TrustTone Privacy Policy

Last updated: September 30, 2026

TrustTone is operated by W12 Consultoria ("we," "us," or "our"). This policy explains how information is handled when you use the TrustTone iOS app. For privacy questions or requests, contact support@w12consultoria.com.

Information you choose to provide

You may select a face photo from your device to request a personal color analysis. TrustTone can suggest a color season and subtype, observations about visible skin tone, undertone, eyes, hair, and contrast, a color palette, and styling tips. These are automated style suggestions, not identification, medical advice, or a guarantee of accuracy. Lighting, camera settings, and image quality can affect the result.

The app keeps the selected image and displayed result in memory while you use the analysis screen. It does not currently offer a saved-photo or analysis-history feature on your device. Your original photo remains in your photo library under your device and photo service settings. TrustTone uses Apple's photo picker to let you select a photo; it does not request access to your entire photo library for this feature.

Your app language, consent choice, and a few app preferences may be stored on your device. Your device's backup settings may affect whether these preferences are included in a backup.

Optional AI photo analysis

Before the first analysis, the app asks for your explicit consent to share the selected photo for AI processing. If you agree and start an analysis, the app compresses the photo and sends it, your app language, a request identifier, a RevenueCat app user identifier, and a signed Apple subscription transaction to a Firebase Cloud Function. Firebase Authentication supplies a pseudonymous account identifier, and Firebase App Check checks app and device integrity.

Our function verifies your subscription with RevenueCat, processes the photo, and sends the photo and language instruction to the OpenAI API for visual analysis. A photo may contain a visible face and other personal information. Only submit photos you have permission to share. TrustTone does not use face recognition to identify people and does not create a biometric face template.

We do not save the submitted photo in our Firestore database or intentionally include it in our application logs. The image is processed transiently by our server and OpenAI. OpenAI's API data controls state that API inputs and outputs are not used to train models by default unless the API customer opts in. OpenAI may retain abuse-monitoring logs containing customer content for up to 30 days by default, or longer when required by law or to protect its services. Image inputs may also be retained for manual review if OpenAI flags possible child sexual abuse material. See OpenAI's API data controls.

You can decline analysis by not submitting a photo. You can withdraw AI consent in TrustTone Settings to prevent future submissions. Withdrawal does not delete information already sent or stop a request already in progress.

Analysis records and limits

We store the generated analysis result, request status, timestamps, and pseudonymous identifiers in Firebase Firestore to complete requests, recover a completed request when possible, prevent duplicate processing, protect the service, and enforce analysis limits. We also store daily usage counts and temporary request or subscription locks. A submitted request that fails or has an uncertain outcome may still count toward a limit. Daily limits reset at midnight UTC.

These Firestore records currently have no automatic expiration period. We do not store the submitted photo with the result. Deleting the app or withdrawing AI consent does not automatically delete server records or reset a daily limit.

Subscriptions and technical data

Apple processes purchases. RevenueCat displays subscription offers, restores purchases, and helps us verify TrustTone PRO access. RevenueCat may receive an app user identifier, subscription and purchase information, and device or technical information. We do not receive your full payment-card number. Our server checks the signed Apple transaction and RevenueCat subscription state before performing an analysis. See RevenueCat's privacy policy and Apple's privacy policy.

Firebase Authentication creates a pseudonymous user ID. Firebase App Check uses app and device integrity signals to reduce abuse. Firebase Cloud Functions, Firestore, and Remote Config support analysis, records, limits, and app configuration. Google and these services may process technical data such as IP address, device information, app identifiers, and request metadata. See Firebase's privacy and security information.

If you choose to email support, your address, message, and any app or device details included in the message are handled by your email provider and ours so we can respond. Sending an email is optional.

TrustTone does not currently use an advertising SDK, Firebase Analytics, or Firebase Crashlytics. We do not use your photo for advertising. The app does not request precise location or send your time zone as part of an analysis.

Why and where information is processed

We use information to provide the analysis you request, present your results, verify subscriptions, enforce limits, answer support requests, and protect the service. We share information with Firebase/Google, OpenAI, RevenueCat, Apple, and email providers only as needed for these functions, or when required by law. These providers may process information outside your country, including in the United States, under their applicable terms and safeguards.

Access, deletion, and your choices

To request access to or deletion of information we hold, email support@w12consultoria.com. We may need information to locate records and verify that they relate to your pseudonymous account or subscription. We will assess requests under applicable law. Provider records, backups, purchase records, security records, and information retained for legal obligations may follow separate retention rules. Deletion of analysis records does not refund or cancel an Apple subscription; manage subscriptions in your Apple account.

Depending on where you live, you may have rights to confirmation of processing, access, correction, portability, restriction, objection, withdrawal of consent, or deletion, subject to legal exceptions. Brazilian users can read about their rights on the Brazilian Data Protection Authority website.

Children and security

TrustTone is not directed to children under 13. If you believe a child has submitted personal information, contact us so we can review the request and take appropriate action.

We use encrypted network connections and restrict direct client access to our Firestore database. No transmission or storage method is completely secure.

Changes and contact

We may update this policy as the app changes. We will revise the date above and communicate material changes in the app or through another appropriate method.

W12 Consultoria
Email: support@w12consultoria.com