Legal

Privacy Policy

Effective date: 14 October 2026 · Updated: 18 October 2026

This policy explains what information the Trylou mobile app and the trylou.com website (together, the "Service") collect, how we use it, and the choices you have. The Service is operated by Mohsin Kamran, trading as Trylou, Karachi, Pakistan ("Trylou", "we", "us"). We are responsible for your information under this policy.

1. Information we collect

Account information

When you create an account we collect your email address, a password (stored only in hashed form by our authentication provider) and, if you choose to give it, your name. We send emails needed to run your account, such as confirming your email address or resetting your password. We don't send marketing emails unless you ask for them.

Credits and purchases

We keep your try-on credit balance and a record of credit changes: credits added, credits used for a try-on, and credits returned if a try-on fails. When you buy credits, we receive and keep the details we need to verify the purchase and add credits, such as the product bought and the store's transaction ID. We never receive your card or bank details; payments are handled by the app store.

Try-on records

For each try-on we keep a short technical record (a random request ID, its status and time) so a credit is used only once and is returned if the try-on fails. This record does not contain your photos.

Reports you send

If you tap Report this result, we store the reason you choose, any note you add, your user ID, the try-on's random request ID and the time, so we can review the report and act on misuse. A report doesn't include your photos or the result.

Technical information

Our servers and hosting providers automatically process basic technical data such as IP address, device type, app version and error logs, to keep the Service secure and working.

Crash reports

If the app crashes or hits a serious error, it may send a crash report to our crash-reporting provider, Sentry. A report contains technical details only: the error and where in the app's code it happened, the app version, and the device model and operating system. Crash reports never include your photos or try-on results, and we remove your email address, name, user ID and sign-in tokens before a report is sent. We don't use crash reports for advertising or to track you.

On your phone

The app stores your sign-in session on your device so you stay signed in. It uses your camera or photo library only when you choose a photo, and asks permission before saving a result to your photo library.

2. Your photos and try-on results

A photo of your face and body is personal information, and we treat it with extra care. When you start a try-on, the app uploads two images to our server over an encrypted connection: a photo of you and a photo of the product. Our server checks them, sends them to OpenAI to generate the try-on image, and returns the result directly to your phone.

• Trylou does not save your photos or your try-on results in our database or file storage, and our staff don't view them. Once the request finishes, we no longer have them, so we can't recover a past try-on. Save the result on your phone if you want to keep it.
• We use your photos only to create the try-on you asked for. We don't use them to recognise or identify you, and we don't create face templates, face geometry or other biometric identifiers.
• By starting a try-on you ask us to send your photos to OpenAI for this purpose. If you don't want that, don't start a try-on.
• Try-on results are AI-generated images, not real photographs.
• Only upload a photo of another adult if they have agreed. Never upload a photo of anyone under 18, including your own children.

3. How we use information, and why

• To create and secure your account and let you sign in (to provide the Service you asked for).
• To create your try-ons (at your request).
• To keep track of credits and verify purchases (to fulfil our agreement with you).
• To answer you when you contact us.
• To prevent fraud and misuse, fix problems and keep the Service secure (our legitimate interest in running a safe service).
• To meet legal obligations and respond to lawful requests from authorities.

We do not use your photos to train AI models, we do not sell or rent your personal information, and we do not use it for advertising or profiling.

4. Service providers we share information with

We use a small number of providers to run Trylou. They process information only on our instructions and to provide their service to us:

• OpenAI generates the try-on image from your two photos. We have told OpenAI not to store our requests. Under OpenAI's API data policy, data sent through its API is not used to train its models; OpenAI may keep inputs and outputs for up to 30 days only to monitor for abuse and misuse, and then deletes them, unless the law requires it to keep them longer. See OpenAI's privacy policy.
• Supabase provides our sign-in, database and server functions. It stores your account, credit and purchase records.
• Apple App Store and Google Play process payments when you buy credits, under their own privacy policies.
• Vercel hosts the trylou.com website.
• Sentry receives crash reports from the app (technical details only, as described above) so we can fix problems. See Sentry's privacy policy.

We may also share information when the law requires it (for example a valid request from a Pakistani court or authority), to protect someone's safety, to investigate misuse of the Service, or to enforce our terms. If Trylou is merged or sold, your information may pass to the new owner, who must keep protecting it under this policy.

5. Processing outside Pakistan

Our providers process information on servers outside Pakistan, including in the United States and other countries where their data centres are. By using the Service you understand that your information, including the photos you send for a try-on, will be transferred to and processed in those countries. We choose providers with strong security and contracts that limit how they can use your data.

6. How long we keep information

• Photos and try-on results: not stored by Trylou. OpenAI may keep them for up to 30 days for abuse monitoring only, as described above.
• Account information, credits and purchase records: until you delete your account. The app store keeps its own purchase records under its policies.
• Server logs and crash reports: for a limited period, normally no more than 90 days, for security and troubleshooting.
• Reports you send: as long as we need to review them and deal with any misuse, and deleted when you delete your account unless we must keep them to deal with misuse or a legal request.
• We may keep specific information longer if the law requires it or to deal with a dispute or a report of misuse.

7. Your rights and choices

• Delete your account in the app: go to Account and tap Delete account. This permanently deletes your account, sign-in details, profile, credit balance and purchase records from our systems. Unused credits are lost.
• Delete without the app: if you can't use the app, email support@trylou.com from your account email address with the subject "Delete my account". We will confirm and delete it within 30 days. Step-by-step help: trylou.com/delete-account.
• Access or correct: you can update your name in the app, or email us for a copy of your information or to correct it.
• Withdraw permission: you can turn off camera or photo-library access in your phone's settings at any time, and you can stop using try-ons whenever you want.
• Complain: if you are unhappy with how we handle your information, contact us first (section 12). You may also have the right to complain to a data protection or consumer authority where you live.

We will reply to requests within 30 days. We may need to confirm your identity first.

8. Security

We use encrypted connections, access controls and reputable providers to protect your information, and we keep as little of it as possible. No system is completely secure. If a security breach is likely to put you at risk, we will tell you without undue delay by email or in the app, explain what happened and what you can do, and notify authorities where the law requires.

9. Children

Trylou is only for adults aged 18 and over. No one under 18 may use Trylou, and we do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and its information.

Our terms also forbid uploading a photo of anyone under 18, including a user's own children. Parents and guardians: if you believe your child has used Trylou, or that a photo of your child was uploaded, email support@trylou.com and we will delete your child's account and information.

10. Users outside Pakistan

Trylou is designed for people in Pakistan. If you use it elsewhere, you may have extra rights under your local law (for example to access, correct, delete or move your data, or to object to processing). Email us and we will respect those rights as required.

11. Changes to this policy

We may update this policy as Trylou changes or the law changes. We will update the effective date above. For important changes, we will tell you in the app or by email at least 14 days before they take effect, unless a change is needed sooner for legal or security reasons.

12. Contact and complaints

For any privacy question, request or complaint, contact our privacy contact, Mohsin Kamran, at support@trylou.com. We aim to reply within 7 days and to resolve complaints within 30 days.

Mohsin Kamran, trading as Trylou, Karachi, Pakistan