kikiPrivacy policy
Last updated October 14, 2026
kiki is a makeup coach app. An AI buddy turns a makeup look into steps, and it guides you with your camera and your voice. This policy explains what personal data we collect, why, who receives it, how long we keep it, and what rights and choices you have.
We run kiki from the United States. This policy applies to the kiki app and to kikimakeup.com.
- Who we are
- The short version
- What we collect
- Your face, photos and voice
- How we use your data, and why
- How the AI works with your data
- Who receives your data
- How long we keep your data
- Your choices and rights
- Notes for your region
- Where your data goes
- Security
- Children
- Texts, notifications and the website
- Changes and contact
1. Who we are
kiki is run by Kiki Makeup ("kiki", "we", "us"). We are the controller of your personal data. A controller is the party that decides why and how the data is used.
You can reach us at support@kikimakeup.com.
2. The short version
- We collect only what the app needs: your phone number, your profile, your photos, your voice during a session, and your results.
- Your photos go to Anthropic. Your voice goes to OpenAI. Both run the AI that coaches you. The app asks for your agreement before the first photo or word of voice is sent.
- We do not sell your data. We do not share it for advertising. We do not track you across other apps or sites.
- We do not use facial recognition to identify you. We do not build a face template.
- You can delete your photos, a session, or your whole account in the app at any time.
3. What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account | Phone number, name, gender, email (optional), language, time zone, the buddy you pick | You, when you sign up and edit your profile |
| Photos | Look photos, makeup kit photos, face scan photo, photos you take in a session, your avatar | You, from your camera or photo library |
| Voice | What you say while your buddy talks with you in a session | Your microphone |
| Face notes | Placement notes from the face scan, such as where to put blush or contour | Generated by the AI from your face scan photo |
| Looks and kit | Looks you add or save, links you share, products in your kit, the plan the AI builds | You and the AI |
| Session records | Steps you finished, check results, grades, and a log of what happened, such as taps and the lines your buddy said | The app and the AI |
| Purchases | Plan, buddy time left, codes you redeem, purchase receipts | Apple, RevenueCat and you |
| Device and technical | Push notification token, IP address and request time in server logs, error details | Your phone and our servers |
| Messages to us | Your email and what you write to support | You |
We do not collect your precise location, your contacts, or your advertising identifier. The app has no analytics or advertising software in it. We do not use data brokers.
We do not ask for health data. Do not add it to photos or notes. Apple handles your payment, and we never see your card number.
4. Your face, photos and voice
A makeup coach has to see your face, so we treat this data with extra care.
- The live camera stays on your phone. The app finds your face on the phone to check your pose and light. That check does not leave your phone.
- A photo leaves your phone only when you act. That means you tap Check, scan your kit or your face, add a look photo, or take a final photo.
- We do not identify you. We do not use facial recognition. We do not create or keep a faceprint, which is a mathematical map of your face. The face scan produces plain text notes about where to place makeup.
- Your voice goes to OpenAI only while a session is open. It goes straight from your phone to OpenAI. Our servers do not receive or keep the audio.
- You choose to keep results. If you turn off Save session photos, session photos are deleted when the session ends.
Do not add photos of other people unless they agree.
5. How we use your data, and why
If you live where the law asks for a legal basis (the GDPR in Europe and the UK, the LGPD in Brazil), this table gives it.
| What we do | Data | Legal basis |
|---|---|---|
| Sign you in and run your account | Phone number, profile | Contract: we need it to give you the app |
| Build your look plan, coach you and judge your steps | Photos, voice, looks, kit, face notes | Contract, and your consent for sending photos and voice to the AI providers |
| Show your sessions, results and grades | Session records, photos | Contract |
| Sell and manage plans, buddy time and codes | Purchases, account | Contract, and legal duty for tax and accounting records |
| Send practice reminders | Push token, reminder settings | Your consent. You can turn them off |
| Keep the service safe, stop fraud and abuse, fix errors | Server logs, technical data, account | Our legitimate interest in a secure, working service |
| Answer your questions and requests | Messages to us | Contract and legitimate interest |
| Follow the law and defend legal claims | As needed | Legal duty and legitimate interest |
You can withdraw consent at any time in the app or by writing to us. This does not affect what we did before. Without consent for the AI, kiki cannot coach you.
We do not sell your personal data, we do not share it for cross-context advertising, and we do not use it for profiling that has legal or similar effects on you.
6. How the AI works with your data
kiki uses AI models from other companies. We send them only what they need to answer you, such as the photo and the text of the step. They send back text: a plan, a check result, face notes, or a grade.
- The AI can make mistakes. Its checks and grades are coaching help. They are not a judgment about you, and they do not decide anything with legal effect.
- We do not use your photos or voice to train our own models.
- Under their terms for business customers, Anthropic and OpenAI do not use the data they receive through these services to train their models. They may keep it for a limited time to run and protect their services, which today is up to 30 days. Their own policies are the final word.
7. Who receives your data
We share data with service providers who work for us under contract. Each gets only what it needs.
| Provider | What it does | What it receives |
|---|---|---|
| Anthropic | Runs the AI that reads photos and builds plans | Photos and the text sent with them |
| OpenAI | Runs your buddy's live voice | Your voice, and text about the current step |
| Amazon Web Services | Stores your photos and sends sign-in text messages | Photos, your phone number, the sign-in code |
| Linode (Akamai) | Hosts our servers and database | All account data stored by kiki |
| Expo | Delivers push notifications | Push token and the reminder text |
| Apple | Takes payment and runs the App Store | Purchase details. Apple has its own privacy policy |
| RevenueCat | Checks subscriptions and purchases | An account identifier and purchase details |
When you share a video link, our servers open that link to read the look. The site that hosts the link may see a request from us.
We may also share data when the law requires it, to answer a valid legal request, to protect people's safety or our rights, or in a sale or merger of our business. In that case we will tell you and the new owner must follow this policy.
8. How long we keep your data
| Data | How long |
|---|---|
| Account, profile, looks, kit, session records | Until you delete them or your account |
| Photos | Until you delete them. Session photos are deleted at the end of the session if Save session photos is off |
| Voice audio | We do not keep it. OpenAI may keep it for a short time, as described above |
| Sign-in codes | Expire after 5 minutes |
| Sign-in sessions on your phone | Access expires after 6 hours. Refresh expires after 30 days |
| Purchase records | Kept without your identity after you delete your account, as Apple and tax rules require |
| Free trial record | After you delete your account, we keep a one-way code made from your phone number, so the same number does not get a second free trial. The code cannot be turned back into your number |
| Server logs | A limited time, for security and fixing errors |
| Messages to support | As long as needed to help you, then deleted |
When you delete your account, we delete your profile, looks, kit, sessions, photos and phone number, and sign-in stops at once. Copies in backups are removed when the backups expire on their normal cycle.
9. Your choices and rights
In the app:
- Delete one session, with its photos, in the Sessions tab.
- Delete all your photos: Settings, then Privacy and photos, then Delete all my photos.
- Delete your account: Settings, then Delete account.
- Turn off Save session photos in Settings, then Privacy and photos.
- Turn off reminders in Settings, then Notifications.
- Turn off camera, microphone, photo or notification access in your phone settings. Some features will stop working.
Depending on where you live, you may also have the right to:
- know what data we hold about you, and get a copy of it, in a common format;
- correct data that is wrong;
- delete your data;
- limit or object to some uses of your data;
- withdraw consent;
- complain to a data protection authority.
To use a right, write to support@kikimakeup.com from the contact details you used in kiki. We may ask you to confirm it is you. We answer within 30 days, and up to 45 days where the law allows more time. We do not charge for this, and we do not treat you differently for using your rights. If we say no, we tell you why. You can ask a person to act for you, and we may ask for proof that they can.
10. Notes for your region
United States. If you live in California, Colorado, Connecticut, Texas, Virginia, Utah, Oregon or another state with a privacy law, you have the rights in section 9. In the last 12 months we did not sell personal data and did not share it for cross-context behavioral advertising, so there is nothing to opt out of. We collect the categories in section 3, which include identifiers, photos and audio, commercial information (purchases), internet and device data, and inferences such as face notes. We use them for the purposes in section 5 and disclose them to the providers in section 7. If we deny a request, you can appeal by writing to us with the word "Appeal" in the subject line.
European Economic Area and United Kingdom. The legal bases are in section 5. You can complain to your local data protection authority. Transfers to the United States are covered in section 11.
Brazil. Under the LGPD, you have the rights in section 9. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
11. Where your data goes
We and our providers process data mainly in the United States, and possibly in other countries. If you live in Europe, the UK or Brazil, your data moves to countries with different privacy laws. When the law requires it, we rely on safeguards such as the standard contractual clauses that our providers offer.
12. Security
We send data over encrypted connections. We keep photos in private storage, and only your account can open them. Access to our servers is limited. No system is perfectly safe. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
13. Children
kiki is not for children under 13, and we do not knowingly collect their data. If your local law sets a higher age to use an app like this, you must meet it. If you think a child gave us data, write to us and we will delete it.
14. Texts, notifications and the website
- Text messages. We send only sign-in codes. We do not send marketing texts. Your carrier may charge for messages.
- Push notifications. They are optional and only remind you to practice.
- Cookies. The app does not use cookies. The website does not set cookies or use analytics. It loads fonts from Google Fonts, so Google receives your IP address when you open the site.
- Do Not Track. We do not track you across sites or apps, so there is nothing to turn off.
15. Changes and contact
If we change this policy, we update the date above. For a large change, we tell you in the app before it applies.
Kiki Makeup. Questions or requests? Write to support@kikimakeup.com.