control over it. So:
- Do not upload someone else's photo without their permission.
- Keep anything you would not want seen out of the frame.
What happens on Blenda's side: our analysis server does not store the photo as a permanent file. The photos and results of analyses you save are kept on your phone; these copies are separate from the original in your gallery, and deleting them does not delete the original.
If you publish a look or share your own photo by tapping “I tried it”, that photo is stored on the server and visible to other users. You start this step yourself and it is optional.
Automatic check before sharing: the photo you want to share is sent, in a reduced size, to Google (Gemini) to check that it does not contain inappropriate content (nudity, violence, hate, drugs) and that it is related to makeup. A photo judged inappropriate is not published, and if the check cannot be done the photo is not published. This check is part of the share step; if you do not share, nothing is sent.
Speed-up cache
If the same photo is analysed again, we return the stored result instead of generating it again. For this we keep a fingerprint (SHA-256 hash) of the photo and the result, not the photo itself; the photo cannot be rebuilt from the hash. The result expires after 30 days.
Your face and skin profile
Eye shape, face shape, skin tone, undertone, skin type and, if you chose them, your skin concerns (such as acne or redness) are kept in your account and used only to adapt recipes to you. For makeup and nail analyses this information is also sent to Google along with the photo.
Nobody else can see it. Your public page shows your name, username and the looks you share; your skin information is not shown. This is not just hidden in the interface — it is locked at the database level, so it cannot be read from outside the app either.
Your account details
When you sign up we collect your email, name and username. Your name and username are public; your email is not.
If you sign in with Google or Apple we receive only your name and email address from that provider (or the private relay address, if you choose Apple's hidden email); your password never reaches us. When you delete your account, your Sign in with Apple authorisation is also revoked on Apple's side.
You can use the app as a guest without signing up with an email. A guest session still creates an anonymous server session; quota and sync records are linked to it. Guest use is not a device-only mode. Photo analysis and scanning are not available in a guest session; they need a free account.
Usage data
To understand which parts of the app are useful, we record events such as analysis started, analysis finished, look saved and product added. These records are linked to your account but carry no content — they do not include which photo you uploaded or what you wrote.
There is no ad network, third-party tracking SDK or cross-app tracking.
Who we share your data with
| With | Why | What is sent |
|---|---|---|
| Google (Gemini) | To generate the analysis | Photo, app language and profile details if you entered them. Google may use it to improve its products; retention follows Google's terms |
| Supabase | Database, accounts and file hosting | Your account, profile, kit and what you share |
| Cloudflare | Server and result cache | Analysis requests; photo hash and analysis result (30 days) |
| RevenueCat | Managing subscriptions | Your account ID (not your email) and purchase history |
| Google Play / Apple | Taking payment | The store takes the payment; your card details never reach us |
| Resend | Verification and password emails | Your email address |
| Google / Apple (sign-in) | Letting you sign in | When you sign in, the provider passes us your name and email; we verify the sign-in token with the provider |
We do not sell data. We do not share it for advertising.
For how Google processes content, see the Gemini API terms of service.
Deleting your data
From inside the app:
- Menu → Delete my data — deletes everything on your phone. Your account stays.
- Menu → Delete my account — deletes your account, profile, shared looks, follows and likes permanently from the server. If you signed in with Apple, your Apple authorisation is revoked too. This cannot be undone.
If you cannot access the app, you can also request it on the account deletion page.
Content already sent to Google is not stored on our servers, so we cannot delete it; it is governed by Google's terms.
Age requirement
Blenda is for users aged 18 and over. It is not directed at anyone under 18, and we do not knowingly collect data from them. The terms of the AI service we use also do not allow it to serve users under 18.
Contact
Data controller: Muhammed Esad Bacacı
Address: Liseler Mahallesi, Santral 3. Sokak, 52300 Ünye / Ordu
Email: [email protected]