HeadshotKit Privacy Policy

What We Collect

We collect your HeadshotKit account identifier, which we create when you first sign in and use to keep your photos, jobs and purchases separate from everybody else’s. It is kept on your account record until you delete your account. A short prefix of it can also appear in our own operational logs, which age out on their own.

We collect the email address Apple gives us — a private relay address, if that is what you chose — and the name Apple gives us, once, and only if you chose to share it. Both are kept on your account record until you delete your account.

We collect the purchases you make in HeadshotKit: Apple’s signed receipt, the product bought and when a subscription expires. That is kept on your account record so your plan and pack balance survive a reinstall, until you delete your account. Apple keeps its own record of the transaction under Apple’s terms.

We collect your device push token so we can tell you when a batch is finished. It is kept until you sign out or delete your account.

We send the progress updates we send to your device through Apple’s notification service: the job id, how many images are finished and how many were expected, and the finished count in the completion alert. No photo, no prompt and no account identifier is included, and Apple handles it under Apple’s own terms.

We collect two profile answers you give us during setup: the gender option you select, and your Fitzpatrick skin-tone band on the six-point scale. Both are appearance settings used to render you accurately.

We collect the selfies you upload and the headshots we generate, because the app cannot create your headshots without them.

We collect the choices you make for a batch: the profession preset you choose, and the looks you picked in Style Studio.

We collect every word you write for a batch. That is the Custom Vibe description you type, if you use the Custom Vibe pack, and the Refine note you add, if you ask for a free re-roll of a finished batch. We also keep the photographic brief built from your words, which is the instruction we actually send for each image.

Third-Party AI Processors

HeadshotKit uses two third-party AI processors, and nothing is sent to either until you accept the in-app data disclosure shown before your first generation.

OpenAI generates the images. It receives the selfies you upload as reference photos, the gender option you select and your Fitzpatrick skin-tone band, the profession preset you choose and the looks you picked in Style Studio, the photographic brief built from your words, and the Refine note you add. It returns the headshots we generate — sometimes as a download link on OpenAI's own storage, which we then fetch. It does not receive your name, your email, or your account identifier.

DeepSeek interprets text, and only text. It receives ONLY the Custom Vibe description you type, and only when you use the Custom Vibe pack, so it can turn your words into a photographic brief. It never receives your photos, your name, your email, or your account identifier. If you never use Custom Vibe, nothing is ever sent to DeepSeek.

Two things about your own words that we want to be exact about. First: if DeepSeek cannot be reached, or declines the request, we do not fail your batch — we forward your description to OpenAI essentially as you typed it, wrapped only in an instruction to read it as a portrait brief. Second: the Refine note you add is never interpreted by DeepSeek at all. It is appended to the image instruction as you typed it, for every pack, not just Custom Vibe.

Neither processor is permitted to use your data to train models, and neither receives it for advertising. Both are bound by contractual terms requiring protection equal to our own, and both process the data only to answer that one request rather than retaining it for their own purposes.

You can withdraw this consent at any time from Settings. Withdrawing it stops all further AI processing until you agree again.

How Your Photos Are Used

The selfies you upload travel over an encrypted connection and are attached to the image request to OpenAI, solely to produce the headshots you requested. They are never used to train models, never sold, and never shared for advertising.

Sent with them, written into the generation prompt, are the gender option you select and your Fitzpatrick skin-tone band, plus the wardrobe and backdrop text chosen by the looks you picked in Style Studio and the profession preset you choose. The AI provider needs the appearance settings to calibrate lighting, color, and wardrobe — the difference is largest on deeper skin tones. Nothing else from your profile is included: not your name, not your email, and not your account identifier.

The headshots we generate are stored in your private gallery so you can view, favorite, and download them. Only your authenticated account can access them.

Retention And Deletion

The selfies you upload are kept for about a day after upload — so free Refine re-rolls can reuse the same photos — then deleted automatically, in all cases within 48 hours of upload. That is the only automatic deletion we perform. The headshots we generate are not deleted automatically at all: we keep them until you delete your account.

We want to correct an earlier version of this page, which could be read as saying the words you type are not stored anywhere. They are not stored by the AI processors. They ARE stored by us. The Custom Vibe description you type is kept on your job record for that batch. The photographic brief built from your words is kept on the job record too, and the full instruction we sent — which includes the Refine note you add — is kept inside the saved generation record for each headshot. All of it is kept until you delete your account.

We also want to correct something an earlier version of this page implied about control. HeadshotKit has no way to delete one headshot, or one batch, or one note. Deleting your account is the only deletion we offer, and it removes all of it at once: HeadshotKit deletes everything or nothing. Favouriting a headshot is the only change you can make to one on its own.

The gender option you select and your Fitzpatrick skin-tone band are saved to your profile when you set them during onboarding, so each batch pre-fills them, until you delete your account. The profession preset you choose and the looks you picked in Style Studio are not saved to your profile and do not pre-fill anything: they are kept on that batch's own job record — which is what lets a free Refine re-create the same look, and what we rely on to answer your support questions and to investigate abuse — until you delete your account. Your device push token is kept until you sign out or delete your account.

Deleting your account from within the app immediately and permanently removes your selfies, your generated headshots, everything you typed, and your account record from our systems.

No Tracking

HeadshotKit has no third-party advertising, no tracking SDKs, and does not sell your data. We use your data only to run the service, process purchases, provide support, and prevent abuse.

Contact

Email support@keenshift.ai.